Action not permitted
Modal body text goes here.
Modal Title
Modal Body
CVE-2015-7625 (GCVE-0-2015-7625)
Vulnerability from cvelistv5 – Published: 2015-10-14 23:00 – Updated: 2024-08-06 07:58- n/a
| URL | Tags |
|---|---|
| http://rhn.redhat.com/errata/RHSA-2015-2024.html | vendor-advisoryx_refsource_REDHAT |
| http://lists.opensuse.org/opensuse-security-annou… | vendor-advisoryx_refsource_SUSE |
| http://www.securityfocus.com/bid/77065 | vdb-entryx_refsource_BID |
| http://lists.opensuse.org/opensuse-security-annou… | vendor-advisoryx_refsource_SUSE |
| http://rhn.redhat.com/errata/RHSA-2015-1893.html | vendor-advisoryx_refsource_REDHAT |
| https://security.gentoo.org/glsa/201511-02 | vendor-advisoryx_refsource_GENTOO |
| http://www.securitytracker.com/id/1033797 | vdb-entryx_refsource_SECTRACK |
| https://helpx.adobe.com/security/products/flash-p… | x_refsource_CONFIRM |
| http://lists.opensuse.org/opensuse-security-annou… | vendor-advisoryx_refsource_SUSE |
| http://lists.opensuse.org/opensuse-security-annou… | vendor-advisoryx_refsource_SUSE |
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-06T07:58:57.682Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"name": "RHSA-2015:2024",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT",
"x_transferred"
],
"url": "http://rhn.redhat.com/errata/RHSA-2015-2024.html"
},
{
"name": "openSUSE-SU-2015:1744",
"tags": [
"vendor-advisory",
"x_refsource_SUSE",
"x_transferred"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00013.html"
},
{
"name": "77065",
"tags": [
"vdb-entry",
"x_refsource_BID",
"x_transferred"
],
"url": "http://www.securityfocus.com/bid/77065"
},
{
"name": "SUSE-SU-2015:1742",
"tags": [
"vendor-advisory",
"x_refsource_SUSE",
"x_transferred"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00012.html"
},
{
"name": "RHSA-2015:1893",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT",
"x_transferred"
],
"url": "http://rhn.redhat.com/errata/RHSA-2015-1893.html"
},
{
"name": "GLSA-201511-02",
"tags": [
"vendor-advisory",
"x_refsource_GENTOO",
"x_transferred"
],
"url": "https://security.gentoo.org/glsa/201511-02"
},
{
"name": "1033797",
"tags": [
"vdb-entry",
"x_refsource_SECTRACK",
"x_transferred"
],
"url": "http://www.securitytracker.com/id/1033797"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "https://helpx.adobe.com/security/products/flash-player/apsb15-25.html"
},
{
"name": "SUSE-SU-2015:1740",
"tags": [
"vendor-advisory",
"x_refsource_SUSE",
"x_transferred"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00011.html"
},
{
"name": "openSUSE-SU-2015:1781",
"tags": [
"vendor-advisory",
"x_refsource_SUSE",
"x_transferred"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00018.html"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"datePublic": "2015-10-13T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "Adobe Flash Player before 18.0.0.252 and 19.x before 19.0.0.207 on Windows and OS X and before 11.2.202.535 on Linux, Adobe AIR before 19.0.0.213, Adobe AIR SDK before 19.0.0.213, and Adobe AIR SDK \u0026 Compiler before 19.0.0.213 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-7626, CVE-2015-7627, CVE-2015-7630, CVE-2015-7633, and CVE-2015-7634."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2017-06-30T16:57:01.000Z",
"orgId": "078d4453-3bcd-4900-85e6-15281da43538",
"shortName": "adobe"
},
"references": [
{
"name": "RHSA-2015:2024",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "http://rhn.redhat.com/errata/RHSA-2015-2024.html"
},
{
"name": "openSUSE-SU-2015:1744",
"tags": [
"vendor-advisory",
"x_refsource_SUSE"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00013.html"
},
{
"name": "77065",
"tags": [
"vdb-entry",
"x_refsource_BID"
],
"url": "http://www.securityfocus.com/bid/77065"
},
{
"name": "SUSE-SU-2015:1742",
"tags": [
"vendor-advisory",
"x_refsource_SUSE"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00012.html"
},
{
"name": "RHSA-2015:1893",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "http://rhn.redhat.com/errata/RHSA-2015-1893.html"
},
{
"name": "GLSA-201511-02",
"tags": [
"vendor-advisory",
"x_refsource_GENTOO"
],
"url": "https://security.gentoo.org/glsa/201511-02"
},
{
"name": "1033797",
"tags": [
"vdb-entry",
"x_refsource_SECTRACK"
],
"url": "http://www.securitytracker.com/id/1033797"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://helpx.adobe.com/security/products/flash-player/apsb15-25.html"
},
{
"name": "SUSE-SU-2015:1740",
"tags": [
"vendor-advisory",
"x_refsource_SUSE"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00011.html"
},
{
"name": "openSUSE-SU-2015:1781",
"tags": [
"vendor-advisory",
"x_refsource_SUSE"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00018.html"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "psirt@adobe.com",
"ID": "CVE-2015-7625",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "Adobe Flash Player before 18.0.0.252 and 19.x before 19.0.0.207 on Windows and OS X and before 11.2.202.535 on Linux, Adobe AIR before 19.0.0.213, Adobe AIR SDK before 19.0.0.213, and Adobe AIR SDK \u0026 Compiler before 19.0.0.213 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-7626, CVE-2015-7627, CVE-2015-7630, CVE-2015-7633, and CVE-2015-7634."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "RHSA-2015:2024",
"refsource": "REDHAT",
"url": "http://rhn.redhat.com/errata/RHSA-2015-2024.html"
},
{
"name": "openSUSE-SU-2015:1744",
"refsource": "SUSE",
"url": "http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00013.html"
},
{
"name": "77065",
"refsource": "BID",
"url": "http://www.securityfocus.com/bid/77065"
},
{
"name": "SUSE-SU-2015:1742",
"refsource": "SUSE",
"url": "http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00012.html"
},
{
"name": "RHSA-2015:1893",
"refsource": "REDHAT",
"url": "http://rhn.redhat.com/errata/RHSA-2015-1893.html"
},
{
"name": "GLSA-201511-02",
"refsource": "GENTOO",
"url": "https://security.gentoo.org/glsa/201511-02"
},
{
"name": "1033797",
"refsource": "SECTRACK",
"url": "http://www.securitytracker.com/id/1033797"
},
{
"name": "https://helpx.adobe.com/security/products/flash-player/apsb15-25.html",
"refsource": "CONFIRM",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb15-25.html"
},
{
"name": "SUSE-SU-2015:1740",
"refsource": "SUSE",
"url": "http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00011.html"
},
{
"name": "openSUSE-SU-2015:1781",
"refsource": "SUSE",
