Action not permitted
Modal body text goes here.
Modal Title
Modal Body
CVE-2015-0350 (GCVE-0-2015-0350)
Vulnerability from cvelistv5 – Published: 2015-04-14 22:00 – Updated: 2024-08-06 04:03- n/a
| URL | Tags |
|---|---|
| http://lists.opensuse.org/opensuse-security-annou… | vendor-advisoryx_refsource_SUSE |
| http://lists.opensuse.org/opensuse-security-annou… | vendor-advisoryx_refsource_SUSE |
| http://www.securityfocus.com/bid/74062 | vdb-entryx_refsource_BID |
| https://security.gentoo.org/glsa/201504-07 | vendor-advisoryx_refsource_GENTOO |
| http://www.securitytracker.com/id/1032105 | vdb-entryx_refsource_SECTRACK |
| http://rhn.redhat.com/errata/RHSA-2015-0813.html | vendor-advisoryx_refsource_REDHAT |
| https://helpx.adobe.com/security/products/flash-p… | x_refsource_CONFIRM |
| http://lists.opensuse.org/opensuse-security-annou… | vendor-advisoryx_refsource_SUSE |
| http://lists.opensuse.org/opensuse-security-annou… | vendor-advisoryx_refsource_SUSE |
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-06T04:03:11.040Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"name": "openSUSE-SU-2015:0718",
"tags": [
"vendor-advisory",
"x_refsource_SUSE",
"x_transferred"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00010.html"
},
{
"name": "SUSE-SU-2015:0722",
"tags": [
"vendor-advisory",
"x_refsource_SUSE",
"x_transferred"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00011.html"
},
{
"name": "74062",
"tags": [
"vdb-entry",
"x_refsource_BID",
"x_transferred"
],
"url": "http://www.securityfocus.com/bid/74062"
},
{
"name": "GLSA-201504-07",
"tags": [
"vendor-advisory",
"x_refsource_GENTOO",
"x_transferred"
],
"url": "https://security.gentoo.org/glsa/201504-07"
},
{
"name": "1032105",
"tags": [
"vdb-entry",
"x_refsource_SECTRACK",
"x_transferred"
],
"url": "http://www.securitytracker.com/id/1032105"
},
{
"name": "RHSA-2015:0813",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT",
"x_transferred"
],
"url": "http://rhn.redhat.com/errata/RHSA-2015-0813.html"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "https://helpx.adobe.com/security/products/flash-player/apsb15-06.html"
},
{
"name": "openSUSE-SU-2015:0725",
"tags": [
"vendor-advisory",
"x_refsource_SUSE",
"x_transferred"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00013.html"
},
{
"name": "SUSE-SU-2015:0723",
"tags": [
"vendor-advisory",
"x_refsource_SUSE",
"x_transferred"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00012.html"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"datePublic": "2015-04-14T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-0347, CVE-2015-0352, CVE-2015-0353, CVE-2015-0354, CVE-2015-0355, CVE-2015-0360, CVE-2015-3038, CVE-2015-3041, CVE-2015-3042, and CVE-2015-3043."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2016-12-30T16:57:01.000Z",
"orgId": "078d4453-3bcd-4900-85e6-15281da43538",
"shortName": "adobe"
},
"references": [
{
"name": "openSUSE-SU-2015:0718",
"tags": [
"vendor-advisory",
"x_refsource_SUSE"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00010.html"
},
{
"name": "SUSE-SU-2015:0722",
"tags": [
"vendor-advisory",
"x_refsource_SUSE"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00011.html"
},
{
"name": "74062",
"tags": [
"vdb-entry",
"x_refsource_BID"
],
"url": "http://www.securityfocus.com/bid/74062"
},
{
"name": "GLSA-201504-07",
"tags": [
"vendor-advisory",
"x_refsource_GENTOO"
],
"url": "https://security.gentoo.org/glsa/201504-07"
},
{
"name": "1032105",
"tags": [
"vdb-entry",
"x_refsource_SECTRACK"
],
"url": "http://www.securitytracker.com/id/1032105"
},
{
"name": "RHSA-2015:0813",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "http://rhn.redhat.com/errata/RHSA-2015-0813.html"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://helpx.adobe.com/security/products/flash-player/apsb15-06.html"
},
{
"name": "openSUSE-SU-2015:0725",
"tags": [
"vendor-advisory",
"x_refsource_SUSE"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00013.html"
},
{
"name": "SUSE-SU-2015:0723",
"tags": [
"vendor-advisory",
"x_refsource_SUSE"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00012.html"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "psirt@adobe.com",
"ID": "CVE-2015-0350",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-0347, CVE-2015-0352, CVE-2015-0353, CVE-2015-0354, CVE-2015-0355, CVE-2015-0360, CVE-2015-3038, CVE-2015-3041, CVE-2015-3042, and CVE-2015-3043."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "openSUSE-SU-2015:0718",
"refsource": "SUSE",
"url": "http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00010.html"
},
{
"name": "SUSE-SU-2015:0722",
"refsource": "SUSE",
"url": "http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00011.html"
},
{
"name": "74062",
"refsource": "BID",
"url": "http://www.securityfocus.com/bid/74062"
},
{
"name": "GLSA-201504-07",
"refsource": "GENTOO",
"url": "https://security.gentoo.org/glsa/201504-07"
},
{
"name": "1032105",
"refsource": "SECTRACK",
"url": "http://www.securitytracker.com/id/1032105"
},
{
"name": "RHSA-2015:0813",
"refsource": "REDHAT",
"url": "http://rhn.redhat.com/errata/RHSA-2015-0813.html"
},
{
"name": "https://helpx.adobe.com/security/products/flash-player/apsb15-06.html",
"refsource": "CONFIRM",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb15-06.html"
},
{
"name": "openSUSE-SU-2015:0725",
"refsource": "SUSE",
"url": "http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00013.html"
},
{
"name": "SUSE-SU-2015:0723",
"refsource": "SUSE",
"url": "http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00012.html"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "078d4453-3bcd-4900-85e6-15281da43538",
"assignerShortName": "adobe",
"cveId": "CVE-2015-0350",
"datePublished": "2015-04-14T22:00:00.000Z",
"dateReserved": "2014-12-01T00:00:00.000Z",
"dateUpdated": "2024-08-06T04:03:11.040Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1",
"vulnerability-lookup:meta": {
"epss": {
"cve": "CVE-2015-0350",
"date": "2026-05-20",
"epss": "0.03683",
"percentile": "0.88064"
},
"fkie_nvd": {
"configurations": "[{\"operator\": \"AND\", \"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:adobe:flash_player:*:*:*:*:*:*:*:*\", \"versionEndIncluding\": \"11.2.202.451\", \"matchCriteriaId\": \"EB3AED03-5107-4120-8815-55FF8EE41498\"}]}, {\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": false, \"criteria\": \"cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"703AF700-7A70-47E2-BC3A-7FD03B3CA9C1\"}]}]}, {\"operator\": \"AND\", \"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:adobe:flash_player:*:*:*:*:*:*:*:*\", \"versionEndIncluding\": \"13.0.0.264\", \"matchCriteriaId\": \"35A39AB2-E3C6-4C70-8CC9-0050184DB2B5\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:adobe:flash_player:14.0.0.125:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"D5D7202D-56DF-400B-9F09-E7D9938222D3\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:adobe:flash_player:14.0.0.145:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"4D4F0D21-A64B-46C1-9591-96529661DF0B\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:adobe:flash_player:14.0.0.176:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"86961019-3B81-458E-949F-A2F006EA55FE\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:adobe:flash_player:14.0.0.179:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"25895BE9-71FD-4DE7-90FC-0199470A8738\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:adobe:flash_player:15.0.0.152:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"4D55A950-7D48-413C-AD43-6AC64FBE790C\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:adobe:flash_player:15.0.0.167:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"F1A22B74-453D-4A8A-B79A-2B3143A0D995\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:adobe:flash_player:15.0.0.189:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"3FE4B077-67D1-4B25-976E-715FB6B2A1D1\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:adobe:flash_player:15.0.0.223:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"BFC91B68-6B35-47BD-BC02-3F836E772CF3\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:adobe:flash_player:15.0.0.239:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"A3BE6004-C30A-46E2-9F25-785E12BBF640\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:adobe:flash_player:15.0.0.246:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"CFE8E51F-7A32-41A4-B03A-73E52EB64C04\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:adobe:flash_player:16.0.0.235:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"3E13E927-A77C-4681-AFDE-A5A14093234D\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:adobe:flash_player:16.0.0.257:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"27629FF0-5EB9-476F-B5B3-115F663AB65E\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:adobe:flash_player:16.0.0.287:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"C0AB583F-3EBD-47B6-975E-7754CC32CCA7\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:adobe:flash_player:16.0.0.296:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"B58DE1A9-0510-4B65-AB18-75F9263A7818\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:adobe:flash_player:17.0.0.134:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"1BC4FAD0-4A54-4EDF-BE39-28138B34E719\"}]}, {\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": false, \"criteria\": \"cpe:2.3:o:apple:mac_os_x:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"4781BF1E-8A4E-4AFF-9540-23D523EE30DD\"}, {\"vulnerable\": false, \"criteria\": \"cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"A2572D17-1DE6-457B-99CC-64AFD54487EA\"}]}]}, {\"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:opensuse:opensuse:13.1:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"A10BC294-9196-425F-9FB0-B1625465B47F\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:opensuse:opensuse:13.2:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"03117DF1-3BEC-4B8D-AD63-DBBDB2126081\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:suse:suse_linux_enterprise_desktop:11.0:sp3:*:*:*:*:*:*\", \"matchCriteriaId\": \"777F6902-6EFA-482A-9A17-48DA5BDDB9CD\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:suse:suse_linux_enterprise_desktop:12.0:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"6ECE2BD2-7E6B-4474-B410-4A28ED8DB6A0\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:suse:suse_linux_workstation_extension:12.0:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"5FC37427-039A-4B66-B01A-4CA876819EF3\"}]}]}, {\"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:redhat:enterprise_linux_desktop_supplementary:5.0:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"CC2EDDE6-49F2-41D3-BCB2-F49886A2A170\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:redhat:enterprise_linux_desktop_supplementary:6.0:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"B8C6E104-EDBC-481E-85B8-D39ED2058D39\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:redhat:enterprise_linux_server_supplementary:5.0:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"FB3FB071-FCCC-4425-AFBF-77287C1B8F7B\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:redhat:enterprise_linux_server_supplementary:6.0:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"4B74C62D-4A6D-4A4F-ADF6-A508322CD447\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:redhat:enterprise_linux_server_supplementary_eus:6.6.z:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"04A2B180-08EF-4BE1-B1F2-48782874D6DB\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:redhat:enterprise_linux_workstation_supplementary:6.0:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"6E89B38A-3697-46DD-BB3F-E8D2373588BE\"}]}]}]",
"descriptions": "[{\"lang\": \"en\", \"value\": \"Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-0347, CVE-2015-0352, CVE-2015-0353, CVE-2015-0354, CVE-2015-0355, CVE-2015-0360, CVE-2015-3038, CVE-2015-3041, CVE-2015-3042, and CVE-2015-3043.\"}, {\"lang\": \"es\", \"value\": \"Adobe Flash Player anterior a 13.0.0.281 y 14.x hasta 17.x anterior a 17.0.0.169 en Windows y OS X y anterior a 11.2.202.457 en Linux permite a atacantes ejecutar c\\u00f3digo arbitrario o causar una denegaci\\u00f3n de servicio (corrupci\\u00f3n de memoria) a trav\\u00e9s de vectores no especificados, una vulnerabilidad diferente a CVE-2015-0347, CVE-2015-0352, CVE-2015-0353, CVE-2015-0354, CVE-2015-0355, CVE-2015-0360, CVE-2015-3038, CVE-2015-3041, CVE-2015-3042, y CVE-2015-3043.\"}]",
"id": "CVE-2015-0350",
"lastModified": "2024-11-21T02:22:52.453",
"metrics": "{\"cvssMetricV2\": [{\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"cvssData\": {\"version\": \"2.0\", \"vectorString\": \"AV:N/AC:L/Au:N/C:C/I:C/A:C\", \"baseScore\": 10.0, \"accessVector\": \"NETWORK\", \"accessComplexity\": \"LOW\", \"authentication\": \"NONE\", \"confidentialityImpact\": \"COMPLETE\", \"integrityImpact\": \"COMPLETE\", \"availabilityImpact\": \"COMPLETE\"}, \"baseSeverity\": \"HIGH\", \"exploitabilityScore\": 10.0, \"impactScore\": 10.0, \"acInsufInfo\": true, \"obtainAllPrivilege\": false, \"obtainUserPrivilege\": false, \"obtainOtherPrivilege\": false, \"userInteractionRequired\": false}]}",
"published": "2015-04-14T22:59:04.427",
"references": "[{\"url\": \"http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00010.html\", \"source\": \"psirt@adobe.com\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00011.html\", \"source\": \"psirt@adobe.com\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00012.html\", \"source\": \"psirt@adobe.com\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00013.html\", \"source\": \"psirt@adobe.com\"}, {\"url\": \"http://rhn.redhat.com/errata/RHSA-2015-0813.html\", \"source\": \"psirt@adobe.com\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"http://www.securityfocus.com/bid/74062\", \"source\": \"psirt@adobe.com\"}, {\"url\": \"http://www.securitytracker.com/id/1032105\", \"source\": \"psirt@adobe.com\"}, {\"url\": \"https://helpx.adobe.com/security/products/flash-player/apsb15-06.html\", \"source\": \"psirt@adobe.com\", \"tags\": [\"Patch\", \"Vendor Advisory\"]}, {\"url\": \"https://security.gentoo.org/glsa/201504-07\", \"source\": \"psirt@adobe.com\"}, {\"url\": \"http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00010.html\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00011.html\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00012.html\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00013.html\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://rhn.redhat.com/errata/RHSA-2015-0813.html\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"http://www.securityfocus.com/bid/74062\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://www.securitytracker.com/id/1032105\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"https://helpx.adobe.com/security/products/flash-player/apsb15-06.html\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Patch\", \"Vendor Advisory\"]}, {\"url\": \"https://security.gentoo.org/glsa/201504-07\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}]",
"sourceIdentifier": "psirt@adobe.com",
"vulnStatus": "Modified",
"weaknesses": "[{\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"description\": [{\"lang\": \"en\", \"value\": \"NVD-CWE-noinfo\"}]}]"
},
"nvd": "{\"cve\":{\"id\":\"CVE-2015-0350\",\"sourceIdentifier\":\"psirt@adobe.com\",\"published\":\"2015-04-14T22:59:04.427\",\"lastModified\":\"2026-05-06T22:30:45.220\",\"vulnStatus\":\"Modified\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-0347, CVE-2015-0352, CVE-2015-0353, CVE-2015-0354, CVE-2015-0355, CVE-2015-0360, CVE-2015-3038, CVE-2015-3041, CVE-2015-3042, and CVE-2015-3043.\"},{\"lang\":\"es\",\"value\":\"Adobe Flash Player anterior a 13.0.0.281 y 14.x hasta 17.x anterior a 17.0.0.169 en Windows y OS X y anterior a 11.2.202.457 en Linux permite a atacantes ejecutar c\u00f3digo arbitrario o causar una denegaci\u00f3n de servicio (corrupci\u00f3n de memoria) a trav\u00e9s de vectores no especificados, una vulnerabilidad diferente a CVE-2015-0347, CVE-2015-0352, CVE-2015-0353, CVE-2015-0354, CVE-2015-0355, CVE-2015-0360, CVE-2015-3038, CVE-2015-3041, CVE-2015-3042, y CVE-2015-3043.\"}],\"metrics\":{\"cvssMetricV2\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"2.0\",\"vectorString\":\"AV:N/AC:L/Au:N/C:C/I:C/A:C\",\"baseScore\":10.0,\"accessVector\":\"NETWORK\",\"accessComplexity\":\"LOW\",\"authentication\":\"NONE\",\"confidentialityImpact\":\"COMPLETE\",\"integrityImpact\":\"COMPLETE\",\"availabilityImpact\":\"COMPLETE\"},\"baseSeverity\":\"HIGH\",\"exploitabilityScore\":10.0,\"impactScore\":10.0,\"acInsufInfo\":true,\"obtainAllPrivilege\":false,\"obtainUserPrivilege\":false,\"obtainOtherPrivilege\":false,\"userInteractionRequired\":false}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"NVD-CWE-noinfo\"}]}],\"configurations\":[{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:flash_player:*:*:*:*:*:*:*:*\",\"versionEndIncluding\":\"11.2.202.451\",\"matchCriteriaId\":\"EB3AED03-5107-4120-8815-55FF8EE41498\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"703AF700-7A70-47E2-BC3A-7FD03B3CA9C1\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:flash_player:*:*:*:*:*:*:*:*\",\"versionEndIncluding\":\"13.0.0.264\",\"matchCriteriaId\":\"35A39AB2-E3C6-4C70-8CC9-0050184DB2B5\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:flash_player:14.0.0.125:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"D5D7202D-56DF-400B-9F09-E7D9938222D3\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:flash_player:14.0.0.145:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"4D4F0D21-A64B-46C1-9591-96529661DF0B\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:flash_player:14.0.0.176:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"86961019-3B81-458E-949F-A2F006EA55FE\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:flash_player:14.0.0.179:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"25895BE9-71FD-4DE7-90FC-0199470A8738\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:flash_player:15.0.0.152:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"4D55A950-7D48-413C-AD43-6AC64FBE790C\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:flash_player:15.0.0.167:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"F1A22B74-453D-4A8A-B79A-2B3143A0D995\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:flash_player:15.0.0.189:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"3FE4B077-67D1-4B25-976E-715FB6B2A1D1\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:flash_player:15.0.0.223:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"BFC91B68-6B35-47BD-BC02-3F836E772CF3\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:flash_player:15.0.0.239:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"A3BE6004-C30A-46E2-9F25-785E12BBF640\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:flash_player:15.0.0.246:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"CFE8E51F-7A32-41A4-B03A-73E52EB64C04\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:flash_player:16.0.0.235:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"3E13E927-A77C-4681-AFDE-A5A14093234D\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:flash_player:16.0.0.257:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"27629FF0-5EB9-476F-B5B3-115F663AB65E\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:flash_player:16.0.0.287:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"C0AB583F-3EBD-47B6-975E-7754CC32CCA7\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:flash_player:16.0.0.296:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"B58DE1A9-0510-4B65-AB18-75F9263A7818\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:flash_player:17.0.0.134:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"1BC4FAD0-4A54-4EDF-BE39-28138B34E719\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:o:apple:mac_os_x:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"4781BF1E-8A4E-4AFF-9540-23D523EE30DD\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"A2572D17-1DE6-457B-99CC-64AFD54487EA\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:opensuse:opensuse:13.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"A10BC294-9196-425F-9FB0-B1625465B47F\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:opensuse:opensuse:13.2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"03117DF1-3BEC-4B8D-AD63-DBBDB2126081\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:suse:suse_linux_enterprise_desktop:11.0:sp3:*:*:*:*:*:*\",\"matchCriteriaId\":\"777F6902-6EFA-482A-9A17-48DA5BDDB9CD\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:suse:suse_linux_enterprise_desktop:12.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"6ECE2BD2-7E6B-4474-B410-4A28ED8DB6A0\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:suse:suse_linux_workstation_extension:12.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"5FC37427-039A-4B66-B01A-4CA876819EF3\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:redhat:enterprise_linux_desktop_supplementary:5.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"CC2EDDE6-49F2-41D3-BCB2-F49886A2A170\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:redhat:enterprise_linux_desktop_supplementary:6.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"B8C6E104-EDBC-481E-85B8-D39ED2058D39\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:redhat:enterprise_linux_server_supplementary:5.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"FB3FB071-FCCC-4425-AFBF-77287C1B8F7B\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:redhat:enterprise_linux_server_supplementary:6.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"4B74C62D-4A6D-4A4F-ADF6-A508322CD447\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:redhat:enterprise_linux_server_supplementary_eus:6.6.z:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"04A2B180-08EF-4BE1-B1F2-48782874D6DB\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:redhat:enterprise_linux_workstation_supplementary:6.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"6E89B38A-3697-46DD-BB3F-E8D2373588BE\"}]}]}],\"references\":[{\"url\":\"http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00010.html\",\"source\":\"psirt@adobe.com\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00011.html\",\"source\":\"psirt@adobe.com\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00012.html\",\"source\":\"psirt@adobe.com\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00013.html\",\"source\":\"psirt@adobe.com\"},{\"url\":\"http://rhn.redhat.com/errata/RHSA-2015-0813.html\",\"source\":\"psirt@adobe.com\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://www.securityfocus.com/bid/74062\",\"source\":\"psirt@adobe.com\"},{\"url\":\"http://www.securitytracker.com/id/1032105\",\"source\":\"psirt@adobe.com\"},{\"url\":\"https://helpx.adobe.com/security/products/flash-player/apsb15-06.html\",\"source\":\"psirt@adobe.com\",\"tags\":[\"Patch\",\"Vendor Advisory\"]},{\"url\":\"https://security.gentoo.org/glsa/201504-07\",\"source\":\"psirt@adobe.com\"},{\"url\":\"http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00010.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00011.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00012.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00013.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://rhn.redhat.com/errata/RHSA-2015-0813.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://www.securityfocus.com/bid/74062\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.securitytracker.com/id/1032105\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://helpx.adobe.com/security/products/flash-player/apsb15-06.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\",\"Vendor Advisory\"]},{\"url\":\"https://security.gentoo.org/glsa/201504-07\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"}]}}"
}
}
CERTFR-2015-AVI-166
Vulnerability from certfr_avis - Published: - Updated:
De multiples vulnérabilités ont été corrigées dans les produits Adobe. Elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance et une injection de code indirecte à distance (XSS).
Solution
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
None| Vendor | Product | Description | ||
|---|---|---|---|---|
| Adobe | N/A | Adobe Flash Player versions 11.2.202.451 et antérieures | ||
| Adobe | ColdFusion | Adobe ColdFusion version 10 | ||
| Adobe | ColdFusion | Adobe ColdFusion version 11 | ||
| Adobe | N/A | Adobe Flash Player versions 17.0.0.134 et antérieures | ||
| Adobe | N/A | Adobe Flash Player versions 13.0.0.277 et antérieures |
| Title | Publication Time | Tags | ||||||
|---|---|---|---|---|---|---|---|---|
|
||||||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "Adobe Flash Player versions 11.2.202.451 et ant\u00e9rieures",
"product": {
"name": "N/A",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": "Adobe ColdFusion version 10",
"product": {
"name": "ColdFusion",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": "Adobe ColdFusion version 11",
"product": {
"name": "ColdFusion",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": "Adobe Flash Player versions 17.0.0.134 et ant\u00e9rieures",
"product": {
"name": "N/A",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": "Adobe Flash Player versions 13.0.0.277 et ant\u00e9rieures",
"product": {
"name": "N/A",
"vendor": {
"name": "Adobe",
"scada": false
}
}
}
],
"affected_systems_content": null,
"content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
"cves": [
{
"name": "CVE-2015-0355",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-0355"
},
{
"name": "CVE-2015-3038",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-3038"
},
{
"name": "CVE-2015-3042",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-3042"
},
{
"name": "CVE-2015-3039",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-3039"
},
{
"name": "CVE-2015-0360",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-0360"
},
{
"name": "CVE-2015-0346",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-0346"
},
{
"name": "CVE-2015-0351",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-0351"
},
{
"name": "CVE-2015-0352",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-0352"
},
{
"name": "CVE-2015-0358",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-0358"
},
{
"name": "CVE-2015-3044",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-3044"
},
{
"name": "CVE-2015-0349",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-0349"
},
{
"name": "CVE-2015-0353",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-0353"
},
{
"name": "CVE-2015-0356",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-0356"
},
{
"name": "CVE-2015-3041",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-3041"
},
{
"name": "CVE-2015-3043",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-3043"
},
{
"name": "CVE-2015-0354",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-0354"
},
{
"name": "CVE-2015-0359",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-0359"
},
{
"name": "CVE-2015-0345",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-0345"
},
{
"name": "CVE-2015-0347",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-0347"
},
{
"name": "CVE-2015-0348",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-0348"
},
{
"name": "CVE-2015-0357",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-0357"
},
{
"name": "CVE-2015-0350",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-0350"
},
{
"name": "CVE-2015-3040",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-3040"
}
],
"links": [],
"reference": "CERTFR-2015-AVI-166",
"revisions": [
{
"description": "version initiale.",
"revision_date": "2015-04-15T00:00:00.000000"
}
],
"risks": [
{
"description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
},
{
"description": "Injection de code indirecte \u00e0 distance"
}
],
"summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 corrig\u00e9es dans les produits \u003cspan\nclass=\"textit\"\u003eAdobe\u003c/span\u003e. Elles permettent \u00e0 un attaquant de\nprovoquer une ex\u00e9cution de code arbitraire \u00e0 distance et une injection\nde code indirecte \u00e0 distance (XSS).\n",
"title": "Multiples vuln\u00e9rabilit\u00e9s dans les produits Adobe",
"vendor_advisories": [
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Adobe APSB15-06 du 14 avril 2015",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb15-06.html"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Adobe APSB15-07 du 14 avril 2015",
"url": "https://helpx.adobe.com/security/products/coldfusion/apsb15-07.html"
}
]
}
CERTFR-2015-AVI-166
Vulnerability from certfr_avis - Published: - Updated:
De multiples vulnérabilités ont été corrigées dans les produits Adobe. Elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance et une injection de code indirecte à distance (XSS).