"url": "http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00018.html"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "078d4453-3bcd-4900-85e6-15281da43538",
"assignerShortName": "adobe",
"cveId": "CVE-2015-7625",
"datePublished": "2015-10-14T23:00:00.000Z",
"dateReserved": "2015-10-01T00:00:00.000Z",
"dateUpdated": "2024-08-06T07:58:57.682Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1",
"vulnerability-lookup:meta": {
"epss": {
"cve": "CVE-2015-7625",
"date": "2026-05-22",
"epss": "0.11151",
"percentile": "0.93577"
},
"fkie_nvd": {
"configurations": "[{\"operator\": \"AND\", \"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:adobe:flash_player:*:*:*:*:*:*:*:*\", \"versionEndIncluding\": \"19.0.0.185\", \"matchCriteriaId\": \"4B5C6B1A-74BB-44D2-8345-47B58E162A9E\"}]}, {\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": false, \"criteria\": \"cpe:2.3:o:apple:mac_os_x:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"4781BF1E-8A4E-4AFF-9540-23D523EE30DD\"}, {\"vulnerable\": false, \"criteria\": \"cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"A2572D17-1DE6-457B-99CC-64AFD54487EA\"}]}]}, {\"operator\": \"AND\", \"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:adobe:air:*:*:*:*:*:*:*:*\", \"versionEndIncluding\": \"19.0.0.190\", \"matchCriteriaId\": \"9919F0A0-8C37-44ED-93B0-ADB71BCA09D8\"}]}, {\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": false, \"criteria\": \"cpe:2.3:o:google:android:*:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"8255F035-04C8-4158-B301-82101711939C\"}]}]}, {\"operator\": \"AND\", \"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:adobe:flash_player:*:*:*:*:*:*:*:*\", \"versionEndIncluding\": \"11.2.202.521\", \"matchCriteriaId\": \"5DB8F2CA-673A-4FDA-9EE9-9B76A0B75DA9\"}]}, {\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": false, \"criteria\": \"cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"703AF700-7A70-47E2-BC3A-7FD03B3CA9C1\"}]}]}, {\"operator\": \"AND\", \"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:adobe:air:*:*:*:*:*:*:*:*\", \"versionEndIncluding\": \"19.0.0.190\", \"matchCriteriaId\": \"9919F0A0-8C37-44ED-93B0-ADB71BCA09D8\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:adobe:air_sdk:*:*:*:*:*:*:*:*\", \"versionEndIncluding\": \"19.0.0.190\", \"matchCriteriaId\": \"80C36C62-17DD-4815-90A5-02E3F123173C\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:adobe:air_sdk_\\\\\u0026_compiler:*:*:*:*:*:*:*:*\", \"versionEndIncluding\": \"19.0.0.190\", \"matchCriteriaId\": \"C01DD02E-6F2C-4A63-87E0-AB7AE1B6F451\"}]}, {\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": false, \"criteria\": \"cpe:2.3:o:apple:mac_os_x:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"4781BF1E-8A4E-4AFF-9540-23D523EE30DD\"}, {\"vulnerable\": false, \"criteria\": \"cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"A2572D17-1DE6-457B-99CC-64AFD54487EA\"}]}]}]",
"descriptions": "[{\"lang\": \"en\", \"value\": \"Adobe Flash Player before 18.0.0.252 and 19.x before 19.0.0.207 on Windows and OS X and before 11.2.202.535 on Linux, Adobe AIR before 19.0.0.213, Adobe AIR SDK before 19.0.0.213, and Adobe AIR SDK \u0026 Compiler before 19.0.0.213 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-7626, CVE-2015-7627, CVE-2015-7630, CVE-2015-7633, and CVE-2015-7634.\"}, {\"lang\": \"es\", \"value\": \"Adobe Flash Player en versiones anteriores a 18.0.0.252 y 19.x en versiones anteriores a 19.0.0.207 en Windows y OS X y en versiones anteriores a 11.2.202.535 en Linux, Adobe AIR en versiones anteriores a 19.0.0.213, Adobe AIR SDK en versiones anteriores a 19.0.0.213 y Adobe AIR SDK \u0026 Compiler en versiones anteriores a 19.0.0.213 permite a atacantes ejecutar c\\u00f3digo arbitrario o causar una denegaci\\u00f3n de servicio (corrupci\\u00f3n de memoria) a trav\\u00e9s de vectores no especificados, una vulnerabilidad diferente a CVE-2015-7626, CVE-2015-7627, CVE-2015-7630, CVE-2015-7633 y CVE-2015-7634.\"}]",
"id": "CVE-2015-7625",
"lastModified": "2024-11-21T02:37:05.120",
"metrics": "{\"cvssMetricV2\": [{\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"cvssData\": {\"version\": \"2.0\", \"vectorString\": \"AV:N/AC:L/Au:N/C:C/I:C/A:C\", \"baseScore\": 10.0, \"accessVector\": \"NETWORK\", \"accessComplexity\": \"LOW\", \"authentication\": \"NONE\", \"confidentialityImpact\": \"COMPLETE\", \"integrityImpact\": \"COMPLETE\", \"availabilityImpact\": \"COMPLETE\"}, \"baseSeverity\": \"HIGH\", \"exploitabilityScore\": 10.0, \"impactScore\": 10.0, \"acInsufInfo\": true, \"obtainAllPrivilege\": false, \"obtainUserPrivilege\": false, \"obtainOtherPrivilege\": false, \"userInteractionRequired\": false}]}",
"published": "2015-10-14T23:59:58.827",
"references": "[{\"url\": \"http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00011.html\", \"source\": \"psirt@adobe.com\"}, {\"url\": \"http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00012.html\", \"source\": \"psirt@adobe.com\"}, {\"url\": \"http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00013.html\", \"source\": \"psirt@adobe.com\"}, {\"url\": \"http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00018.html\", \"source\": \"psirt@adobe.com\"}, {\"url\": \"http://rhn.redhat.com/errata/RHSA-2015-1893.html\", \"source\": \"psirt@adobe.com\"}, {\"url\": \"http://rhn.redhat.com/errata/RHSA-2015-2024.html\", \"source\": \"psirt@adobe.com\"}, {\"url\": \"http://www.securityfocus.com/bid/77065\", \"source\": \"psirt@adobe.com\"}, {\"url\": \"http://www.securitytracker.com/id/1033797\", \"source\": \"psirt@adobe.com\"}, {\"url\": \"https://helpx.adobe.com/security/products/flash-player/apsb15-25.html\", \"source\": \"psirt@adobe.com\", \"tags\": [\"Patch\", \"Vendor Advisory\"]}, {\"url\": \"https://security.gentoo.org/glsa/201511-02\", \"source\": \"psirt@adobe.com\"}, {\"url\": \"http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00011.html\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00012.html\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00013.html\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00018.html\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://rhn.redhat.com/errata/RHSA-2015-1893.html\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://rhn.redhat.com/errata/RHSA-2015-2024.html\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://www.securityfocus.com/bid/77065\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://www.securitytracker.com/id/1033797\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"https://helpx.adobe.com/security/products/flash-player/apsb15-25.html\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Patch\", \"Vendor Advisory\"]}, {\"url\": \"https://security.gentoo.org/glsa/201511-02\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}]",