Solution
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
None| Vendor | Product | Description | ||
|---|---|---|---|---|
| Adobe | N/A | Adobe Flash Player versions 11.2.202.451 et antérieures | ||
| Adobe | ColdFusion | Adobe ColdFusion version 10 | ||
| Adobe | ColdFusion | Adobe ColdFusion version 11 | ||
| Adobe | N/A | Adobe Flash Player versions 17.0.0.134 et antérieures | ||
| Adobe | N/A | Adobe Flash Player versions 13.0.0.277 et antérieures |
| Title | Publication Time | Tags | ||||||
|---|---|---|---|---|---|---|---|---|
|
||||||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "Adobe Flash Player versions 11.2.202.451 et ant\u00e9rieures",
"product": {
"name": "N/A",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": "Adobe ColdFusion version 10",
"product": {
"name": "ColdFusion",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": "Adobe ColdFusion version 11",
"product": {
"name": "ColdFusion",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": "Adobe Flash Player versions 17.0.0.134 et ant\u00e9rieures",
"product": {
"name": "N/A",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": "Adobe Flash Player versions 13.0.0.277 et ant\u00e9rieures",
"product": {
"name": "N/A",
"vendor": {
"name": "Adobe",
"scada": false
}
}
}
],
"affected_systems_content": null,
"content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
"cves": [
{
"name": "CVE-2015-0355",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-0355"
},
{
"name": "CVE-2015-3038",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-3038"
},
{
"name": "CVE-2015-3042",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-3042"
},
{
"name": "CVE-2015-3039",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-3039"
},
{
"name": "CVE-2015-0360",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-0360"
},
{
"name": "CVE-2015-0346",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-0346"
},
{
"name": "CVE-2015-0351",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-0351"
},
{
"name": "CVE-2015-0352",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-0352"
},
{
"name": "CVE-2015-0358",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-0358"
},
{
"name": "CVE-2015-3044",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-3044"
},
{
"name": "CVE-2015-0349",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-0349"
},
{
"name": "CVE-2015-0353",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-0353"
},
{
"name": "CVE-2015-0356",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-0356"
},
{
"name": "CVE-2015-3041",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-3041"
},
{
"name": "CVE-2015-3043",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-3043"
},
{
"name": "CVE-2015-0354",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-0354"
},
{
"name": "CVE-2015-0359",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-0359"
},
{
"name": "CVE-2015-0345",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-0345"
},
{
"name": "CVE-2015-0347",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-0347"
},
{
"name": "CVE-2015-0348",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-0348"
},
{
"name": "CVE-2015-0357",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-0357"
},
{
"name": "CVE-2015-0350",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-0350"
},
{
"name": "CVE-2015-3040",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-3040"
}
],
"links": [],
"reference": "CERTFR-2015-AVI-166",
"revisions": [
{
"description": "version initiale.",
"revision_date": "2015-04-15T00:00:00.000000"
}
],
"risks": [
{
"description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
},
{
"description": "Injection de code indirecte \u00e0 distance"
}
],
"summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 corrig\u00e9es dans les produits \u003cspan\nclass=\"textit\"\u003eAdobe\u003c/span\u003e. Elles permettent \u00e0 un attaquant de\nprovoquer une ex\u00e9cution de code arbitraire \u00e0 distance et une injection\nde code indirecte \u00e0 distance (XSS).\n",
"title": "Multiples vuln\u00e9rabilit\u00e9s dans les produits Adobe",
"vendor_advisories": [
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Adobe APSB15-06 du 14 avril 2015",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb15-06.html"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Adobe APSB15-07 du 14 avril 2015",
"url": "https://helpx.adobe.com/security/products/coldfusion/apsb15-07.html"
}
]
}
BDU:2015-10271
Vulnerability from fstec - Published: 14.04.2015{
"CVSS 2.0": "AV:N/AC:L/Au:N/C:C/I:C/A:C",
"CVSS 3.0": null,
"CVSS 4.0": null,
"remediation_\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": null,
"remediation_\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435": null,
"\u0412\u0435\u043d\u0434\u043e\u0440 \u041f\u041e": "Adobe Systems Inc.",
"\u0412\u0435\u0440\u0441\u0438\u044f \u041f\u041e": "\u0434\u043e 13.0.0.281 (Flash Player), \u043e\u0442 14.0 \u0434\u043e 17.0.0.169 (Flash Player)",
"\u0412\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u0435 \u043c\u0435\u0440\u044b \u043f\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044e": "\u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0439 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044f:\nhttp://helpx.adobe.com/security/products/flash-player/apsb15-06.html",
"\u0414\u0430\u0442\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f": "14.04.2015",
"\u0414\u0430\u0442\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0433\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f": "23.03.2021",
"\u0414\u0430\u0442\u0430 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438": "15.06.2015",
"\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": "BDU:2015-10271",
"\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u044b \u0434\u0440\u0443\u0433\u0438\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "CVE-2015-0350",
"\u0418\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430",
"\u041a\u043b\u0430\u0441\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043a\u043e\u0434\u0430",
"\u041d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 \u041f\u041e": "Flash Player",
"\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u041e\u0421 \u0438 \u0442\u0438\u043f \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b": "Apple Inc. MacOS X 32-bit, Microsoft Corp Windows - 64-bit, Microsoft Corp Windows - 32-bit, Apple Inc. MacOS X 64-bit",
"\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b Flash Player, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u0438\u043b\u0438 \u0432\u044b\u0437\u0432\u0430\u0442\u044c \u043e\u0442\u043a\u0430\u0437 \u0432 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u0438",
"\u041d\u0430\u043b\u0438\u0447\u0438\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
"\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "\u041e\u0448\u0438\u0431\u043a\u0438, \u043e\u043a\u0430\u0437\u044b\u0432\u0430\u044e\u0449\u0438\u0435 \u0432\u043e\u0437\u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0435 \u043d\u0430 \u043f\u0430\u043c\u044f\u0442\u044c (CWE-633)",
"\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b Flash Player \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043d\u0430\u0440\u0443\u0448\u0435\u043d\u0438\u0435\u043c \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u0438 \u043f\u0430\u043c\u044f\u0442\u0438. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e, \u0434\u0435\u0439\u0441\u0442\u0432\u0443\u044e\u0449\u0435\u043c\u0443 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e, \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u0438\u043b\u0438 \u0432\u044b\u0437\u0432\u0430\u0442\u044c \u043e\u0442\u043a\u0430\u0437 \u0432 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u0438",
"\u041f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
"\u041f\u0440\u043e\u0447\u0430\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f": "\u2013",
"\u0421\u0432\u044f\u0437\u044c \u0441 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430\u043c\u0438 \u0418\u0411": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
"\u0421\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u0430",
"\u0421\u043f\u043e\u0441\u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
"\u0421\u043f\u043e\u0441\u043e\u0431 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
"\u0421\u0441\u044b\u043b\u043a\u0438 \u043d\u0430 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0438": "https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2015-0350\n\nhttps://helpx.adobe.com/security/products/flash-player/apsb15-06.html",
"\u0421\u0442\u0430\u0442\u0443\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u043c",
"\u0422\u0438\u043f \u041f\u041e": "\u041f\u0440\u0438\u043a\u043b\u0430\u0434\u043d\u043e\u0435 \u041f\u041e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c",
"\u0422\u0438\u043f \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "CWE-633",
"\u0423\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 2.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 10)"
}
BDU:2015-10272
Vulnerability from fstec - Published: 14.04.2015{
"CVSS 2.0": "AV:N/AC:L/Au:N/C:C/I:C/A:C",
"CVSS 3.0": null,
"CVSS 4.0": null,
"remediation_\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": null,
"remediation_\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435": null,
"\u0412\u0435\u043d\u0434\u043e\u0440 \u041f\u041e": "Adobe Systems Inc.",
"\u0412\u0435\u0440\u0441\u0438\u044f \u041f\u041e": "\u0434\u043e 11.2.202.457 (Flash Player)",
"\u0412\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u0435 \u043c\u0435\u0440\u044b \u043f\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044e": "\u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0439 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044f:\nhttp://helpx.adobe.com/security/products/flash-player/apsb15-06.html",
"\u0414\u0430\u0442\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f": "14.04.2015",
"\u0414\u0430\u0442\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0433\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f": "23.03.2021",
"\u0414\u0430\u0442\u0430 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438": "15.06.2015",
"\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": "BDU:2015-10272",
"\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u044b \u0434\u0440\u0443\u0433\u0438\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "CVE-2015-0350",
"\u0418\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430",
"\u041a\u043b\u0430\u0441\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043a\u043e\u0434\u0430",
"\u041d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 \u041f\u041e": "Flash Player",
"\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u041e\u0421 \u0438 \u0442\u0438\u043f \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b": "\u0421\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u043e \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f Linux . 64-bit, \u0421\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u043e \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f Linux . 32-bit",
"\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b Flash Player, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u0438\u043b\u0438 \u0432\u044b\u0437\u0432\u0430\u0442\u044c \u043e\u0442\u043a\u0430\u0437 \u0432 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u0438",
"\u041d\u0430\u043b\u0438\u0447\u0438\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
"\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "\u041e\u0448\u0438\u0431\u043a\u0438, \u043e\u043a\u0430\u0437\u044b\u0432\u0430\u044e\u0449\u0438\u0435 \u0432\u043e\u0437\u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0435 \u043d\u0430 \u043f\u0430\u043c\u044f\u0442\u044c (CWE-633)",
"\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b Flash Player \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043d\u0430\u0440\u0443\u0448\u0435\u043d\u0438\u0435\u043c \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u0438 \u043f\u0430\u043c\u044f\u0442\u0438. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e, \u0434\u0435\u0439\u0441\u0442\u0432\u0443\u044e\u0449\u0435\u043c\u0443 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e, \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u0438\u043b\u0438 \u0432\u044b\u0437\u0432\u0430\u0442\u044c \u043e\u0442\u043a\u0430\u0437 \u0432 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u0438",
"\u041f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
"\u041f\u0440\u043e\u0447\u0430\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f": "\u2013",
"\u0421\u0432\u044f\u0437\u044c \u0441 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430\u043c\u0438 \u0418\u0411": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
"\u0421\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u0430",
"\u0421\u043f\u043e\u0441\u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
"\u0421\u043f\u043e\u0441\u043e\u0431 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
"\u0421\u0441\u044b\u043b\u043a\u0438 \u043d\u0430 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0438": "https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2015-0350\n\nhttps://helpx.adobe.com/security/products/flash-player/apsb15-06.html",
"\u0421\u0442\u0430\u0442\u0443\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u043c",
"\u0422\u0438\u043f \u041f\u041e": "\u041f\u0440\u0438\u043a\u043b\u0430\u0434\u043d\u043e\u0435 \u041f\u041e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c",
"\u0422\u0438\u043f \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "CWE-633",
"\u0423\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 2.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 10)"
}
CNVD-2015-02496
Vulnerability from cnvd - Published: 2015-04-17目前厂商已经发布了升级补丁以修复此安全问题,补丁获取链接: https://helpx.adobe.com/security/products/flash-player/apsb15-06.html
| Name | ['Adobe Flash Player <=17.0.0.134', 'Adobe Flash Player 13.x(<=13.0.0.277)', 'Adobe Flash Player 11.x(<=11.2.202.451)'] |
|---|
{
"bids": {
"bid": {
"bidNumber": "74062"
}
},
"cves": {
"cve": {
"cveNumber": "CVE-2015-0350"
}
},
"description": "Adobe Flash Player\u662f\u7f8e\u56fd\u5965\u591a\u6bd4\uff08Adobe\uff09\u516c\u53f8\u7684\u4e00\u6b3e\u8de8\u5e73\u53f0\u3001\u57fa\u4e8e\u6d4f\u89c8\u5668\u7684\u591a\u5a92\u4f53\u64ad\u653e\u5668\u4ea7\u54c1\u3002\u8be5\u4ea7\u54c1\u652f\u6301\u8de8\u5c4f\u5e55\u548c\u6d4f\u89c8\u5668\u67e5\u770b\u5e94\u7528\u7a0b\u5e8f\u3001\u5185\u5bb9\u548c\u89c6\u9891\u3002\r\n\r\nAdobe Flash Player\u4e2d\u5b58\u5728\u5185\u5b58\u7834\u574f\u6f0f\u6d1e\u3002\u653b\u51fb\u8005\u53ef\u5229\u7528\u8be5\u6f0f\u6d1e\u6267\u884c\u4efb\u610f\u4ee3\u7801\uff0c\u6216\u9020\u6210\u62d2\u7edd\u670d\u52a1\uff08\u5185\u5b58\u635f\u574f\uff09\u3002",
"discovererName": "Steven Vittitoe of Google Project Zero",
"formalWay": "\u76ee\u524d\u5382\u5546\u5df2\u7ecf\u53d1\u5e03\u4e86\u5347\u7ea7\u8865\u4e01\u4ee5\u4fee\u590d\u6b64\u5b89\u5168\u95ee\u9898\uff0c\u8865\u4e01\u83b7\u53d6\u94fe\u63a5\uff1a\r\nhttps://helpx.adobe.com/security/products/flash-player/apsb15-06.html",
"isEvent": "\u901a\u7528\u8f6f\u786c\u4ef6\u6f0f\u6d1e",
"number": "CNVD-2015-02496",
"openTime": "2015-04-17",
"patchDescription": "Adobe Flash Player\u662f\u7f8e\u56fd\u5965\u591a\u6bd4\uff08Adobe\uff09\u516c\u53f8\u7684\u4e00\u6b3e\u8de8\u5e73\u53f0\u3001\u57fa\u4e8e\u6d4f\u89c8\u5668\u7684\u591a\u5a92\u4f53\u64ad\u653e\u5668\u4ea7\u54c1\u3002\u8be5\u4ea7\u54c1\u652f\u6301\u8de8\u5c4f\u5e55\u548c\u6d4f\u89c8\u5668\u67e5\u770b\u5e94\u7528\u7a0b\u5e8f\u3001\u5185\u5bb9\u548c\u89c6\u9891\u3002Adobe Flash Player\u4e2d\u5b58\u5728\u5185\u5b58\u7834\u574f\u6f0f\u6d1e\u3002\u653b\u51fb\u8005\u53ef\u5229\u7528\u8be5\u6f0f\u6d1e\u6267\u884c\u4efb\u610f\u4ee3\u7801\uff0c\u6216\u9020\u6210\u62d2\u7edd\u670d\u52a1\uff08\u5185\u5b58\u635f\u574f\uff09\u3002\u76ee\u524d\uff0c\u4f9b\u5e94\u5546\u53d1\u5e03\u4e86\u5b89\u5168\u516c\u544a\u53ca\u76f8\u5173\u8865\u4e01\u4fe1\u606f\uff0c\u4fee\u590d\u4e86\u6b64\u6f0f\u6d1e\u3002",
"patchName": "Adobe Flash Player\u5185\u5b58\u7834\u574f\u6f0f\u6d1e\uff08CNVD-2015-02496\uff09\u7684\u8865\u4e01",
"products": {
"product": [
"Adobe Flash Player \u003c=17.0.0.134",
"Adobe Flash Player 13.x(\u003c=13.0.0.277)",
"Adobe Flash Player 11.x(\u003c=11.2.202.451)"
]
},
"referenceLink": "https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2015-0350",
"serverity": "\u9ad8",
"submitTime": "2015-04-16",
"title": "Adobe Flash Player\u5185\u5b58\u7834\u574f\u6f0f\u6d1e\uff08CNVD-2015-02496\uff09"
}
FKIE_CVE-2015-0350
Vulnerability from fkie_nvd - Published: 2015-04-14 22:59 - Updated: 2026-05-06 22:30{
"configurations": [
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:adobe:flash_player:*:*:*:*:*:*:*:*",
"matchCriteriaId": "EB3AED03-5107-4120-8815-55FF8EE41498",
"versionEndIncluding": "11.2.202.451",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
"matchCriteriaId": "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:adobe:flash_player:*:*:*:*:*:*:*:*",
"matchCriteriaId": "35A39AB2-E3C6-4C70-8CC9-0050184DB2B5",
"versionEndIncluding": "13.0.0.264",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:flash_player:14.0.0.125:*:*:*:*:*:*:*",
"matchCriteriaId": "D5D7202D-56DF-400B-9F09-E7D9938222D3",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:flash_player:14.0.0.145:*:*:*:*:*:*:*",
"matchCriteriaId": "4D4F0D21-A64B-46C1-9591-96529661DF0B",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:flash_player:14.0.0.176:*:*:*:*:*:*:*",
"matchCriteriaId": "86961019-3B81-458E-949F-A2F006EA55FE",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:flash_player:14.0.0.179:*:*:*:*:*:*:*",
"matchCriteriaId": "25895BE9-71FD-4DE7-90FC-0199470A8738",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:flash_player:15.0.0.152:*:*:*:*:*:*:*",
"matchCriteriaId": "4D55A950-7D48-413C-AD43-6AC64FBE790C",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:flash_player:15.0.0.167:*:*:*:*:*:*:*",
"matchCriteriaId": "F1A22B74-453D-4A8A-B79A-2B3143A0D995",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:flash_player:15.0.0.189:*:*:*:*:*:*:*",
"matchCriteriaId": "3FE4B077-67D1-4B25-976E-715FB6B2A1D1",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:flash_player:15.0.0.223:*:*:*:*:*:*:*",
"matchCriteriaId": "BFC91B68-6B35-47BD-BC02-3F836E772CF3",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:flash_player:15.0.0.239:*:*:*:*:*:*:*",
"matchCriteriaId": "A3BE6004-C30A-46E2-9F25-785E12BBF640",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:flash_player:15.0.0.246:*:*:*:*:*:*:*",
"matchCriteriaId": "CFE8E51F-7A32-41A4-B03A-73E52EB64C04",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:flash_player:16.0.0.235:*:*:*:*:*:*:*",
"matchCriteriaId": "3E13E927-A77C-4681-AFDE-A5A14093234D",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:flash_player:16.0.0.257:*:*:*:*:*:*:*",
"matchCriteriaId": "27629FF0-5EB9-476F-B5B3-115F663AB65E",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:flash_player:16.0.0.287:*:*:*:*:*:*:*",
"matchCriteriaId": "C0AB583F-3EBD-47B6-975E-7754CC32CCA7",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:flash_player:16.0.0.296:*:*:*:*:*:*:*",
"matchCriteriaId": "B58DE1A9-0510-4B65-AB18-75F9263A7818",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:flash_player:17.0.0.134:*:*:*:*:*:*:*",
"matchCriteriaId": "1BC4FAD0-4A54-4EDF-BE39-28138B34E719",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:apple:mac_os_x:-:*:*:*:*:*:*:*",
"matchCriteriaId": "4781BF1E-8A4E-4AFF-9540-23D523EE30DD",
"vulnerable": false
},
{
"criteria": "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
"matchCriteriaId": "A2572D17-1DE6-457B-99CC-64AFD54487EA",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:opensuse:opensuse:13.1:*:*:*:*:*:*:*",
"matchCriteriaId": "A10BC294-9196-425F-9FB0-B1625465B47F",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:opensuse:opensuse:13.2:*:*:*:*:*:*:*",
"matchCriteriaId": "03117DF1-3BEC-4B8D-AD63-DBBDB2126081",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:suse:suse_linux_enterprise_desktop:11.0:sp3:*:*:*:*:*:*",
"matchCriteriaId": "777F6902-6EFA-482A-9A17-48DA5BDDB9CD",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:suse:suse_linux_enterprise_desktop:12.0:*:*:*:*:*:*:*",
"matchCriteriaId": "6ECE2BD2-7E6B-4474-B410-4A28ED8DB6A0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:suse:suse_linux_workstation_extension:12.0:*:*:*:*:*:*:*",
"matchCriteriaId": "5FC37427-039A-4B66-B01A-4CA876819EF3",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:redhat:enterprise_linux_desktop_supplementary:5.0:*:*:*:*:*:*:*",
"matchCriteriaId": "CC2EDDE6-49F2-41D3-BCB2-F49886A2A170",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:redhat:enterprise_linux_desktop_supplementary:6.0:*:*:*:*:*:*:*",
"matchCriteriaId": "B8C6E104-EDBC-481E-85B8-D39ED2058D39",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:redhat:enterprise_linux_server_supplementary:5.0:*:*:*:*:*:*:*",
"matchCriteriaId": "FB3FB071-FCCC-4425-AFBF-77287C1B8F7B",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:redhat:enterprise_linux_server_supplementary:6.0:*:*:*:*:*:*:*",
"matchCriteriaId": "4B74C62D-4A6D-4A4F-ADF6-A508322CD447",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:redhat:enterprise_linux_server_supplementary_eus:6.6.z:*:*:*:*:*:*:*",
"matchCriteriaId": "04A2B180-08EF-4BE1-B1F2-48782874D6DB",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:redhat:enterprise_linux_workstation_supplementary:6.0:*:*:*:*:*:*:*",
"matchCriteriaId": "6E89B38A-3697-46DD-BB3F-E8D2373588BE",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
}
],
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-0347, CVE-2015-0352, CVE-2015-0353, CVE-2015-0354, CVE-2015-0355, CVE-2015-0360, CVE-2015-3038, CVE-2015-3041, CVE-2015-3042, and CVE-2015-3043."