"sourceIdentifier": "psirt@adobe.com",
"vulnStatus": "Modified",
"weaknesses": "[{\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"description\": [{\"lang\": \"en\", \"value\": \"CWE-119\"}]}]"
},
"nvd": "{\"cve\":{\"id\":\"CVE-2015-7625\",\"sourceIdentifier\":\"psirt@adobe.com\",\"published\":\"2015-10-14T23:59:58.827\",\"lastModified\":\"2026-05-06T22:30:45.220\",\"vulnStatus\":\"Modified\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"Adobe Flash Player before 18.0.0.252 and 19.x before 19.0.0.207 on Windows and OS X and before 11.2.202.535 on Linux, Adobe AIR before 19.0.0.213, Adobe AIR SDK before 19.0.0.213, and Adobe AIR SDK \u0026 Compiler before 19.0.0.213 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-7626, CVE-2015-7627, CVE-2015-7630, CVE-2015-7633, and CVE-2015-7634.\"},{\"lang\":\"es\",\"value\":\"Adobe Flash Player en versiones anteriores a 18.0.0.252 y 19.x en versiones anteriores a 19.0.0.207 en Windows y OS X y en versiones anteriores a 11.2.202.535 en Linux, Adobe AIR en versiones anteriores a 19.0.0.213, Adobe AIR SDK en versiones anteriores a 19.0.0.213 y Adobe AIR SDK \u0026 Compiler en versiones anteriores a 19.0.0.213 permite a atacantes ejecutar c\u00f3digo arbitrario o causar una denegaci\u00f3n de servicio (corrupci\u00f3n de memoria) a trav\u00e9s de vectores no especificados, una vulnerabilidad diferente a CVE-2015-7626, CVE-2015-7627, CVE-2015-7630, CVE-2015-7633 y CVE-2015-7634.\"}],\"metrics\":{\"cvssMetricV2\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"2.0\",\"vectorString\":\"AV:N/AC:L/Au:N/C:C/I:C/A:C\",\"baseScore\":10.0,\"accessVector\":\"NETWORK\",\"accessComplexity\":\"LOW\",\"authentication\":\"NONE\",\"confidentialityImpact\":\"COMPLETE\",\"integrityImpact\":\"COMPLETE\",\"availabilityImpact\":\"COMPLETE\"},\"baseSeverity\":\"HIGH\",\"exploitabilityScore\":10.0,\"impactScore\":10.0,\"acInsufInfo\":true,\"obtainAllPrivilege\":false,\"obtainUserPrivilege\":false,\"obtainOtherPrivilege\":false,\"userInteractionRequired\":false}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-119\"}]}],\"configurations\":[{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:flash_player:*:*:*:*:*:*:*:*\",\"versionEndIncluding\":\"19.0.0.185\",\"matchCriteriaId\":\"4B5C6B1A-74BB-44D2-8345-47B58E162A9E\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:o:apple:mac_os_x:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"4781BF1E-8A4E-4AFF-9540-23D523EE30DD\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"A2572D17-1DE6-457B-99CC-64AFD54487EA\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:air:*:*:*:*:*:*:*:*\",\"versionEndIncluding\":\"19.0.0.190\",\"matchCriteriaId\":\"9919F0A0-8C37-44ED-93B0-ADB71BCA09D8\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:o:google:android:*:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"8255F035-04C8-4158-B301-82101711939C\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:flash_player:*:*:*:*:*:*:*:*\",\"versionEndIncluding\":\"11.2.202.521\",\"matchCriteriaId\":\"5DB8F2CA-673A-4FDA-9EE9-9B76A0B75DA9\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"703AF700-7A70-47E2-BC3A-7FD03B3CA9C1\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:air:*:*:*:*:*:*:*:*\",\"versionEndIncluding\":\"19.0.0.190\",\"matchCriteriaId\":\"9919F0A0-8C37-44ED-93B0-ADB71BCA09D8\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:air_sdk:*:*:*:*:*:*:*:*\",\"versionEndIncluding\":\"19.0.0.190\",\"matchCriteriaId\":\"80C36C62-17DD-4815-90A5-02E3F123173C\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:air_sdk_\\\\\u0026_compiler:*:*:*:*:*:*:*:*\",\"versionEndIncluding\":\"19.0.0.190\",\"matchCriteriaId\":\"C01DD02E-6F2C-4A63-87E0-AB7AE1B6F451\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:o:apple:mac_os_x:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"4781BF1E-8A4E-4AFF-9540-23D523EE30DD\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"A2572D17-1DE6-457B-99CC-64AFD54487EA\"}]}]}],\"references\":[{\"url\":\"http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00011.html\",\"source\":\"psirt@adobe.com\"},{\"url\":\"http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00012.html\",\"source\":\"psirt@adobe.com\"},{\"url\":\"http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00013.html\",\"source\":\"psirt@adobe.com\"},{\"url\":\"http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00018.html\",\"source\":\"psirt@adobe.com\"},{\"url\":\"http://rhn.redhat.com/errata/RHSA-2015-1893.html\",\"source\":\"psirt@adobe.com\"},{\"url\":\"http://rhn.redhat.com/errata/RHSA-2015-2024.html\",\"source\":\"psirt@adobe.com\"},{\"url\":\"http://www.securityfocus.com/bid/77065\",\"source\":\"psirt@adobe.com\"},{\"url\":\"http://www.securitytracker.com/id/1033797\",\"source\":\"psirt@adobe.com\"},{\"url\":\"https://helpx.adobe.com/security/products/flash-player/apsb15-25.html\",\"source\":\"psirt@adobe.com\",\"tags\":[\"Patch\",\"Vendor Advisory\"]},{\"url\":\"https://security.gentoo.org/glsa/201511-02\",\"source\":\"psirt@adobe.com\"},{\"url\":\"http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00011.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00012.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00013.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00018.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://rhn.redhat.com/errata/RHSA-2015-1893.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://rhn.redhat.com/errata/RHSA-2015-2024.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.securityfocus.com/bid/77065\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.securitytracker.com/id/1033797\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://helpx.adobe.com/security/products/flash-player/apsb15-25.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\",\"Vendor Advisory\"]},{\"url\":\"https://security.gentoo.org/glsa/201511-02\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"}]}}"
}
}
CERTFR-2015-AVI-428
Vulnerability from certfr_avis - Published: - Updated:
De multiples vulnérabilités ont été corrigées dans Adobe Flash Player. Elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance et une atteinte à la confidentialité des données.
Solution
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
None| Vendor | Product | Description | ||
|---|---|---|---|---|
| Adobe | N/A | Adobe Flash Player Desktop Runtime jusqu'à la version 19.0.0.185 | ||
| Adobe | N/A | Adobe Flash Player pour Microsoft Edge et Internet Explorer 11 jusqu'à la version 19.0.0.185 | ||
| Adobe | N/A | AIR SDK & Compiler jusqu'à la version 19.0.0.190 | ||
| Adobe | N/A | AIR Desktop Runtime jusqu'à la version 19.0.0.190 | ||
| Adobe | N/A | Adobe Flash Player pour Linux jusqu'à la version 11.2.202.521 | ||
| Adobe | N/A | Adobe Flash Player ESR jusqu'à la version 18.0.0.241 | ||
| Adobe | N/A | Adobe Flash Player pour Google Chrome jusqu'à la version 19.0.0.185 | ||
| Adobe | N/A | AIR SDK jusqu'à la version 19.0.0.190 | ||
| Adobe | N/A | Adobe Flash Player pour Internet Explorer 10 et 11 jusqu'à la version 19.0.0.185 |
| Title | Publication Time | Tags | |||
|---|---|---|---|---|---|
|
|||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "Adobe Flash Player Desktop Runtime jusqu\u0027\u00e0 la version 19.0.0.185",
"product": {
"name": "N/A",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": "Adobe Flash Player pour Microsoft Edge et Internet Explorer 11 jusqu\u0027\u00e0 la version 19.0.0.185",
"product": {
"name": "N/A",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": "AIR SDK \u0026 Compiler jusqu\u0027\u00e0 la version 19.0.0.190",
"product": {
"name": "N/A",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": "AIR Desktop Runtime jusqu\u0027\u00e0 la version 19.0.0.190",
"product": {
"name": "N/A",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": "Adobe Flash Player pour Linux jusqu\u0027\u00e0 la version 11.2.202.521",
"product": {
"name": "N/A",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": "Adobe Flash Player ESR jusqu\u0027\u00e0 la version 18.0.0.241",
"product": {
"name": "N/A",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": "Adobe Flash Player pour Google Chrome jusqu\u0027\u00e0 la version 19.0.0.185",
"product": {
"name": "N/A",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": "AIR SDK jusqu\u0027\u00e0 la version 19.0.0.190",
"product": {
"name": "N/A",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": "Adobe Flash Player pour Internet Explorer 10 et 11 jusqu\u0027\u00e0 la version 19.0.0.185",
"product": {
"name": "N/A",
"vendor": {
"name": "Adobe",
"scada": false
}
}
}
],
"affected_systems_content": null,
"content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
"cves": [
{
"name": "CVE-2015-7632",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-7632"
},
{
"name": "CVE-2015-7628",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-7628"
},
{
"name": "CVE-2015-7644",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-7644"
},
{
"name": "CVE-2015-7643",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-7643"
},
{
"name": "CVE-2015-7626",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-7626"
},
{
"name": "CVE-2015-7634",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-7634"
},
{
"name": "CVE-2015-7629",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-7629"
},
{
"name": "CVE-2015-7630",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-7630"
},
{
"name": "CVE-2015-7627",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-7627"
},
{
"name": "CVE-2015-7625",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-7625"
},
{
"name": "CVE-2015-5569",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-5569"
},
{
"name": "CVE-2015-7631",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-7631"
},
{
"name": "CVE-2015-7633",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-7633"
}
],
"links": [],
"reference": "CERTFR-2015-AVI-428",
"revisions": [
{
"description": "version initiale.",
"revision_date": "2015-10-14T00:00:00.000000"
}
],
"risks": [
{
"description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
},
{
"description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
}
],
"summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 corrig\u00e9es dans \u003cspan\nclass=\"textit\"\u003eAdobe Flash Player\u003c/span\u003e. Elles permettent \u00e0 un\nattaquant de provoquer une ex\u00e9cution de code arbitraire \u00e0 distance et\nune atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es.\n",
"title": "Multiples vuln\u00e9rabilit\u00e9s dans Adobe Flash Player",
"vendor_advisories": [
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Adobe APSB15-25 du 15 octobre 2015",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb15-25.html"
}
]
}
CERTFR-2015-AVI-428
Vulnerability from certfr_avis - Published: - Updated:
De multiples vulnérabilités ont été corrigées dans Adobe Flash Player. Elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance et une atteinte à la confidentialité des données.
Solution
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
None| Vendor | Product | Description | ||
|---|---|---|---|---|
| Adobe | N/A | Adobe Flash Player Desktop Runtime jusqu'à la version 19.0.0.185 | ||
| Adobe | N/A | Adobe Flash Player pour Microsoft Edge et Internet Explorer 11 jusqu'à la version 19.0.0.185 | ||
| Adobe | N/A | AIR SDK & Compiler jusqu'à la version 19.0.0.190 | ||
| Adobe | N/A | AIR Desktop Runtime jusqu'à la version 19.0.0.190 | ||
| Adobe | N/A | Adobe Flash Player pour Linux jusqu'à la version 11.2.202.521 | ||
| Adobe | N/A | Adobe Flash Player ESR jusqu'à la version 18.0.0.241 | ||
| Adobe | N/A | Adobe Flash Player pour Google Chrome jusqu'à la version 19.0.0.185 | ||
| Adobe | N/A | AIR SDK jusqu'à la version 19.0.0.190 | ||
| Adobe | N/A | Adobe Flash Player pour Internet Explorer 10 et 11 jusqu'à la version 19.0.0.185 |
| Title | Publication Time | Tags | |||
|---|---|---|---|---|---|
|
|||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "Adobe Flash Player Desktop Runtime jusqu\u0027\u00e0 la version 19.0.0.185",
"product": {
"name": "N/A",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": "Adobe Flash Player pour Microsoft Edge et Internet Explorer 11 jusqu\u0027\u00e0 la version 19.0.0.185",
"product": {
"name": "N/A",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": "AIR SDK \u0026 Compiler jusqu\u0027\u00e0 la version 19.0.0.190",
"product": {
"name": "N/A",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": "AIR Desktop Runtime jusqu\u0027\u00e0 la version 19.0.0.190",
"product": {
"name": "N/A",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": "Adobe Flash Player pour Linux jusqu\u0027\u00e0 la version 11.2.202.521",
"product": {
"name": "N/A",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": "Adobe Flash Player ESR jusqu\u0027\u00e0 la version 18.0.0.241",
"product": {
"name": "N/A",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": "Adobe Flash Player pour Google Chrome jusqu\u0027\u00e0 la version 19.0.0.185",