},
{
"lang": "es",
"value": "Adobe Flash Player anterior a 13.0.0.281 y 14.x hasta 17.x anterior a 17.0.0.169 en Windows y OS X y anterior a 11.2.202.457 en Linux permite a atacantes ejecutar c\u00f3digo arbitrario o causar una denegaci\u00f3n de servicio (corrupci\u00f3n de memoria) a trav\u00e9s de vectores no especificados, una vulnerabilidad diferente a CVE-2015-0347, CVE-2015-0352, CVE-2015-0353, CVE-2015-0354, CVE-2015-0355, CVE-2015-0360, CVE-2015-3038, CVE-2015-3041, CVE-2015-3042, y CVE-2015-3043."
}
],
"id": "CVE-2015-0350",
"lastModified": "2026-05-06T22:30:45.220",
"metrics": {
"cvssMetricV2": [
{
"acInsufInfo": true,
"baseSeverity": "HIGH",
"cvssData": {
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "COMPLETE",
"baseScore": 10.0,
"confidentialityImpact": "COMPLETE",
"integrityImpact": "COMPLETE",
"vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C",
"version": "2.0"
},
"exploitabilityScore": 10.0,
"impactScore": 10.0,
"obtainAllPrivilege": false,
"obtainOtherPrivilege": false,
"obtainUserPrivilege": false,
"source": "nvd@nist.gov",
"type": "Primary",
"userInteractionRequired": false
}
]
},
"published": "2015-04-14T22:59:04.427",
"references": [
{
"source": "psirt@adobe.com",
"tags": [
"Third Party Advisory"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00010.html"
},
{
"source": "psirt@adobe.com",
"tags": [
"Third Party Advisory"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00011.html"
},
{
"source": "psirt@adobe.com",
"tags": [
"Third Party Advisory"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00012.html"
},
{
"source": "psirt@adobe.com",
"url": "http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00013.html"
},
{
"source": "psirt@adobe.com",
"tags": [
"Third Party Advisory"
],
"url": "http://rhn.redhat.com/errata/RHSA-2015-0813.html"
},
{
"source": "psirt@adobe.com",
"url": "http://www.securityfocus.com/bid/74062"
},
{
"source": "psirt@adobe.com",
"url": "http://www.securitytracker.com/id/1032105"
},
{
"source": "psirt@adobe.com",
"tags": [
"Patch",
"Vendor Advisory"
],
"url": "https://helpx.adobe.com/security/products/flash-player/apsb15-06.html"
},
{
"source": "psirt@adobe.com",
"url": "https://security.gentoo.org/glsa/201504-07"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00010.html"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00011.html"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00012.html"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00013.html"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory"
],
"url": "http://rhn.redhat.com/errata/RHSA-2015-0813.html"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://www.securityfocus.com/bid/74062"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://www.securitytracker.com/id/1032105"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Patch",
"Vendor Advisory"
],
"url": "https://helpx.adobe.com/security/products/flash-player/apsb15-06.html"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "https://security.gentoo.org/glsa/201504-07"
}
],
"sourceIdentifier": "psirt@adobe.com",
"vulnStatus": "Modified",
"weaknesses": [
{
"description": [
{
"lang": "en",
"value": "NVD-CWE-noinfo"
}
],
"source": "nvd@nist.gov",
"type": "Primary"
}
]
}
GHSA-99JP-389H-929Q
Vulnerability from github – Published: 2022-05-14 02:04 – Updated: 2022-05-14 02:04Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-0347, CVE-2015-0352, CVE-2015-0353, CVE-2015-0354, CVE-2015-0355, CVE-2015-0360, CVE-2015-3038, CVE-2015-3041, CVE-2015-3042, and CVE-2015-3043.
{
"affected": [],
"aliases": [
"CVE-2015-0350"
],
"database_specific": {
"cwe_ids": [],
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2015-04-14T22:59:00Z",
"severity": "HIGH"
},
"details": "Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-0347, CVE-2015-0352, CVE-2015-0353, CVE-2015-0354, CVE-2015-0355, CVE-2015-0360, CVE-2015-3038, CVE-2015-3041, CVE-2015-3042, and CVE-2015-3043.",
"id": "GHSA-99jp-389h-929q",
"modified": "2022-05-14T02:04:47Z",
"published": "2022-05-14T02:04:47Z",
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2015-0350"
},
{
"type": "WEB",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb15-06.html"
},
{
"type": "WEB",
"url": "https://security.gentoo.org/glsa/201504-07"
},
{
"type": "WEB",
"url": "http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00010.html"
},
{
"type": "WEB",
"url": "http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00011.html"
},
{
"type": "WEB",
"url": "http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00012.html"
},
{
"type": "WEB",
"url": "http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00013.html"
},
{
"type": "WEB",
"url": "http://rhn.redhat.com/errata/RHSA-2015-0813.html"
},
{
"type": "WEB",
"url": "http://www.securityfocus.com/bid/74062"
},
{
"type": "WEB",
"url": "http://www.securitytracker.com/id/1032105"
}
],
"schema_version": "1.4.0",
"severity": []
}
GSD-2015-0350
Vulnerability from gsd - Updated: 2023-12-13 01:19{
"GSD": {
"alias": "CVE-2015-0350",
"description": "Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-0347, CVE-2015-0352, CVE-2015-0353, CVE-2015-0354, CVE-2015-0355, CVE-2015-0360, CVE-2015-3038, CVE-2015-3041, CVE-2015-3042, and CVE-2015-3043.",
"id": "GSD-2015-0350",
"references": [
"https://www.suse.com/security/cve/CVE-2015-0350.html",
"https://access.redhat.com/errata/RHSA-2015:0813",
"https://advisories.mageia.org/CVE-2015-0350.html"
]
},
"gsd": {
"metadata": {
"exploitCode": "unknown",
"remediation": "unknown",
"reportConfidence": "confirmed",
"type": "vulnerability"
},
"osvSchema": {
"aliases": [
"CVE-2015-0350"
],
"details": "Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-0347, CVE-2015-0352, CVE-2015-0353, CVE-2015-0354, CVE-2015-0355, CVE-2015-0360, CVE-2015-3038, CVE-2015-3041, CVE-2015-3042, and CVE-2015-3043.",
"id": "GSD-2015-0350",
"modified": "2023-12-13T01:19:58.165781Z",
"schema_version": "1.4.0"
}
},
"namespaces": {
"cve.org": {
"CVE_data_meta": {
"ASSIGNER": "psirt@adobe.com",
"ID": "CVE-2015-0350",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-0347, CVE-2015-0352, CVE-2015-0353, CVE-2015-0354, CVE-2015-0355, CVE-2015-0360, CVE-2015-3038, CVE-2015-3041, CVE-2015-3042, and CVE-2015-3043."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "openSUSE-SU-2015:0718",
"refsource": "SUSE",
"url": "http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00010.html"
},
{
"name": "SUSE-SU-2015:0722",
"refsource": "SUSE",
"url": "http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00011.html"
},
{
"name": "74062",
"refsource": "BID",
"url": "http://www.securityfocus.com/bid/74062"
},
{
"name": "GLSA-201504-07",
"refsource": "GENTOO",
"url": "https://security.gentoo.org/glsa/201504-07"
},
{
"name": "1032105",
"refsource": "SECTRACK",
"url": "http://www.securitytracker.com/id/1032105"
},
{
"name": "RHSA-2015:0813",
"refsource": "REDHAT",
"url": "http://rhn.redhat.com/errata/RHSA-2015-0813.html"
},
{
"name": "https://helpx.adobe.com/security/products/flash-player/apsb15-06.html",
"refsource": "CONFIRM",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb15-06.html"
},
{
"name": "openSUSE-SU-2015:0725",
"refsource": "SUSE",
"url": "http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00013.html"
},
{
"name": "SUSE-SU-2015:0723",
"refsource": "SUSE",
"url": "http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00012.html"
}
]
}
},
"nvd.nist.gov": {
"configurations": {
"CVE_data_version": "4.0",
"nodes": [
{
"children": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:a:adobe:flash_player:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndIncluding": "11.2.202.451",
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
}
],
"operator": "OR"
}
],
"cpe_match": [],
"operator": "AND"
},
{
"children": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:a:adobe:flash_player:14.0.0.145:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:adobe:flash_player:14.0.0.176:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:adobe:flash_player:15.0.0.246:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:adobe:flash_player:16.0.0.235:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:adobe:flash_player:14.0.0.179:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:adobe:flash_player:15.0.0.152:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:adobe:flash_player:16.0.0.257:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:adobe:flash_player:16.0.0.287:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:adobe:flash_player:15.0.0.167:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:adobe:flash_player:15.0.0.189:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:adobe:flash_player:16.0.0.296:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:adobe:flash_player:17.0.0.134:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:adobe:flash_player:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndIncluding": "13.0.0.264",
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:adobe:flash_player:14.0.0.125:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:adobe:flash_player:15.0.0.223:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:adobe:flash_player:15.0.0.239:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:apple:mac_os_x:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
},
{
"cpe23Uri": "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
}
],
"operator": "OR"
}
],
"cpe_match": [],
"operator": "AND"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:opensuse:opensuse:13.1:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:o:opensuse:opensuse:13.2:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:o:suse:suse_linux_workstation_extension:12.0:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:o:suse:suse_linux_enterprise_desktop:12.0:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:o:suse:suse_linux_enterprise_desktop:11.0:sp3:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:redhat:enterprise_linux_desktop_supplementary:6.0:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:o:redhat:enterprise_linux_server_supplementary:5.0:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:o:redhat:enterprise_linux_desktop_supplementary:5.0:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:o:redhat:enterprise_linux_workstation_supplementary:6.0:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:o:redhat:enterprise_linux_server_supplementary:6.0:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:o:redhat:enterprise_linux_server_supplementary_eus:6.6.z:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
}
],
"operator": "OR"
}
]
},
"cve": {
"CVE_data_meta": {
"ASSIGNER": "psirt@adobe.com",
"ID": "CVE-2015-0350"
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "en",
"value": "Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-0347, CVE-2015-0352, CVE-2015-0353, CVE-2015-0354, CVE-2015-0355, CVE-2015-0360, CVE-2015-3038, CVE-2015-3041, CVE-2015-3042, and CVE-2015-3043."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "en",
"value": "NVD-CWE-noinfo"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "https://helpx.adobe.com/security/products/flash-player/apsb15-06.html",
"refsource": "CONFIRM",
"tags": [
"Patch",
"Vendor Advisory"
],
"url": "https://helpx.adobe.com/security/products/flash-player/apsb15-06.html"
},
{
"name": "openSUSE-SU-2015:0718",
"refsource": "SUSE",
"tags": [
"Third Party Advisory"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00010.html"
},
{
"name": "RHSA-2015:0813",
"refsource": "REDHAT",
"tags": [
"Third Party Advisory"
],
"url": "http://rhn.redhat.com/errata/RHSA-2015-0813.html"
},
{
"name": "SUSE-SU-2015:0723",
"refsource": "SUSE",
"tags": [
"Third Party Advisory"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00012.html"
},
{
"name": "SUSE-SU-2015:0722",
"refsource": "SUSE",
"tags": [
"Third Party Advisory"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00011.html"
},
{
"name": "74062",
"refsource": "BID",
"tags": [],
"url": "http://www.securityfocus.com/bid/74062"
},
{
"name": "GLSA-201504-07",
"refsource": "GENTOO",
"tags": [],
"url": "https://security.gentoo.org/glsa/201504-07"
},
{
"name": "1032105",
"refsource": "SECTRACK",
"tags": [],
"url": "http://www.securitytracker.com/id/1032105"
},
{
"name": "openSUSE-SU-2015:0725",
"refsource": "SUSE",
"tags": [],
"url": "http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00013.html"
}
]
}
},
"impact": {
"baseMetricV2": {
"acInsufInfo": true,
"cvssV2": {
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "COMPLETE",
"baseScore": 10.0,
"confidentialityImpact": "COMPLETE",
"integrityImpact": "COMPLETE",
"vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C",
"version": "2.0"
},
"exploitabilityScore": 10.0,
"impactScore": 10.0,
"obtainAllPrivilege": false,
"obtainOtherPrivilege": false,
"obtainUserPrivilege": false,
"severity": "HIGH",
"userInteractionRequired": false
}
},
"lastModifiedDate": "2018-10-30T16:27Z",
"publishedDate": "2015-04-14T22:59Z"
}
}
}
RHSA-2015:0813
Vulnerability from csaf_redhat - Published: 2015-04-15 13:04 - Updated: 2026-01-13 22:06Double free vulnerability in Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-0359.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Client-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686 | — |
Vendor Fix
fix
|
Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-0350, CVE-2015-0352, CVE-2015-0353, CVE-2015-0354, CVE-2015-0355, CVE-2015-0360, CVE-2015-3038, CVE-2015-3041, CVE-2015-3042, and CVE-2015-3043.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Client-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686 | — |
Vendor Fix
fix
|
Buffer overflow in Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code via unspecified vectors.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Client-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686 | — |
Vendor Fix
fix
|
Use-after-free vulnerability in Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-0351, CVE-2015-0358, and CVE-2015-3039.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Client-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686 | — |
Vendor Fix
fix
|
Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-0347, CVE-2015-0352, CVE-2015-0353, CVE-2015-0354, CVE-2015-0355, CVE-2015-0360, CVE-2015-3038, CVE-2015-3041, CVE-2015-3042, and CVE-2015-3043.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Client-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686 | — |
Vendor Fix
fix
|
Use-after-free vulnerability in Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-0349, CVE-2015-0358, and CVE-2015-3039.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Client-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686 | — |
Vendor Fix
fix
|
Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-0347, CVE-2015-0350, CVE-2015-0353, CVE-2015-0354, CVE-2015-0355, CVE-2015-0360, CVE-2015-3038, CVE-2015-3041, CVE-2015-3042, and CVE-2015-3043.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Client-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686 | — |
Vendor Fix
fix
|
Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-0347, CVE-2015-0350, CVE-2015-0352, CVE-2015-0354, CVE-2015-0355, CVE-2015-0360, CVE-2015-3038, CVE-2015-3041, CVE-2015-3042, and CVE-2015-3043.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Client-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686 | — |
Vendor Fix
fix
|
Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-0347, CVE-2015-0350, CVE-2015-0352, CVE-2015-0353, CVE-2015-0355, CVE-2015-0360, CVE-2015-3038, CVE-2015-3041, CVE-2015-3042, and CVE-2015-3043.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Client-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686 | — |
Vendor Fix
fix
|
Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-0347, CVE-2015-0350, CVE-2015-0352, CVE-2015-0353, CVE-2015-0354, CVE-2015-0360, CVE-2015-3038, CVE-2015-3041, CVE-2015-3042, and CVE-2015-3043.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Client-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686 | — |
Vendor Fix
fix
|
Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code by leveraging an unspecified "type confusion."