"product": {
"name": "N/A",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": "AIR SDK jusqu\u0027\u00e0 la version 19.0.0.190",
"product": {
"name": "N/A",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": "Adobe Flash Player pour Internet Explorer 10 et 11 jusqu\u0027\u00e0 la version 19.0.0.185",
"product": {
"name": "N/A",
"vendor": {
"name": "Adobe",
"scada": false
}
}
}
],
"affected_systems_content": null,
"content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
"cves": [
{
"name": "CVE-2015-7632",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-7632"
},
{
"name": "CVE-2015-7628",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-7628"
},
{
"name": "CVE-2015-7644",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-7644"
},
{
"name": "CVE-2015-7643",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-7643"
},
{
"name": "CVE-2015-7626",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-7626"
},
{
"name": "CVE-2015-7634",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-7634"
},
{
"name": "CVE-2015-7629",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-7629"
},
{
"name": "CVE-2015-7630",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-7630"
},
{
"name": "CVE-2015-7627",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-7627"
},
{
"name": "CVE-2015-7625",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-7625"
},
{
"name": "CVE-2015-5569",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-5569"
},
{
"name": "CVE-2015-7631",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-7631"
},
{
"name": "CVE-2015-7633",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-7633"
}
],
"links": [],
"reference": "CERTFR-2015-AVI-428",
"revisions": [
{
"description": "version initiale.",
"revision_date": "2015-10-14T00:00:00.000000"
}
],
"risks": [
{
"description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
},
{
"description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
}
],
"summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 corrig\u00e9es dans \u003cspan\nclass=\"textit\"\u003eAdobe Flash Player\u003c/span\u003e. Elles permettent \u00e0 un\nattaquant de provoquer une ex\u00e9cution de code arbitraire \u00e0 distance et\nune atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es.\n",
"title": "Multiples vuln\u00e9rabilit\u00e9s dans Adobe Flash Player",
"vendor_advisories": [
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Adobe APSB15-25 du 15 octobre 2015",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb15-25.html"
}
]
}
BDU:2015-11779
Vulnerability from fstec - Published: 15.10.2015{
"CVSS 2.0": "AV:N/AC:L/Au:N/C:C/I:C/A:C",
"CVSS 3.0": null,
"CVSS 4.0": null,
"remediation_\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": null,
"remediation_\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435": null,
"\u0412\u0435\u043d\u0434\u043e\u0440 \u041f\u041e": "Adobe Systems Inc.",
"\u0412\u0435\u0440\u0441\u0438\u044f \u041f\u041e": "\u0434\u043e 19.0.0.213 (Adobe Integrated Runtime), \u0434\u043e 18.0.0.252 (Flash Player), \u043e\u0442 19.0 \u0434\u043e 19.0.0.107 (Flash Player), \u0434\u043e 11.2.202.535 (Flash Player)",
"\u0412\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u0435 \u043c\u0435\u0440\u044b \u043f\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044e": "\u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0439 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044f:\nhttps://helpx.adobe.com/security/products/flash-player/apsb15-25.html",
"\u0414\u0430\u0442\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f": "15.10.2015",
"\u0414\u0430\u0442\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0433\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f": "23.03.2021",
"\u0414\u0430\u0442\u0430 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438": "29.10.2015",
"\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": "BDU:2015-11779",
"\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u044b \u0434\u0440\u0443\u0433\u0438\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "CVE-2015-7625",
"\u0418\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430",
"\u041a\u043b\u0430\u0441\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043a\u043e\u0434\u0430",
"\u041d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 \u041f\u041e": "Adobe Integrated Runtime, Flash Player",
"\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u041e\u0421 \u0438 \u0442\u0438\u043f \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b": "\u0421\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u043e \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f Linux . 64-bit, \u0421\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u043e \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f Linux . 32-bit, Apple Inc. MacOS X 32-bit, \u0421\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u043e \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f Linux . PowerPC, Microsoft Corp Windows - 64-bit, Microsoft Corp Windows - 32-bit, Apple Inc. MacOS X 64-bit, Apple Inc. MacOS X PowerPC, Google Inc Android . 64-bit, Google Inc Android . 32-bit, Google Inc Android . ARM, \u0421\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u043e \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f Linux . ARM, Microsoft Corp Windows - ARM, BlackBerry Limited Tablet OS . ARM, Apple Inc. iOS . PowerPC, Apple Inc. MacOS X ARM, Apple Inc. iOS . ARM",
"\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u044b\u0445 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c Flash Player \u0438 Adobe Integrated Runtime, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434",
"\u041d\u0430\u043b\u0438\u0447\u0438\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
"\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "\u0412\u044b\u0445\u043e\u0434 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u0438 \u0437\u0430 \u0433\u0440\u0430\u043d\u0438\u0446\u044b \u0431\u0443\u0444\u0435\u0440\u0430 \u0432 \u043f\u0430\u043c\u044f\u0442\u0438 (CWE-119)",
"\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u044b\u0445 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c Flash Player \u0438 Adobe Integrated Runtime \u0432\u044b\u0437\u0432\u0430\u043d\u0430 \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435\u043c \u0431\u0443\u0444\u0435\u0440\u0430. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e, \u0434\u0435\u0439\u0441\u0442\u0432\u0443\u044e\u0449\u0435\u043c\u0443 \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e, \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434",
"\u041f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
"\u041f\u0440\u043e\u0447\u0430\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f": "-",
"\u0421\u0432\u044f\u0437\u044c \u0441 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430\u043c\u0438 \u0418\u0411": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
"\u0421\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u0430",
"\u0421\u043f\u043e\u0441\u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
"\u0421\u043f\u043e\u0441\u043e\u0431 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
"\u0421\u0441\u044b\u043b\u043a\u0438 \u043d\u0430 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0438": "https://helpx.adobe.com/security/products/flash-player/apsb15-25.html",
"\u0421\u0442\u0430\u0442\u0443\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u043c",
"\u0422\u0438\u043f \u041f\u041e": "\u041f\u0440\u0438\u043a\u043b\u0430\u0434\u043d\u043e\u0435 \u041f\u041e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c",
"\u0422\u0438\u043f \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "CWE-119",
"\u0423\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 2.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 10)"
}
CNVD-2015-06674
Vulnerability from cnvd - Published: 2015-10-20用户可参考如下厂商提供的安全公告获取补丁以修复该漏洞: https://helpx.adobe.com/content/help/en/security/products/flash-player/apsb15-25.html
| Name | ['Adobe Flash Player(on Linux) <11.2.202.535', 'Adobe Flash Player(on Windows/OS X) 19.x(<19.0.0.207)', 'Adobe AIR SDK & Compiler <19.0.0.213', 'Adobe Flash Player <18.0.0.252', 'Adobe AIR SDK <19.0.0.213', 'Adobe AIR <19.0.0.213'] |
|---|
{
"cves": {
"cve": {
"cveNumber": "CVE-2015-7625"
}
},
"description": "Adobe Flash Player\u662f\u4e00\u6b3eFlash\u6587\u4ef6\u5904\u7406\u7a0b\u5e8f\u3002\r\n\r\nAdobe Flash Player\u5b58\u5728\u672a\u660e\u5185\u5b58\u7834\u574f\u6f0f\u6d1e\u3002\u5141\u8bb8\u8fdc\u7a0b\u653b\u51fb\u8005\u6784\u5efa\u6076\u610fSWF\u5185\u5bb9\uff0c\u8bf1\u4f7f\u7528\u6237\u89e3\u6790\uff0c\u53ef\u6267\u884c\u4efb\u610f\u4ee3\u7801\u3002",
"discovererName": "Jincheng Liu and Lijun Cheng of the Alibaba Security Research Team",
"formalWay": "\u7528\u6237\u53ef\u53c2\u8003\u5982\u4e0b\u5382\u5546\u63d0\u4f9b\u7684\u5b89\u5168\u516c\u544a\u83b7\u53d6\u8865\u4e01\u4ee5\u4fee\u590d\u8be5\u6f0f\u6d1e\uff1a\r\nhttps://helpx.adobe.com/content/help/en/security/products/flash-player/apsb15-25.html",
"isEvent": "\u901a\u7528\u8f6f\u786c\u4ef6\u6f0f\u6d1e",
"number": "CNVD-2015-06674",
"openTime": "2015-10-20",
"patchDescription": "Adobe Flash Player\u662f\u4e00\u6b3eFlash\u6587\u4ef6\u5904\u7406\u7a0b\u5e8f\u3002\r\nAdobe Flash Player\u5b58\u5728\u672a\u660e\u5185\u5b58\u7834\u574f\u6f0f\u6d1e\uff0c\u5141\u8bb8\u8fdc\u7a0b\u653b\u51fb\u8005\u6784\u5efa\u6076\u610fSWF\u5185\u5bb9\uff0c\u8bf1\u4f7f\u7528\u6237\u89e3\u6790\uff0c\u53ef\u6267\u884c\u4efb\u610f\u4ee3\u7801\u3002\u76ee\u524d\uff0c\u4f9b\u5e94\u5546\u53d1\u5e03\u4e86\u5b89\u5168\u516c\u544a\u53ca\u76f8\u5173\u8865\u4e01\u4fe1\u606f\uff0c\u4fee\u590d\u4e86\u6b64\u6f0f\u6d1e\u3002",
"patchName": "Adobe Flash Player\u5185\u5b58\u7834\u574f\u6f0f\u6d1e\uff08CNVD-2015-06674\uff09\u7684\u8865\u4e01",
"products": {
"product": [
"Adobe Flash Player(on Linux) \u003c11.2.202.535",
"Adobe Flash Player(on Windows/OS X) 19.x(\u003c19.0.0.207)",
"Adobe AIR SDK \u0026 Compiler \u003c19.0.0.213",
"Adobe Flash Player \u003c18.0.0.252",
"Adobe AIR SDK \u003c19.0.0.213",
"Adobe AIR \u003c19.0.0.213"
]
},
"referenceLink": "https://helpx.adobe.com/content/help/en/security/products/flash-player/apsb15-25.html",
"serverity": "\u9ad8",
"submitTime": "2015-10-15",
"title": "Adobe Flash Player\u5185\u5b58\u7834\u574f\u6f0f\u6d1e\uff08CNVD-2015-06674\uff09"
}
FKIE_CVE-2015-7625
Vulnerability from fkie_nvd - Published: 2015-10-14 23:59 - Updated: 2026-05-06 22:30{
"configurations": [
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:adobe:flash_player:*:*:*:*:*:*:*:*",
"matchCriteriaId": "4B5C6B1A-74BB-44D2-8345-47B58E162A9E",
"versionEndIncluding": "19.0.0.185",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:apple:mac_os_x:-:*:*:*:*:*:*:*",
"matchCriteriaId": "4781BF1E-8A4E-4AFF-9540-23D523EE30DD",
"vulnerable": false
},
{
"criteria": "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
"matchCriteriaId": "A2572D17-1DE6-457B-99CC-64AFD54487EA",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:adobe:air:*:*:*:*:*:*:*:*",
"matchCriteriaId": "9919F0A0-8C37-44ED-93B0-ADB71BCA09D8",
"versionEndIncluding": "19.0.0.190",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:google:android:*:*:*:*:*:*:*:*",
"matchCriteriaId": "8255F035-04C8-4158-B301-82101711939C",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:adobe:flash_player:*:*:*:*:*:*:*:*",
"matchCriteriaId": "5DB8F2CA-673A-4FDA-9EE9-9B76A0B75DA9",
"versionEndIncluding": "11.2.202.521",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
"matchCriteriaId": "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:adobe:air:*:*:*:*:*:*:*:*",
"matchCriteriaId": "9919F0A0-8C37-44ED-93B0-ADB71BCA09D8",
"versionEndIncluding": "19.0.0.190",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:air_sdk:*:*:*:*:*:*:*:*",
"matchCriteriaId": "80C36C62-17DD-4815-90A5-02E3F123173C",
"versionEndIncluding": "19.0.0.190",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:air_sdk_\\\u0026_compiler:*:*:*:*:*:*:*:*",
"matchCriteriaId": "C01DD02E-6F2C-4A63-87E0-AB7AE1B6F451",
"versionEndIncluding": "19.0.0.190",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:apple:mac_os_x:-:*:*:*:*:*:*:*",
"matchCriteriaId": "4781BF1E-8A4E-4AFF-9540-23D523EE30DD",
"vulnerable": false
},
{
"criteria": "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
"matchCriteriaId": "A2572D17-1DE6-457B-99CC-64AFD54487EA",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
}
],
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Adobe Flash Player before 18.0.0.252 and 19.x before 19.0.0.207 on Windows and OS X and before 11.2.202.535 on Linux, Adobe AIR before 19.0.0.213, Adobe AIR SDK before 19.0.0.213, and Adobe AIR SDK \u0026 Compiler before 19.0.0.213 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-7626, CVE-2015-7627, CVE-2015-7630, CVE-2015-7633, and CVE-2015-7634."
},
{
"lang": "es",
"value": "Adobe Flash Player en versiones anteriores a 18.0.0.252 y 19.x en versiones anteriores a 19.0.0.207 en Windows y OS X y en versiones anteriores a 11.2.202.535 en Linux, Adobe AIR en versiones anteriores a 19.0.0.213, Adobe AIR SDK en versiones anteriores a 19.0.0.213 y Adobe AIR SDK \u0026 Compiler en versiones anteriores a 19.0.0.213 permite a atacantes ejecutar c\u00f3digo arbitrario o causar una denegaci\u00f3n de servicio (corrupci\u00f3n de memoria) a trav\u00e9s de vectores no especificados, una vulnerabilidad diferente a CVE-2015-7626, CVE-2015-7627, CVE-2015-7630, CVE-2015-7633 y CVE-2015-7634."