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Client-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686 | — |
Vendor Fix
fix
|
Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux does not properly restrict discovery of memory addresses, which allows attackers to bypass the ASLR protection mechanism via unspecified vectors, a different vulnerability than CVE-2015-3040.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Client-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686 | — |
Vendor Fix
fix
|
Use-after-free vulnerability in Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-0349, CVE-2015-0351, and CVE-2015-3039.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Client-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686 | — |
Vendor Fix
fix
|
Double free vulnerability in Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-0346.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Client-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686 | — |
Vendor Fix
fix
|
Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-0347, CVE-2015-0350, CVE-2015-0352, CVE-2015-0353, CVE-2015-0354, CVE-2015-0355, CVE-2015-3038, CVE-2015-3041, CVE-2015-3042, and CVE-2015-3043.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Client-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686 | — |
Vendor Fix
fix
|
Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-0347, CVE-2015-0350, CVE-2015-0352, CVE-2015-0353, CVE-2015-0354, CVE-2015-0355, CVE-2015-0360, CVE-2015-3041, CVE-2015-3042, and CVE-2015-3043.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Client-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686 | — |
Vendor Fix
fix
|
Use-after-free vulnerability in Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-0349, CVE-2015-0351, and CVE-2015-0358.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Client-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686 | — |
Vendor Fix
fix
|
Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux does not properly restrict discovery of memory addresses, which allows attackers to bypass the ASLR protection mechanism via unspecified vectors, a different vulnerability than CVE-2015-0357.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Client-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686 | — |
Vendor Fix
fix
|
Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-0347, CVE-2015-0350, CVE-2015-0352, CVE-2015-0353, CVE-2015-0354, CVE-2015-0355, CVE-2015-0360, CVE-2015-3038, CVE-2015-3042, and CVE-2015-3043.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Client-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686 | — |
Vendor Fix
fix
|
Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-0347, CVE-2015-0350, CVE-2015-0352, CVE-2015-0353, CVE-2015-0354, CVE-2015-0355, CVE-2015-0360, CVE-2015-3038, CVE-2015-3041, and CVE-2015-3043.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Client-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686 | — |
Vendor Fix
fix
|
Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, as exploited in the wild in April 2015, a different vulnerability than CVE-2015-0347, CVE-2015-0350, CVE-2015-0352, CVE-2015-0353, CVE-2015-0354, CVE-2015-0355, CVE-2015-0360, CVE-2015-3038, CVE-2015-3041, and CVE-2015-3042.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Client-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686 | — |
Vendor Fix
fix
|
Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to bypass intended access restrictions and obtain sensitive information via unspecified vectors.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Client-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686 | — |
Vendor Fix
fix
|
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Critical"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An updated Adobe Flash Player package that fixes multiple security issues\nis now available for Red Hat Enterprise Linux 5 and 6 Supplementary.\n\nRed Hat Product Security has rated this update as having Critical security\nimpact. Common Vulnerability Scoring System (CVSS) base scores, which give\ndetailed severity ratings, are available for each vulnerability from the\nCVE links in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "The flash-plugin package contains a Mozilla Firefox compatible Adobe Flash\nPlayer web browser plug-in.\n\nThis update fixes multiple vulnerabilities in Adobe Flash Player. These\nvulnerabilities are detailed in the Adobe Security Bulletin APSB15-06\nlisted in the References section.\n\nMultiple flaws were found in the way flash-plugin displayed certain SWF\ncontent. An attacker could use these flaws to create a specially crafted\nSWF file that would cause flash-plugin to crash or, potentially, execute\narbitrary code when the victim loaded a page containing the malicious SWF\ncontent. (CVE-2015-0346, CVE-2015-0347, CVE-2015-0348, CVE-2015-0349,\nCVE-2015-0350, CVE-2015-0351, CVE-2015-0352, CVE-2015-0353, CVE-2015-0354,\nCVE-2015-0355, CVE-2015-0356, CVE-2015-0358, CVE-2015-0359, CVE-2015-0360,\nCVE-2015-3038, CVE-2015-3039, CVE-2015-3041, CVE-2015-3042, CVE-2015-3043)\n\nA security bypass flaw was found in flash-plugin that could lead to the\ndisclosure of sensitive information. (CVE-2015-3044)\n\nTwo memory information leak flaws were found in flash-plugin that could\nallow an attacker to potentially bypass ASLR (Address Space Layout\nRandomization) protection, and make it easier to exploit other flaws.\n(CVE-2015-0357, CVE-2015-3040)\n\nAll users of Adobe Flash Player should install this updated package, which\nupgrades Flash Player to version 11.2.202.457.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2015:0813",
"url": "https://access.redhat.com/errata/RHSA-2015:0813"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#critical",
"url": "https://access.redhat.com/security/updates/classification/#critical"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb15-06.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb15-06.html"
},
{
"category": "external",
"summary": "1211869",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1211869"
},
{
"category": "external",
"summary": "1211894",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1211894"
},
{
"category": "external",
"summary": "1211898",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1211898"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2015/rhsa-2015_0813.json"
}
],
"title": "Red Hat Security Advisory: flash-plugin security update",
"tracking": {
"current_release_date": "2026-01-13T22:06:26+00:00",
"generator": {
"date": "2026-01-13T22:06:26+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.6.15"
}
},
"id": "RHSA-2015:0813",
"initial_release_date": "2015-04-15T13:04:05+00:00",
"revision_history": [
{
"date": "2015-04-15T13:04:05+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2015-04-15T13:04:05+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-01-13T22:06:26+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Desktop Supplementary (v. 6)",
"product": {
"name": "Red Hat Enterprise Linux Desktop Supplementary (v. 6)",
"product_id": "6Client-Supplementary-6.6.z",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_extras:6"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Server Supplementary (v. 6)",
"product": {
"name": "Red Hat Enterprise Linux Server Supplementary (v. 6)",
"product_id": "6Server-Supplementary-6.6.z",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_extras:6"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Workstation Supplementary (v. 6)",
"product": {
"name": "Red Hat Enterprise Linux Workstation Supplementary (v. 6)",
"product_id": "6Workstation-Supplementary-6.6.z",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_extras:6"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Desktop Supplementary (v. 5)",
"product": {
"name": "Red Hat Enterprise Linux Desktop Supplementary (v. 5)",
"product_id": "5Client-Supplementary-5.11.Z",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_extras:5::client"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Server Supplementary (v. 5)",
"product": {
"name": "Red Hat Enterprise Linux Server Supplementary (v. 5)",
"product_id": "5Server-Supplementary-5.11.Z",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_extras:5::server"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux Supplementary"
},
{
"branches": [
{
"category": "product_version",
"name": "flash-plugin-0:11.2.202.457-1.el6_6.i686",
"product": {
"name": "flash-plugin-0:11.2.202.457-1.el6_6.i686",
"product_id": "flash-plugin-0:11.2.202.457-1.el6_6.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/flash-plugin@11.2.202.457-1.el6_6?arch=i686"
}
}
}
],
"category": "architecture",
"name": "i686"
},
{
"branches": [
{
"category": "product_version",
"name": "flash-plugin-0:11.2.202.457-1.el5.i386",
"product": {
"name": "flash-plugin-0:11.2.202.457-1.el5.i386",
"product_id": "flash-plugin-0:11.2.202.457-1.el5.i386",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/flash-plugin@11.2.202.457-1.el5?arch=i386"
}
}
}
],
"category": "architecture",
"name": "i386"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "flash-plugin-0:11.2.202.457-1.el5.i386 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 5)",
"product_id": "5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386"
},
"product_reference": "flash-plugin-0:11.2.202.457-1.el5.i386",
"relates_to_product_reference": "5Client-Supplementary-5.11.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "flash-plugin-0:11.2.202.457-1.el5.i386 as a component of Red Hat Enterprise Linux Server Supplementary (v. 5)",
"product_id": "5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386"
},
"product_reference": "flash-plugin-0:11.2.202.457-1.el5.i386",
"relates_to_product_reference": "5Server-Supplementary-5.11.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "flash-plugin-0:11.2.202.457-1.el6_6.i686 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)",
"product_id": "6Client-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686"
},
"product_reference": "flash-plugin-0:11.2.202.457-1.el6_6.i686",
"relates_to_product_reference": "6Client-Supplementary-6.6.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "flash-plugin-0:11.2.202.457-1.el6_6.i686 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)",
"product_id": "6Server-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686"
},
"product_reference": "flash-plugin-0:11.2.202.457-1.el6_6.i686",
"relates_to_product_reference": "6Server-Supplementary-6.6.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "flash-plugin-0:11.2.202.457-1.el6_6.i686 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)",
"product_id": "6Workstation-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686"
},
"product_reference": "flash-plugin-0:11.2.202.457-1.el6_6.i686",
"relates_to_product_reference": "6Workstation-Supplementary-6.6.z"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2015-0346",
"discovery_date": "2015-04-14T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1211869"
}
],
"notes": [
{
"category": "description",
"text": "Double free vulnerability in Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-0359.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB15-06",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386",
"6Client-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686",
"6Server-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686",
"6Workstation-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2015-0346"
},
{
"category": "external",
"summary": "RHBZ#1211869",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1211869"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2015-0346",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-0346"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2015-0346",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2015-0346"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb15-06.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb15-06.html"
}
],
"release_date": "2015-04-14T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-04-15T13:04:05+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386",
"6Client-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686",
"6Server-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686",
"6Workstation-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:0813"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386",
"6Client-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686",
"6Server-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686",
"6Workstation-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB15-06"
},
{
"cve": "CVE-2015-0347",
"discovery_date": "2015-04-14T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1211869"
}
],
"notes": [
{
"category": "description",
"text": "Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-0350, CVE-2015-0352, CVE-2015-0353, CVE-2015-0354, CVE-2015-0355, CVE-2015-0360, CVE-2015-3038, CVE-2015-3041, CVE-2015-3042, and CVE-2015-3043.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB15-06",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386",
"6Client-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686",
"6Server-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686",
"6Workstation-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2015-0347"
},
{
"category": "external",
"summary": "RHBZ#1211869",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1211869"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2015-0347",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-0347"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2015-0347",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2015-0347"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb15-06.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb15-06.html"
}
],
"release_date": "2015-04-14T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-04-15T13:04:05+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386",
"6Client-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686",
"6Server-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686",
"6Workstation-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:0813"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386",
"6Client-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686",
"6Server-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686",
"6Workstation-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB15-06"
},
{
"cve": "CVE-2015-0348",
"discovery_date": "2015-04-14T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1211869"
}
],
"notes": [
{
"category": "description",
"text": "Buffer overflow in Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code via unspecified vectors.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB15-06",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386",
"6Client-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686",
"6Server-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686",
"6Workstation-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2015-0348"
},
{
"category": "external",
"summary": "RHBZ#1211869",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1211869"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2015-0348",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-0348"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2015-0348",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2015-0348"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb15-06.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb15-06.html"
}
],
"release_date": "2015-04-14T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-04-15T13:04:05+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386",
"6Client-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686",
"6Server-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686",
"6Workstation-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:0813"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386",
"6Client-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686",
"6Server-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686",
"6Workstation-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB15-06"
},
{
"cve": "CVE-2015-0349",
"discovery_date": "2015-04-14T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1211869"
}
],
"notes": [
{
"category": "description",
"text": "Use-after-free vulnerability in Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-0351, CVE-2015-0358, and CVE-2015-3039.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB15-06",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386",
"6Client-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686",
"6Server-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686",
"6Workstation-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2015-0349"
},
{
"category": "external",
"summary": "RHBZ#1211869",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1211869"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2015-0349",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-0349"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2015-0349",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2015-0349"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb15-06.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb15-06.html"
}
],
"release_date": "2015-04-14T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-04-15T13:04:05+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386",
"6Client-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686",
"6Server-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686",
"6Workstation-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:0813"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386",
"6Client-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686",
"6Server-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686",
"6Workstation-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB15-06"
},
{
"cve": "CVE-2015-0350",
"discovery_date": "2015-04-14T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1211869"
}
],
"notes": [
{
"category": "description",
"text": "Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-0347, CVE-2015-0352, CVE-2015-0353, CVE-2015-0354, CVE-2015-0355, CVE-2015-0360, CVE-2015-3038, CVE-2015-3041, CVE-2015-3042, and CVE-2015-3043.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB15-06",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386",
"6Client-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686",
"6Server-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686",
"6Workstation-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2015-0350"
},
{
"category": "external",
"summary": "RHBZ#1211869",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1211869"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2015-0350",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-0350"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2015-0350",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2015-0350"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb15-06.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb15-06.html"
}
],
"release_date": "2015-04-14T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-04-15T13:04:05+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386",
"6Client-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686",
"6Server-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686",
"6Workstation-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:0813"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386",
"6Client-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686",
"6Server-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686",
"6Workstation-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB15-06"
},
{
"cve": "CVE-2015-0351",
"discovery_date": "2015-04-14T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1211869"
}
],
"notes": [
{
"category": "description",
"text": "Use-after-free vulnerability in Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-0349, CVE-2015-0358, and CVE-2015-3039.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB15-06",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386",
"6Client-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686",
"6Server-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686",
"6Workstation-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2015-0351"
},
{
"category": "external",
"summary": "RHBZ#1211869",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1211869"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2015-0351",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-0351"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2015-0351",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2015-0351"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb15-06.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb15-06.html"
}
],
"release_date": "2015-04-14T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-04-15T13:04:05+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386",
"6Client-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686",
"6Server-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686",
"6Workstation-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:0813"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386",
"6Client-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686",
"6Server-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686",
"6Workstation-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB15-06"
},
{
"cve": "CVE-2015-0352",
"discovery_date": "2015-04-14T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1211869"
}
],
"notes": [
{
"category": "description",
"text": "Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-0347, CVE-2015-0350, CVE-2015-0353, CVE-2015-0354, CVE-2015-0355, CVE-2015-0360, CVE-2015-3038, CVE-2015-3041, CVE-2015-3042, and CVE-2015-3043.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB15-06",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386",
"6Client-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686",
"6Server-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686",
"6Workstation-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2015-0352"
},
{
"category": "external",
"summary": "RHBZ#1211869",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1211869"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2015-0352",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-0352"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2015-0352",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2015-0352"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb15-06.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb15-06.html"
}
],
"release_date": "2015-04-14T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-04-15T13:04:05+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386",
"6Client-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686",
"6Server-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686",
"6Workstation-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:0813"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386",
"6Client-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686",
"6Server-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686",
"6Workstation-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB15-06"
},
{
"cve": "CVE-2015-0353",
"discovery_date": "2015-04-14T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1211869"
}
],
"notes": [
{
"category": "description",
"text": "Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-0347, CVE-2015-0350, CVE-2015-0352, CVE-2015-0354, CVE-2015-0355, CVE-2015-0360, CVE-2015-3038, CVE-2015-3041, CVE-2015-3042, and CVE-2015-3043.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB15-06",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386",
"6Client-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686",
"6Server-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686",
"6Workstation-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2015-0353"
},
{
"category": "external",
"summary": "RHBZ#1211869",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1211869"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2015-0353",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-0353"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2015-0353",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2015-0353"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb15-06.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb15-06.html"
}
],
"release_date": "2015-04-14T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-04-15T13:04:05+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386",
"6Client-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686",
"6Server-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686",
"6Workstation-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:0813"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386",
"6Client-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686",
"6Server-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686",
"6Workstation-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB15-06"
},
{
"cve": "CVE-2015-0354",
"discovery_date": "2015-04-14T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1211869"
}
],
"notes": [
{
"category": "description",
"text": "Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-0347, CVE-2015-0350, CVE-2015-0352, CVE-2015-0353, CVE-2015-0355, CVE-2015-0360, CVE-2015-3038, CVE-2015-3041, CVE-2015-3042, and CVE-2015-3043.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB15-06",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386",
"6Client-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686",
"6Server-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686",
"6Workstation-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2015-0354"
},
{
"category": "external",
"summary": "RHBZ#1211869",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1211869"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2015-0354",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-0354"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2015-0354",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2015-0354"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb15-06.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb15-06.html"
}
],
"release_date": "2015-04-14T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-04-15T13:04:05+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386",
"6Client-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686",
"6Server-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686",
"6Workstation-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:0813"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386",
"6Client-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686",
"6Server-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686",
"6Workstation-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB15-06"
},
{
"cve": "CVE-2015-0355",
"discovery_date": "2015-04-14T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1211869"
}
],
"notes": [
{
"category": "description",
"text": "Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-0347, CVE-2015-0350, CVE-2015-0352, CVE-2015-0353, CVE-2015-0354, CVE-2015-0360, CVE-2015-3038, CVE-2015-3041, CVE-2015-3042, and CVE-2015-3043.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB15-06",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386",