}
],
"id": "CVE-2015-7625",
"lastModified": "2026-05-06T22:30:45.220",
"metrics": {
"cvssMetricV2": [
{
"acInsufInfo": true,
"baseSeverity": "HIGH",
"cvssData": {
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "COMPLETE",
"baseScore": 10.0,
"confidentialityImpact": "COMPLETE",
"integrityImpact": "COMPLETE",
"vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C",
"version": "2.0"
},
"exploitabilityScore": 10.0,
"impactScore": 10.0,
"obtainAllPrivilege": false,
"obtainOtherPrivilege": false,
"obtainUserPrivilege": false,
"source": "nvd@nist.gov",
"type": "Primary",
"userInteractionRequired": false
}
]
},
"published": "2015-10-14T23:59:58.827",
"references": [
{
"source": "psirt@adobe.com",
"url": "http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00011.html"
},
{
"source": "psirt@adobe.com",
"url": "http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00012.html"
},
{
"source": "psirt@adobe.com",
"url": "http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00013.html"
},
{
"source": "psirt@adobe.com",
"url": "http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00018.html"
},
{
"source": "psirt@adobe.com",
"url": "http://rhn.redhat.com/errata/RHSA-2015-1893.html"
},
{
"source": "psirt@adobe.com",
"url": "http://rhn.redhat.com/errata/RHSA-2015-2024.html"
},
{
"source": "psirt@adobe.com",
"url": "http://www.securityfocus.com/bid/77065"
},
{
"source": "psirt@adobe.com",
"url": "http://www.securitytracker.com/id/1033797"
},
{
"source": "psirt@adobe.com",
"tags": [
"Patch",
"Vendor Advisory"
],
"url": "https://helpx.adobe.com/security/products/flash-player/apsb15-25.html"
},
{
"source": "psirt@adobe.com",
"url": "https://security.gentoo.org/glsa/201511-02"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00011.html"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00012.html"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00013.html"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00018.html"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://rhn.redhat.com/errata/RHSA-2015-1893.html"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://rhn.redhat.com/errata/RHSA-2015-2024.html"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://www.securityfocus.com/bid/77065"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://www.securitytracker.com/id/1033797"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Patch",
"Vendor Advisory"
],
"url": "https://helpx.adobe.com/security/products/flash-player/apsb15-25.html"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "https://security.gentoo.org/glsa/201511-02"
}
],
"sourceIdentifier": "psirt@adobe.com",
"vulnStatus": "Modified",
"weaknesses": [
{
"description": [
{
"lang": "en",
"value": "CWE-119"
}
],
"source": "nvd@nist.gov",
"type": "Primary"
}
]
}
GHSA-CXP4-J87H-H6JM
Vulnerability from github – Published: 2022-05-17 02:38 – Updated: 2022-05-17 02:38Adobe Flash Player before 18.0.0.252 and 19.x before 19.0.0.207 on Windows and OS X and before 11.2.202.535 on Linux, Adobe AIR before 19.0.0.213, Adobe AIR SDK before 19.0.0.213, and Adobe AIR SDK & Compiler before 19.0.0.213 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-7626, CVE-2015-7627, CVE-2015-7630, CVE-2015-7633, and CVE-2015-7634.
{
"affected": [],
"aliases": [
"CVE-2015-7625"
],
"database_specific": {
"cwe_ids": [
"CWE-119"
],
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2015-10-14T23:59:00Z",
"severity": "HIGH"
},
"details": "Adobe Flash Player before 18.0.0.252 and 19.x before 19.0.0.207 on Windows and OS X and before 11.2.202.535 on Linux, Adobe AIR before 19.0.0.213, Adobe AIR SDK before 19.0.0.213, and Adobe AIR SDK \u0026 Compiler before 19.0.0.213 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-7626, CVE-2015-7627, CVE-2015-7630, CVE-2015-7633, and CVE-2015-7634.",
"id": "GHSA-cxp4-j87h-h6jm",
"modified": "2022-05-17T02:38:26Z",
"published": "2022-05-17T02:38:26Z",
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2015-7625"
},
{
"type": "WEB",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb15-25.html"
},
{
"type": "WEB",
"url": "https://security.gentoo.org/glsa/201511-02"
},
{
"type": "WEB",
"url": "http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00011.html"
},
{
"type": "WEB",
"url": "http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00012.html"
},
{
"type": "WEB",
"url": "http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00013.html"
},
{
"type": "WEB",
"url": "http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00018.html"
},
{
"type": "WEB",
"url": "http://rhn.redhat.com/errata/RHSA-2015-1893.html"
},
{
"type": "WEB",
"url": "http://rhn.redhat.com/errata/RHSA-2015-2024.html"
},
{
"type": "WEB",
"url": "http://www.securityfocus.com/bid/77065"
},
{
"type": "WEB",
"url": "http://www.securitytracker.com/id/1033797"
}
],
"schema_version": "1.4.0",
"severity": []
}
GSD-2015-7625
Vulnerability from gsd - Updated: 2023-12-13 01:20{
"GSD": {
"alias": "CVE-2015-7625",
"description": "Adobe Flash Player before 18.0.0.252 and 19.x before 19.0.0.207 on Windows and OS X and before 11.2.202.535 on Linux, Adobe AIR before 19.0.0.213, Adobe AIR SDK before 19.0.0.213, and Adobe AIR SDK \u0026 Compiler before 19.0.0.213 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-7626, CVE-2015-7627, CVE-2015-7630, CVE-2015-7633, and CVE-2015-7634.",
"id": "GSD-2015-7625",
"references": [
"https://www.suse.com/security/cve/CVE-2015-7625.html",
"https://access.redhat.com/errata/RHSA-2015:2024",
"https://access.redhat.com/errata/RHSA-2015:1893",
"https://advisories.mageia.org/CVE-2015-7625.html"
]
},
"gsd": {
"metadata": {
"exploitCode": "unknown",
"remediation": "unknown",
"reportConfidence": "confirmed",
"type": "vulnerability"
},
"osvSchema": {
"aliases": [
"CVE-2015-7625"
],
"details": "Adobe Flash Player before 18.0.0.252 and 19.x before 19.0.0.207 on Windows and OS X and before 11.2.202.535 on Linux, Adobe AIR before 19.0.0.213, Adobe AIR SDK before 19.0.0.213, and Adobe AIR SDK \u0026 Compiler before 19.0.0.213 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-7626, CVE-2015-7627, CVE-2015-7630, CVE-2015-7633, and CVE-2015-7634.",
"id": "GSD-2015-7625",
"modified": "2023-12-13T01:20:01.529772Z",
"schema_version": "1.4.0"
}
},
"namespaces": {
"cve.org": {
"CVE_data_meta": {
"ASSIGNER": "psirt@adobe.com",
"ID": "CVE-2015-7625",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "Adobe Flash Player before 18.0.0.252 and 19.x before 19.0.0.207 on Windows and OS X and before 11.2.202.535 on Linux, Adobe AIR before 19.0.0.213, Adobe AIR SDK before 19.0.0.213, and Adobe AIR SDK \u0026 Compiler before 19.0.0.213 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-7626, CVE-2015-7627, CVE-2015-7630, CVE-2015-7633, and CVE-2015-7634."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "RHSA-2015:2024",
"refsource": "REDHAT",
"url": "http://rhn.redhat.com/errata/RHSA-2015-2024.html"
},
{
"name": "openSUSE-SU-2015:1744",
"refsource": "SUSE",
"url": "http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00013.html"
},
{
"name": "77065",
"refsource": "BID",
"url": "http://www.securityfocus.com/bid/77065"
},
{
"name": "SUSE-SU-2015:1742",
"refsource": "SUSE",
"url": "http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00012.html"
},
{