"6Client-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686",
"6Server-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686",
"6Workstation-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2015-0355"
},
{
"category": "external",
"summary": "RHBZ#1211869",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1211869"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2015-0355",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-0355"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2015-0355",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2015-0355"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb15-06.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb15-06.html"
}
],
"release_date": "2015-04-14T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-04-15T13:04:05+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386",
"6Client-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686",
"6Server-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686",
"6Workstation-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:0813"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386",
"6Client-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686",
"6Server-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686",
"6Workstation-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB15-06"
},
{
"cve": "CVE-2015-0356",
"discovery_date": "2015-04-14T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1211869"
}
],
"notes": [
{
"category": "description",
"text": "Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code by leveraging an unspecified \"type confusion.\"",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB15-06",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386",
"6Client-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686",
"6Server-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686",
"6Workstation-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2015-0356"
},
{
"category": "external",
"summary": "RHBZ#1211869",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1211869"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2015-0356",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-0356"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2015-0356",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2015-0356"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb15-06.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb15-06.html"
}
],
"release_date": "2015-04-14T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-04-15T13:04:05+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386",
"6Client-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686",
"6Server-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686",
"6Workstation-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:0813"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386",
"6Client-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686",
"6Server-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686",
"6Workstation-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB15-06"
},
{
"cve": "CVE-2015-0357",
"discovery_date": "2015-04-14T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1211898"
}
],
"notes": [
{
"category": "description",
"text": "Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux does not properly restrict discovery of memory addresses, which allows attackers to bypass the ASLR protection mechanism via unspecified vectors, a different vulnerability than CVE-2015-3040.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: information leaks leading to ASLR bypass (APSB15-06)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386",
"6Client-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686",
"6Server-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686",
"6Workstation-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2015-0357"
},
{
"category": "external",
"summary": "RHBZ#1211898",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1211898"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2015-0357",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-0357"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2015-0357",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2015-0357"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb15-06.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb15-06.html"
}
],
"release_date": "2015-04-14T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-04-15T13:04:05+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386",
"6Client-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686",
"6Server-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686",
"6Workstation-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:0813"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 4.3,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:N/A:N",
"version": "2.0"
},
"products": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386",
"6Client-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686",
"6Server-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686",
"6Workstation-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "flash-plugin: information leaks leading to ASLR bypass (APSB15-06)"
},
{
"cve": "CVE-2015-0358",
"discovery_date": "2015-04-14T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1211869"
}
],
"notes": [
{
"category": "description",
"text": "Use-after-free vulnerability in Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-0349, CVE-2015-0351, and CVE-2015-3039.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB15-06",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386",
"6Client-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686",
"6Server-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686",
"6Workstation-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2015-0358"
},
{
"category": "external",
"summary": "RHBZ#1211869",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1211869"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2015-0358",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-0358"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2015-0358",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2015-0358"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb15-06.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb15-06.html"
}
],
"release_date": "2015-04-14T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-04-15T13:04:05+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386",
"6Client-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686",
"6Server-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686",
"6Workstation-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:0813"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386",
"6Client-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686",
"6Server-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686",
"6Workstation-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB15-06"
},
{
"cve": "CVE-2015-0359",
"discovery_date": "2015-04-14T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1211869"
}
],
"notes": [
{
"category": "description",
"text": "Double free vulnerability in Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-0346.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB15-06",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386",
"6Client-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686",
"6Server-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686",
"6Workstation-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2015-0359"
},
{
"category": "external",
"summary": "RHBZ#1211869",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1211869"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2015-0359",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-0359"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2015-0359",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2015-0359"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb15-06.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb15-06.html"
}
],
"release_date": "2015-04-14T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-04-15T13:04:05+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386",
"6Client-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686",
"6Server-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686",
"6Workstation-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:0813"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386",
"6Client-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686",
"6Server-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686",
"6Workstation-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB15-06"
},
{
"cve": "CVE-2015-0360",
"discovery_date": "2015-04-14T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1211869"
}
],
"notes": [
{
"category": "description",
"text": "Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-0347, CVE-2015-0350, CVE-2015-0352, CVE-2015-0353, CVE-2015-0354, CVE-2015-0355, CVE-2015-3038, CVE-2015-3041, CVE-2015-3042, and CVE-2015-3043.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB15-06",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386",
"6Client-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686",
"6Server-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686",
"6Workstation-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2015-0360"
},
{
"category": "external",
"summary": "RHBZ#1211869",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1211869"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2015-0360",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-0360"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2015-0360",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2015-0360"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb15-06.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb15-06.html"
}
],
"release_date": "2015-04-14T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-04-15T13:04:05+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386",
"6Client-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686",
"6Server-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686",
"6Workstation-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:0813"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386",
"6Client-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686",
"6Server-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686",
"6Workstation-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB15-06"
},
{
"cve": "CVE-2015-3038",
"discovery_date": "2015-04-14T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1211869"
}
],
"notes": [
{
"category": "description",
"text": "Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-0347, CVE-2015-0350, CVE-2015-0352, CVE-2015-0353, CVE-2015-0354, CVE-2015-0355, CVE-2015-0360, CVE-2015-3041, CVE-2015-3042, and CVE-2015-3043.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB15-06",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386",
"6Client-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686",
"6Server-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686",
"6Workstation-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2015-3038"
},
{
"category": "external",
"summary": "RHBZ#1211869",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1211869"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2015-3038",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-3038"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2015-3038",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2015-3038"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb15-06.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb15-06.html"
}
],
"release_date": "2015-04-14T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-04-15T13:04:05+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386",
"6Client-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686",
"6Server-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686",
"6Workstation-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:0813"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386",
"6Client-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686",
"6Server-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686",
"6Workstation-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB15-06"
},
{
"cve": "CVE-2015-3039",
"discovery_date": "2015-04-14T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1211869"
}
],
"notes": [
{
"category": "description",
"text": "Use-after-free vulnerability in Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-0349, CVE-2015-0351, and CVE-2015-0358.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB15-06",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386",
"6Client-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686",
"6Server-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686",
"6Workstation-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2015-3039"
},
{
"category": "external",
"summary": "RHBZ#1211869",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1211869"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2015-3039",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-3039"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2015-3039",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2015-3039"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb15-06.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb15-06.html"
}
],
"release_date": "2015-04-14T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-04-15T13:04:05+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386",
"6Client-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686",
"6Server-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686",
"6Workstation-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:0813"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386",
"6Client-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686",
"6Server-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686",
"6Workstation-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB15-06"
},
{
"cve": "CVE-2015-3040",
"discovery_date": "2015-04-14T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1211898"
}
],
"notes": [
{
"category": "description",
"text": "Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux does not properly restrict discovery of memory addresses, which allows attackers to bypass the ASLR protection mechanism via unspecified vectors, a different vulnerability than CVE-2015-0357.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: information leaks leading to ASLR bypass (APSB15-06)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386",
"6Client-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686",
"6Server-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686",
"6Workstation-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2015-3040"
},
{
"category": "external",
"summary": "RHBZ#1211898",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1211898"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2015-3040",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-3040"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2015-3040",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2015-3040"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb15-06.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb15-06.html"
}
],
"release_date": "2015-04-14T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-04-15T13:04:05+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386",
"6Client-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686",
"6Server-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686",
"6Workstation-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:0813"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 4.3,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:N/A:N",
"version": "2.0"
},
"products": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386",
"6Client-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686",
"6Server-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686",
"6Workstation-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "flash-plugin: information leaks leading to ASLR bypass (APSB15-06)"
},
{
"cve": "CVE-2015-3041",
"discovery_date": "2015-04-14T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1211869"
}
],
"notes": [
{
"category": "description",
"text": "Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-0347, CVE-2015-0350, CVE-2015-0352, CVE-2015-0353, CVE-2015-0354, CVE-2015-0355, CVE-2015-0360, CVE-2015-3038, CVE-2015-3042, and CVE-2015-3043.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB15-06",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386",
"6Client-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686",
"6Server-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686",
"6Workstation-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2015-3041"
},
{
"category": "external",
"summary": "RHBZ#1211869",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1211869"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2015-3041",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-3041"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2015-3041",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2015-3041"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb15-06.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb15-06.html"
}
],
"release_date": "2015-04-14T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-04-15T13:04:05+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386",
"6Client-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686",
"6Server-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686",
"6Workstation-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:0813"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386",
"6Client-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686",
"6Server-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686",
"6Workstation-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB15-06"
},
{
"cve": "CVE-2015-3042",
"discovery_date": "2015-04-14T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1211869"
}
],
"notes": [
{
"category": "description",
"text": "Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-0347, CVE-2015-0350, CVE-2015-0352, CVE-2015-0353, CVE-2015-0354, CVE-2015-0355, CVE-2015-0360, CVE-2015-3038, CVE-2015-3041, and CVE-2015-3043.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB15-06",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386",
"6Client-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686",
"6Server-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686",
"6Workstation-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2015-3042"
},
{
"category": "external",
"summary": "RHBZ#1211869",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1211869"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2015-3042",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-3042"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2015-3042",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2015-3042"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb15-06.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb15-06.html"
}
],
"release_date": "2015-04-14T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-04-15T13:04:05+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386",
"6Client-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686",
"6Server-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686",
"6Workstation-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:0813"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386",
"6Client-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686",
"6Server-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686",
"6Workstation-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB15-06"
},
{
"cve": "CVE-2015-3043",
"discovery_date": "2015-04-14T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1211869"
}
],
"notes": [
{
"category": "description",
"text": "Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, as exploited in the wild in April 2015, a different vulnerability than CVE-2015-0347, CVE-2015-0350, CVE-2015-0352, CVE-2015-0353, CVE-2015-0354, CVE-2015-0355, CVE-2015-0360, CVE-2015-3038, CVE-2015-3041, and CVE-2015-3042.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB15-06",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386",
"6Client-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686",
"6Server-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686",
"6Workstation-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2015-3043"
},
{
"category": "external",
"summary": "RHBZ#1211869",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1211869"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2015-3043",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-3043"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2015-3043",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2015-3043"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb15-06.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb15-06.html"
},
{
"category": "external",
"summary": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog",
"url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
}
],
"release_date": "2015-04-14T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-04-15T13:04:05+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386",
"6Client-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686",
"6Server-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686",
"6Workstation-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:0813"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386",
"6Client-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686",
"6Server-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686",
"6Workstation-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686"
]
}
],
"threats": [
{
"category": "exploit_status",
"date": "2022-03-03T00:00:00+00:00",
"details": "CISA: https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
},
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB15-06"
},
{
"cve": "CVE-2015-3044",
"discovery_date": "2015-04-14T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1211894"
}
],
"notes": [
{
"category": "description",
"text": "Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to bypass intended access restrictions and obtain sensitive information via unspecified vectors.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: security bypass leading to information disclosure (APSB15-06)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386",
"6Client-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686",
"6Server-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686",
"6Workstation-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2015-3044"
},
{
"category": "external",
"summary": "RHBZ#1211894",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1211894"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2015-3044",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-3044"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2015-3044",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2015-3044"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb15-06.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb15-06.html"
}
],
"release_date": "2015-04-14T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-04-15T13:04:05+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386",
"6Client-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686",
"6Server-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686",
"6Workstation-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:0813"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 4.3,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:N/A:N",
"version": "2.0"
},
"products": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386",
"6Client-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686",
"6Server-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686",
"6Workstation-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "flash-plugin: security bypass leading to information disclosure (APSB15-06)"
}
]
}
RHSA-2015_0813
Vulnerability from csaf_redhat - Published: 2015-04-15 13:04 - Updated: 2024-11-14 18:08Double free vulnerability in Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-0359.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Client-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686 | — |
Vendor Fix
fix
|
Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-0350, CVE-2015-0352, CVE-2015-0353, CVE-2015-0354, CVE-2015-0355, CVE-2015-0360, CVE-2015-3038, CVE-2015-3041, CVE-2015-3042, and CVE-2015-3043.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Client-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686 | — |
Vendor Fix
fix
|
Buffer overflow in Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code via unspecified vectors.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Client-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686 | — |
Vendor Fix
fix
|
Use-after-free vulnerability in Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-0351, CVE-2015-0358, and CVE-2015-3039.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Client-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686 | — |
Vendor Fix
fix
|
Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-0347, CVE-2015-0352, CVE-2015-0353, CVE-2015-0354, CVE-2015-0355, CVE-2015-0360, CVE-2015-3038, CVE-2015-3041, CVE-2015-3042, and CVE-2015-3043.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Client-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686 | — |
Vendor Fix
fix
|
Use-after-free vulnerability in Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-0349, CVE-2015-0358, and CVE-2015-3039.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Client-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686 | — |
Vendor Fix
fix
|
Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-0347, CVE-2015-0350, CVE-2015-0353, CVE-2015-0354, CVE-2015-0355, CVE-2015-0360, CVE-2015-3038, CVE-2015-3041, CVE-2015-3042, and CVE-2015-3043.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Client-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686 | — |
Vendor Fix
fix
|
Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-0347, CVE-2015-0350, CVE-2015-0352, CVE-2015-0354, CVE-2015-0355, CVE-2015-0360, CVE-2015-3038, CVE-2015-3041, CVE-2015-3042, and CVE-2015-3043.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Client-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686 | — |
Vendor Fix
fix
|
Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-0347, CVE-2015-0350, CVE-2015-0352, CVE-2015-0353, CVE-2015-0355, CVE-2015-0360, CVE-2015-3038, CVE-2015-3041, CVE-2015-3042, and CVE-2015-3043.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Client-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686 | — |
Vendor Fix
fix
|
Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-0347, CVE-2015-0350, CVE-2015-0352, CVE-2015-0353, CVE-2015-0354, CVE-2015-0360, CVE-2015-3038, CVE-2015-3041, CVE-2015-3042, and CVE-2015-3043.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Client-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686 | — |
Vendor Fix
fix
|
Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code by leveraging an unspecified "type confusion."
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Client-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686 | — |
Vendor Fix
fix
|
Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux does not properly restrict discovery of memory addresses, which allows attackers to bypass the ASLR protection mechanism via unspecified vectors, a different vulnerability than CVE-2015-3040.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Client-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686 | — |
Vendor Fix
fix
|
Use-after-free vulnerability in Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-0349, CVE-2015-0351, and CVE-2015-3039.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Client-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686 | — |
Vendor Fix
fix
|
Double free vulnerability in Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-0346.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Client-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686 | — |
Vendor Fix
fix
|
Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-0347, CVE-2015-0350, CVE-2015-0352, CVE-2015-0353, CVE-2015-0354, CVE-2015-0355, CVE-2015-3038, CVE-2015-3041, CVE-2015-3042, and CVE-2015-3043.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Client-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686 | — |
Vendor Fix
fix
|
Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-0347, CVE-2015-0350, CVE-2015-0352, CVE-2015-0353, CVE-2015-0354, CVE-2015-0355, CVE-2015-0360, CVE-2015-3041, CVE-2015-3042, and CVE-2015-3043.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Client-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686 | — |
Vendor Fix
fix
|
Use-after-free vulnerability in Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-0349, CVE-2015-0351, and CVE-2015-0358.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Client-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686 | — |
Vendor Fix
fix
|
Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux does not properly restrict discovery of memory addresses, which allows attackers to bypass the ASLR protection mechanism via unspecified vectors, a different vulnerability than CVE-2015-0357.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Client-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686 | — |
Vendor Fix
fix
|
Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-0347, CVE-2015-0350, CVE-2015-0352, CVE-2015-0353, CVE-2015-0354, CVE-2015-0355, CVE-2015-0360, CVE-2015-3038, CVE-2015-3042, and CVE-2015-3043.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Client-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686 | — |
Vendor Fix
fix
|
Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-0347, CVE-2015-0350, CVE-2015-0352, CVE-2015-0353, CVE-2015-0354, CVE-2015-0355, CVE-2015-0360, CVE-2015-3038, CVE-2015-3041, and CVE-2015-3043.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Client-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686 | — |
Vendor Fix
fix
|
Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, as exploited in the wild in April 2015, a different vulnerability than CVE-2015-0347, CVE-2015-0350, CVE-2015-0352, CVE-2015-0353, CVE-2015-0354, CVE-2015-0355, CVE-2015-0360, CVE-2015-3038, CVE-2015-3041, and CVE-2015-3042.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Client-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686 | — |
Vendor Fix
fix
|
Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to bypass intended access restrictions and obtain sensitive information via unspecified vectors.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Client-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686 | — |
Vendor Fix
fix
|
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Critical"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An updated Adobe Flash Player package that fixes multiple security issues\nis now available for Red Hat Enterprise Linux 5 and 6 Supplementary.\n\nRed Hat Product Security has rated this update as having Critical security\nimpact. Common Vulnerability Scoring System (CVSS) base scores, which give\ndetailed severity ratings, are available for each vulnerability from the\nCVE links in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "The flash-plugin package contains a Mozilla Firefox compatible Adobe Flash\nPlayer web browser plug-in.\n\nThis update fixes multiple vulnerabilities in Adobe Flash Player. These\nvulnerabilities are detailed in the Adobe Security Bulletin APSB15-06\nlisted in the References section.\n\nMultiple flaws were found in the way flash-plugin displayed certain SWF\ncontent. An attacker could use these flaws to create a specially crafted\nSWF file that would cause flash-plugin to crash or, potentially, execute\narbitrary code when the victim loaded a page containing the malicious SWF\ncontent. (CVE-2015-0346, CVE-2015-0347, CVE-2015-0348, CVE-2015-0349,\nCVE-2015-0350, CVE-2015-0351, CVE-2015-0352, CVE-2015-0353, CVE-2015-0354,\nCVE-2015-0355, CVE-2015-0356, CVE-2015-0358, CVE-2015-0359, CVE-2015-0360,\nCVE-2015-3038, CVE-2015-3039, CVE-2015-3041, CVE-2015-3042, CVE-2015-3043)\n\nA security bypass flaw was found in flash-plugin that could lead to the\ndisclosure of sensitive information. (CVE-2015-3044)\n\nTwo memory information leak flaws were found in flash-plugin that could\nallow an attacker to potentially bypass ASLR (Address Space Layout\nRandomization) protection, and make it easier to exploit other flaws.\n(CVE-2015-0357, CVE-2015-3040)\n\nAll users of Adobe Flash Player should install this updated package, which\nupgrades Flash Player to version 11.2.202.457.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2015:0813",
"url": "https://access.redhat.com/errata/RHSA-2015:0813"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#critical",
"url": "https://access.redhat.com/security/updates/classification/#critical"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb15-06.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb15-06.html"
},
{
"category": "external",
"summary": "1211869",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1211869"
},
{
"category": "external",
"summary": "1211894",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1211894"
},
{
"category": "external",
"summary": "1211898",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1211898"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2015/rhsa-2015_0813.json"
}
],
"title": "Red Hat Security Advisory: flash-plugin security update",
"tracking": {
"current_release_date": "2024-11-14T18:08:18+00:00",
"generator": {
"date": "2024-11-14T18:08:18+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.2.0"
}
},
"id": "RHSA-2015:0813",
"initial_release_date": "2015-04-15T13:04:05+00:00",
"revision_history": [
{
"date": "2015-04-15T13:04:05+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2015-04-15T13:04:05+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2024-11-14T18:08:18+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Desktop Supplementary (v. 6)",
"product": {
"name": "Red Hat Enterprise Linux Desktop Supplementary (v. 6)",
"product_id": "6Client-Supplementary-6.6.z",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_extras:6"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Server Supplementary (v. 6)",
"product": {
"name": "Red Hat Enterprise Linux Server Supplementary (v. 6)",
"product_id": "6Server-Supplementary-6.6.z",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_extras:6"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Workstation Supplementary (v. 6)",
"product": {
"name": "Red Hat Enterprise Linux Workstation Supplementary (v. 6)",
"product_id": "6Workstation-Supplementary-6.6.z",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_extras:6"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Desktop Supplementary (v. 5)",
"product": {
"name": "Red Hat Enterprise Linux Desktop Supplementary (v. 5)",
"product_id": "5Client-Supplementary-5.11.Z",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_extras:5::client"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Server Supplementary (v. 5)",
"product": {
"name": "Red Hat Enterprise Linux Server Supplementary (v. 5)",
"product_id": "5Server-Supplementary-5.11.Z",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_extras:5::server"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux Supplementary"
},
{
"branches": [
{
"category": "product_version",
"name": "flash-plugin-0:11.2.202.457-1.el6_6.i686",
"product": {
"name": "flash-plugin-0:11.2.202.457-1.el6_6.i686",
"product_id": "flash-plugin-0:11.2.202.457-1.el6_6.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/flash-plugin@11.2.202.457-1.el6_6?arch=i686"
}
}
}
],
"category": "architecture",
"name": "i686"
},
{
"branches": [
{
"category": "product_version",
"name": "flash-plugin-0:11.2.202.457-1.el5.i386",
"product": {
"name": "flash-plugin-0:11.2.202.457-1.el5.i386",
"product_id": "flash-plugin-0:11.2.202.457-1.el5.i386",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/flash-plugin@11.2.202.457-1.el5?arch=i386"
}
}
}
],
"category": "architecture",
"name": "i386"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "flash-plugin-0:11.2.202.457-1.el5.i386 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 5)",
"product_id": "5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386"
},
"product_reference": "flash-plugin-0:11.2.202.457-1.el5.i386",
"relates_to_product_reference": "5Client-Supplementary-5.11.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "flash-plugin-0:11.2.202.457-1.el5.i386 as a component of Red Hat Enterprise Linux Server Supplementary (v. 5)",
"product_id": "5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386"
},
"product_reference": "flash-plugin-0:11.2.202.457-1.el5.i386",
"relates_to_product_reference": "5Server-Supplementary-5.11.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "flash-plugin-0:11.2.202.457-1.el6_6.i686 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)",
"product_id": "6Client-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686"
},
"product_reference": "flash-plugin-0:11.2.202.457-1.el6_6.i686",
"relates_to_product_reference": "6Client-Supplementary-6.6.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "flash-plugin-0:11.2.202.457-1.el6_6.i686 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)",
"product_id": "6Server-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686"
},
"product_reference": "flash-plugin-0:11.2.202.457-1.el6_6.i686",
"relates_to_product_reference": "6Server-Supplementary-6.6.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "flash-plugin-0:11.2.202.457-1.el6_6.i686 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)",
"product_id": "6Workstation-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686"
},
"product_reference": "flash-plugin-0:11.2.202.457-1.el6_6.i686",
"relates_to_product_reference": "6Workstation-Supplementary-6.6.z"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2015-0346",
"discovery_date": "2015-04-14T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1211869"
}
],
"notes": [
{
"category": "description",
"text": "Double free vulnerability in Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-0359.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB15-06",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386",
"6Client-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686",
"6Server-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686",
"6Workstation-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2015-0346"
},
{
"category": "external",
"summary": "RHBZ#1211869",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1211869"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2015-0346",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-0346"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2015-0346",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2015-0346"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb15-06.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb15-06.html"
}
],
"release_date": "2015-04-14T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-04-15T13:04:05+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386",
"6Client-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686",
"6Server-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686",
"6Workstation-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:0813"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386",
"6Client-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686",
"6Server-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686",
"6Workstation-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB15-06"
},
{
"cve": "CVE-2015-0347",
"discovery_date": "2015-04-14T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1211869"
}
],
"notes": [
{
"category": "description",
"text": "Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-0350, CVE-2015-0352, CVE-2015-0353, CVE-2015-0354, CVE-2015-0355, CVE-2015-0360, CVE-2015-3038, CVE-2015-3041, CVE-2015-3042, and CVE-2015-3043.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB15-06",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386",
"6Client-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686",
"6Server-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686",
"6Workstation-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2015-0347"
},
{
"category": "external",
"summary": "RHBZ#1211869",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1211869"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2015-0347",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-0347"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2015-0347",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2015-0347"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb15-06.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb15-06.html"
}
],
"release_date": "2015-04-14T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-04-15T13:04:05+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386",
"6Client-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686",
"6Server-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686",
"6Workstation-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:0813"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386",
"6Client-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686",
"6Server-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686",
"6Workstation-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB15-06"
},
{
"cve": "CVE-2015-0348",
"discovery_date": "2015-04-14T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1211869"
}
],
"notes": [
{
"category": "description",
"text": "Buffer overflow in Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code via unspecified vectors.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB15-06",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386",
"6Client-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686",
"6Server-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686",
"6Workstation-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2015-0348"
},
{
"category": "external",
"summary": "RHBZ#1211869",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1211869"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2015-0348",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-0348"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2015-0348",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2015-0348"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb15-06.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb15-06.html"
}
],
"release_date": "2015-04-14T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-04-15T13:04:05+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386",
"6Client-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686",
"6Server-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686",
"6Workstation-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:0813"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386",
"6Client-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686",
"6Server-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686",
"6Workstation-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB15-06"
},
{
"cve": "CVE-2015-0349",
"discovery_date": "2015-04-14T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1211869"
}
],
"notes": [
{
"category": "description",
"text": "Use-after-free vulnerability in Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-0351, CVE-2015-0358, and CVE-2015-3039.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB15-06",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386",
"6Client-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686",
"6Server-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686",
"6Workstation-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2015-0349"
},
{
"category": "external",
"summary": "RHBZ#1211869",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1211869"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2015-0349",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-0349"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2015-0349",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2015-0349"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb15-06.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb15-06.html"
}
],
"release_date": "2015-04-14T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-04-15T13:04:05+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386",
"6Client-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686",
"6Server-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686",
"6Workstation-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:0813"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386",
"6Client-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686",
"6Server-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686",
"6Workstation-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB15-06"
},
{
"cve": "CVE-2015-0350",
"discovery_date": "2015-04-14T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1211869"
}
],
"notes": [
{
"category": "description",
"text": "Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-0347, CVE-2015-0352, CVE-2015-0353, CVE-2015-0354, CVE-2015-0355, CVE-2015-0360, CVE-2015-3038, CVE-2015-3041, CVE-2015-3042, and CVE-2015-3043.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB15-06",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386",
"6Client-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686",
"6Server-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686",
"6Workstation-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2015-0350"
},
{
"category": "external",
"summary": "RHBZ#1211869",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1211869"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2015-0350",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-0350"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2015-0350",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2015-0350"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb15-06.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb15-06.html"
}
],
"release_date": "2015-04-14T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-04-15T13:04:05+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386",
"6Client-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686",
"6Server-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686",
"6Workstation-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:0813"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386",
"6Client-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686",
"6Server-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686",
"6Workstation-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB15-06"
},
{
"cve": "CVE-2015-0351",
"discovery_date": "2015-04-14T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1211869"
}
],
"notes": [
{
"category": "description",
"text": "Use-after-free vulnerability in Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-0349, CVE-2015-0358, and CVE-2015-3039.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB15-06",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386",
"6Client-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686",
"6Server-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686",
"6Workstation-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2015-0351"
},
{
"category": "external",
"summary": "RHBZ#1211869",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1211869"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2015-0351",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-0351"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2015-0351",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2015-0351"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb15-06.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb15-06.html"
}
],
"release_date": "2015-04-14T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-04-15T13:04:05+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386",
"6Client-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686",
"6Server-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686",
"6Workstation-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:0813"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386",
"6Client-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686",
"6Server-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686",
"6Workstation-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB15-06"
},
{
"cve": "CVE-2015-0352",
"discovery_date": "2015-04-14T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1211869"
}
],
"notes": [
{
"category": "description",
"text": "Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-0347, CVE-2015-0350, CVE-2015-0353, CVE-2015-0354, CVE-2015-0355, CVE-2015-0360, CVE-2015-3038, CVE-2015-3041, CVE-2015-3042, and CVE-2015-3043.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB15-06",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386",
"6Client-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686",
"6Server-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686",
"6Workstation-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2015-0352"
},
{
"category": "external",
"summary": "RHBZ#1211869",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1211869"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2015-0352",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-0352"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2015-0352",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2015-0352"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb15-06.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb15-06.html"
}
],
"release_date": "2015-04-14T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-04-15T13:04:05+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386",
"6Client-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686",
"6Server-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686",
"6Workstation-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:0813"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386",
"6Client-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686",
"6Server-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686",
"6Workstation-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB15-06"
},
{
"cve": "CVE-2015-0353",
"discovery_date": "2015-04-14T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1211869"
}
],
"notes": [
{
"category": "description",
"text": "Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-0347, CVE-2015-0350, CVE-2015-0352, CVE-2015-0354, CVE-2015-0355, CVE-2015-0360, CVE-2015-3038, CVE-2015-3041, CVE-2015-3042, and CVE-2015-3043.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB15-06",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386",
"6Client-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686",
"6Server-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686",
"6Workstation-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2015-0353"
},
{
"category": "external",
"summary": "RHBZ#1211869",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1211869"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2015-0353",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-0353"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2015-0353",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2015-0353"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb15-06.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb15-06.html"
}
],
"release_date": "2015-04-14T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-04-15T13:04:05+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386",
"6Client-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686",
"6Server-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686",
"6Workstation-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:0813"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386",
"6Client-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686",
"6Server-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686",
"6Workstation-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB15-06"
},
{
"cve": "CVE-2015-0354",
"discovery_date": "2015-04-14T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1211869"
}
],
"notes": [
{
"category": "description",
"text": "Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-0347, CVE-2015-0350, CVE-2015-0352, CVE-2015-0353, CVE-2015-0355, CVE-2015-0360, CVE-2015-3038, CVE-2015-3041, CVE-2015-3042, and CVE-2015-3043.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB15-06",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386",
"6Client-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686",
"6Server-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686",
"6Workstation-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2015-0354"
},
{
"category": "external",
"summary": "RHBZ#1211869",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1211869"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2015-0354",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-0354"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2015-0354",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2015-0354"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb15-06.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb15-06.html"
}
],
"release_date": "2015-04-14T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-04-15T13:04:05+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386",
"6Client-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686",
"6Server-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686",
"6Workstation-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:0813"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386",
"6Client-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686",
"6Server-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686",
"6Workstation-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB15-06"
},
{
"cve": "CVE-2015-0355",
"discovery_date": "2015-04-14T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1211869"
}
],
"notes": [
{
"category": "description",
"text": "Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-0347, CVE-2015-0350, CVE-2015-0352, CVE-2015-0353, CVE-2015-0354, CVE-2015-0360, CVE-2015-3038, CVE-2015-3041, CVE-2015-3042, and CVE-2015-3043.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB15-06",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386",
"6Client-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686",
"6Server-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686",
"6Workstation-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2015-0355"
},
{
"category": "external",
"summary": "RHBZ#1211869",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1211869"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2015-0355",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-0355"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2015-0355",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2015-0355"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb15-06.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb15-06.html"
}
],
"release_date": "2015-04-14T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-04-15T13:04:05+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386",
"6Client-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686",
"6Server-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686",
"6Workstation-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:0813"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386",
"6Client-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686",
"6Server-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686",
"6Workstation-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB15-06"
},
{
"cve": "CVE-2015-0356",
"discovery_date": "2015-04-14T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1211869"
}
],
"notes": [
{
"category": "description",
"text": "Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code by leveraging an unspecified \"type confusion.\"",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB15-06",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386",
"6Client-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686",
"6Server-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686",
"6Workstation-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2015-0356"
},
{
"category": "external",
"summary": "RHBZ#1211869",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1211869"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2015-0356",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-0356"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2015-0356",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2015-0356"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb15-06.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb15-06.html"
}
],
"release_date": "2015-04-14T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-04-15T13:04:05+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386",
"6Client-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686",
"6Server-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686",
"6Workstation-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:0813"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386",
"6Client-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686",
"6Server-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686",
"6Workstation-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB15-06"
},
{
"cve": "CVE-2015-0357",
"discovery_date": "2015-04-14T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1211898"
}
],
"notes": [
{
"category": "description",
"text": "Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux does not properly restrict discovery of memory addresses, which allows attackers to bypass the ASLR protection mechanism via unspecified vectors, a different vulnerability than CVE-2015-3040.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: information leaks leading to ASLR bypass (APSB15-06)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386",
"6Client-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686",
"6Server-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686",
"6Workstation-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2015-0357"
},
{
"category": "external",
"summary": "RHBZ#1211898",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1211898"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2015-0357",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-0357"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2015-0357",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2015-0357"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb15-06.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb15-06.html"
}
],
"release_date": "2015-04-14T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-04-15T13:04:05+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386",
"6Client-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686",
"6Server-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686",
"6Workstation-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:0813"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 4.3,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:N/A:N",
"version": "2.0"
},
"products": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386",
"6Client-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686",
"6Server-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686",
"6Workstation-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "flash-plugin: information leaks leading to ASLR bypass (APSB15-06)"
},
{
"cve": "CVE-2015-0358",
"discovery_date": "2015-04-14T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1211869"
}
],
"notes": [
{
"category": "description",
"text": "Use-after-free vulnerability in Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-0349, CVE-2015-0351, and CVE-2015-3039.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB15-06",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386",
"6Client-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686",
"6Server-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686",
"6Workstation-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2015-0358"
},
{
"category": "external",
"summary": "RHBZ#1211869",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1211869"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2015-0358",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-0358"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2015-0358",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2015-0358"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb15-06.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb15-06.html"
}
],
"release_date": "2015-04-14T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-04-15T13:04:05+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386",
"6Client-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686",
"6Server-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686",
"6Workstation-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:0813"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386",
"6Client-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686",
"6Server-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686",
"6Workstation-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB15-06"
},
{
"cve": "CVE-2015-0359",
"discovery_date": "2015-04-14T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1211869"
}
],
"notes": [
{
"category": "description",
"text": "Double free vulnerability in Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-0346.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB15-06",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386",
"6Client-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686",
"6Server-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686",
"6Workstation-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2015-0359"
},
{
"category": "external",
"summary": "RHBZ#1211869",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1211869"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2015-0359",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-0359"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2015-0359",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2015-0359"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb15-06.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb15-06.html"
}
],
"release_date": "2015-04-14T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-04-15T13:04:05+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386",
"6Client-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686",
"6Server-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686",
"6Workstation-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:0813"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386",
"6Client-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686",
"6Server-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686",
"6Workstation-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB15-06"
},
{
"cve": "CVE-2015-0360",
"discovery_date": "2015-04-14T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1211869"
}
],
"notes": [
{
"category": "description",
"text": "Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-0347, CVE-2015-0350, CVE-2015-0352, CVE-2015-0353, CVE-2015-0354, CVE-2015-0355, CVE-2015-3038, CVE-2015-3041, CVE-2015-3042, and CVE-2015-3043.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB15-06",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386",
"6Client-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686",
"6Server-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686",
"6Workstation-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2015-0360"
},
{
"category": "external",
"summary": "RHBZ#1211869",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1211869"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2015-0360",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-0360"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2015-0360",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2015-0360"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb15-06.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb15-06.html"
}
],
"release_date": "2015-04-14T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-04-15T13:04:05+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386",
"6Client-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686",
"6Server-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686",
"6Workstation-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:0813"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386",
"6Client-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686",
"6Server-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686",
"6Workstation-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB15-06"
},
{
"cve": "CVE-2015-3038",
"discovery_date": "2015-04-14T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1211869"
}
],
"notes": [
{
"category": "description",
"text": "Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-0347, CVE-2015-0350, CVE-2015-0352, CVE-2015-0353, CVE-2015-0354, CVE-2015-0355, CVE-2015-0360, CVE-2015-3041, CVE-2015-3042, and CVE-2015-3043.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB15-06",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386",
"6Client-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686",
"6Server-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686",
"6Workstation-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2015-3038"
},
{
"category": "external",
"summary": "RHBZ#1211869",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1211869"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2015-3038",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-3038"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2015-3038",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2015-3038"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb15-06.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb15-06.html"
}
],
"release_date": "2015-04-14T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-04-15T13:04:05+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386",
"6Client-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686",
"6Server-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686",
"6Workstation-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:0813"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386",
"6Client-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686",
"6Server-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686",
"6Workstation-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB15-06"
},
{
"cve": "CVE-2015-3039",
"discovery_date": "2015-04-14T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1211869"
}
],
"notes": [
{
"category": "description",
"text": "Use-after-free vulnerability in Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-0349, CVE-2015-0351, and CVE-2015-0358.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB15-06",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386",
"6Client-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686",
"6Server-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686",
"6Workstation-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2015-3039"
},
{
"category": "external",
"summary": "RHBZ#1211869",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1211869"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2015-3039",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-3039"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2015-3039",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2015-3039"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb15-06.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb15-06.html"
}
],
"release_date": "2015-04-14T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-04-15T13:04:05+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386",
"6Client-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686",
"6Server-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686",
"6Workstation-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:0813"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386",
"6Client-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686",
"6Server-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686",
"6Workstation-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB15-06"
},
{
"cve": "CVE-2015-3040",
"discovery_date": "2015-04-14T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1211898"
}
],
"notes": [
{
"category": "description",
"text": "Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux does not properly restrict discovery of memory addresses, which allows attackers to bypass the ASLR protection mechanism via unspecified vectors, a different vulnerability than CVE-2015-0357.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: information leaks leading to ASLR bypass (APSB15-06)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386",
"6Client-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686",
"6Server-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686",
"6Workstation-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2015-3040"
},
{
"category": "external",
"summary": "RHBZ#1211898",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1211898"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2015-3040",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-3040"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2015-3040",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2015-3040"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb15-06.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb15-06.html"
}
],
"release_date": "2015-04-14T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-04-15T13:04:05+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386",
"6Client-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686",
"6Server-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686",
"6Workstation-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:0813"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 4.3,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:N/A:N",
"version": "2.0"
},
"products": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386",
"6Client-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686",
"6Server-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686",
"6Workstation-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "flash-plugin: information leaks leading to ASLR bypass (APSB15-06)"
},
{
"cve": "CVE-2015-3041",
"discovery_date": "2015-04-14T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1211869"
}
],
"notes": [
{
"category": "description",
"text": "Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-0347, CVE-2015-0350, CVE-2015-0352, CVE-2015-0353, CVE-2015-0354, CVE-2015-0355, CVE-2015-0360, CVE-2015-3038, CVE-2015-3042, and CVE-2015-3043.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB15-06",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386",
"6Client-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686",
"6Server-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686",
"6Workstation-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2015-3041"
},
{
"category": "external",
"summary": "RHBZ#1211869",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1211869"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2015-3041",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-3041"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2015-3041",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2015-3041"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb15-06.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb15-06.html"
}
],
"release_date": "2015-04-14T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-04-15T13:04:05+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386",
"6Client-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686",
"6Server-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686",
"6Workstation-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:0813"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386",
"6Client-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686",
"6Server-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686",
"6Workstation-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB15-06"
},
{
"cve": "CVE-2015-3042",
"discovery_date": "2015-04-14T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1211869"
}
],
"notes": [
{
"category": "description",
"text": "Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-0347, CVE-2015-0350, CVE-2015-0352, CVE-2015-0353, CVE-2015-0354, CVE-2015-0355, CVE-2015-0360, CVE-2015-3038, CVE-2015-3041, and CVE-2015-3043.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB15-06",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386",
"6Client-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686",
"6Server-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686",
"6Workstation-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2015-3042"
},
{
"category": "external",
"summary": "RHBZ#1211869",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1211869"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2015-3042",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-3042"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2015-3042",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2015-3042"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb15-06.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb15-06.html"
}
],
"release_date": "2015-04-14T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-04-15T13:04:05+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386",
"6Client-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686",
"6Server-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686",
"6Workstation-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:0813"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386",
"6Client-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686",
"6Server-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686",
"6Workstation-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB15-06"
},
{
"cve": "CVE-2015-3043",
"discovery_date": "2015-04-14T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1211869"
}
],
"notes": [
{
"category": "description",
"text": "Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, as exploited in the wild in April 2015, a different vulnerability than CVE-2015-0347, CVE-2015-0350, CVE-2015-0352, CVE-2015-0353, CVE-2015-0354, CVE-2015-0355, CVE-2015-0360, CVE-2015-3038, CVE-2015-3041, and CVE-2015-3042.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB15-06",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386",
"6Client-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686",
"6Server-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686",
"6Workstation-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2015-3043"
},
{
"category": "external",
"summary": "RHBZ#1211869",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1211869"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2015-3043",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-3043"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2015-3043",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2015-3043"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb15-06.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb15-06.html"
},
{
"category": "external",
"summary": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog",
"url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
}
],
"release_date": "2015-04-14T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-04-15T13:04:05+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386",
"6Client-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686",
"6Server-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686",
"6Workstation-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:0813"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386",
"6Client-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686",
"6Server-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686",
"6Workstation-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686"
]
}
],
"threats": [
{
"category": "exploit_status",
"date": "2022-03-03T00:00:00+00:00",
"details": "CISA: https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
},
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB15-06"
},
{
"cve": "CVE-2015-3044",
"discovery_date": "2015-04-14T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1211894"
}
],
"notes": [
{
"category": "description",
"text": "Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to bypass intended access restrictions and obtain sensitive information via unspecified vectors.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: security bypass leading to information disclosure (APSB15-06)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386",
"6Client-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686",
"6Server-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686",
"6Workstation-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2015-3044"
},
{
"category": "external",
"summary": "RHBZ#1211894",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1211894"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2015-3044",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-3044"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2015-3044",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2015-3044"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb15-06.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb15-06.html"
}
],
"release_date": "2015-04-14T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-04-15T13:04:05+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386",
"6Client-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686",
"6Server-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686",
"6Workstation-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:0813"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 4.3,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:N/A:N",
"version": "2.0"
},
"products": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.457-1.el5.i386",
"6Client-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686",
"6Server-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686",
"6Workstation-Supplementary-6.6.z:flash-plugin-0:11.2.202.457-1.el6_6.i686"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "flash-plugin: security bypass leading to information disclosure (APSB15-06)"
}
]
}
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.