"name": "RHSA-2015:1893",
"refsource": "REDHAT",
"url": "http://rhn.redhat.com/errata/RHSA-2015-1893.html"
},
{
"name": "GLSA-201511-02",
"refsource": "GENTOO",
"url": "https://security.gentoo.org/glsa/201511-02"
},
{
"name": "1033797",
"refsource": "SECTRACK",
"url": "http://www.securitytracker.com/id/1033797"
},
{
"name": "https://helpx.adobe.com/security/products/flash-player/apsb15-25.html",
"refsource": "CONFIRM",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb15-25.html"
},
{
"name": "SUSE-SU-2015:1740",
"refsource": "SUSE",
"url": "http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00011.html"
},
{
"name": "openSUSE-SU-2015:1781",
"refsource": "SUSE",
"url": "http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00018.html"
}
]
}
},
"nvd.nist.gov": {
"configurations": {
"CVE_data_version": "4.0",
"nodes": [
{
"children": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:a:adobe:flash_player:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndIncluding": "19.0.0.185",
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:apple:mac_os_x:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
},
{
"cpe23Uri": "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
}
],
"operator": "OR"
}
],
"cpe_match": [],
"operator": "AND"
},
{
"children": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:a:adobe:air:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndIncluding": "19.0.0.190",
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:google:android:*:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
}
],
"operator": "OR"
}
],
"cpe_match": [],
"operator": "AND"
},
{
"children": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:a:adobe:flash_player:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndIncluding": "11.2.202.521",
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
}
],
"operator": "OR"
}
],
"cpe_match": [],
"operator": "AND"
},
{
"children": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:a:adobe:air_sdk_\\\u0026_compiler:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndIncluding": "19.0.0.190",
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:adobe:air_sdk:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndIncluding": "19.0.0.190",
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:adobe:air:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndIncluding": "19.0.0.190",
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:apple:mac_os_x:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
},
{
"cpe23Uri": "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
}
],
"operator": "OR"
}
],
"cpe_match": [],
"operator": "AND"
}
]
},
"cve": {
"CVE_data_meta": {
"ASSIGNER": "psirt@adobe.com",
"ID": "CVE-2015-7625"
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "en",
"value": "Adobe Flash Player before 18.0.0.252 and 19.x before 19.0.0.207 on Windows and OS X and before 11.2.202.535 on Linux, Adobe AIR before 19.0.0.213, Adobe AIR SDK before 19.0.0.213, and Adobe AIR SDK \u0026 Compiler before 19.0.0.213 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-7626, CVE-2015-7627, CVE-2015-7630, CVE-2015-7633, and CVE-2015-7634."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "en",
"value": "CWE-119"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "https://helpx.adobe.com/security/products/flash-player/apsb15-25.html",
"refsource": "CONFIRM",
"tags": [
"Patch",
"Vendor Advisory"
],
"url": "https://helpx.adobe.com/security/products/flash-player/apsb15-25.html"
},
{
"name": "77065",
"refsource": "BID",
"tags": [],
"url": "http://www.securityfocus.com/bid/77065"
},
{
"name": "RHSA-2015:2024",
"refsource": "REDHAT",
"tags": [],
"url": "http://rhn.redhat.com/errata/RHSA-2015-2024.html"
},
{
"name": "1033797",
"refsource": "SECTRACK",
"tags": [],
"url": "http://www.securitytracker.com/id/1033797"
},
{
"name": "openSUSE-SU-2015:1744",
"refsource": "SUSE",
"tags": [],
"url": "http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00013.html"
},
{
"name": "SUSE-SU-2015:1742",
"refsource": "SUSE",
"tags": [],
"url": "http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00012.html"
},
{
"name": "RHSA-2015:1893",
"refsource": "REDHAT",
"tags": [],
"url": "http://rhn.redhat.com/errata/RHSA-2015-1893.html"
},
{
"name": "SUSE-SU-2015:1740",
"refsource": "SUSE",
"tags": [],
"url": "http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00011.html"
},
{
"name": "openSUSE-SU-2015:1781",
"refsource": "SUSE",
"tags": [],
"url": "http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00018.html"
},
{
"name": "GLSA-201511-02",
"refsource": "GENTOO",
"tags": [],
"url": "https://security.gentoo.org/glsa/201511-02"
}
]
}
},
"impact": {
"baseMetricV2": {
"acInsufInfo": true,
"cvssV2": {
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "COMPLETE",
"baseScore": 10.0,
"confidentialityImpact": "COMPLETE",
"integrityImpact": "COMPLETE",
"vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C",
"version": "2.0"
},
"exploitabilityScore": 10.0,
"impactScore": 10.0,
"obtainAllPrivilege": false,
"obtainOtherPrivilege": false,
"obtainUserPrivilege": false,
"severity": "HIGH",
"userInteractionRequired": false
}
},
"lastModifiedDate": "2017-07-01T01:29Z",
"publishedDate": "2015-10-14T23:59Z"
}
}
}
RHSA-2015:1893
Vulnerability from csaf_redhat - Published: 2015-10-15 11:17 - Updated: 2025-11-21 17:53Adobe Flash Player before 18.0.0.252 and 19.x before 19.0.0.207 on Windows and OS X and before 11.2.202.535 on Linux, Adobe AIR before 19.0.0.213, Adobe AIR SDK before 19.0.0.213, and Adobe AIR SDK & Compiler before 19.0.0.213 improperly implement the Flash broker API, which has unspecified impact and attack vectors.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686 | — |
Vendor Fix
fix
|
Adobe Flash Player before 18.0.0.252 and 19.x before 19.0.0.207 on Windows and OS X and before 11.2.202.535 on Linux, Adobe AIR before 19.0.0.213, Adobe AIR SDK before 19.0.0.213, and Adobe AIR SDK & Compiler before 19.0.0.213 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-7626, CVE-2015-7627, CVE-2015-7630, CVE-2015-7633, and CVE-2015-7634.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686 | — |
Vendor Fix
fix
|
Adobe Flash Player before 18.0.0.252 and 19.x before 19.0.0.207 on Windows and OS X and before 11.2.202.535 on Linux, Adobe AIR before 19.0.0.213, Adobe AIR SDK before 19.0.0.213, and Adobe AIR SDK & Compiler before 19.0.0.213 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-7625, CVE-2015-7627, CVE-2015-7630, CVE-2015-7633, and CVE-2015-7634.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686 | — |
Vendor Fix
fix
|
Adobe Flash Player before 18.0.0.252 and 19.x before 19.0.0.207 on Windows and OS X and before 11.2.202.535 on Linux, Adobe AIR before 19.0.0.213, Adobe AIR SDK before 19.0.0.213, and Adobe AIR SDK & Compiler before 19.0.0.213 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-7625, CVE-2015-7626, CVE-2015-7630, CVE-2015-7633, and CVE-2015-7634.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686 | — |
Vendor Fix
fix
|
Adobe Flash Player before 18.0.0.252 and 19.x before 19.0.0.207 on Windows and OS X and before 11.2.202.535 on Linux, Adobe AIR before 19.0.0.213, Adobe AIR SDK before 19.0.0.213, and Adobe AIR SDK & Compiler before 19.0.0.213 allow remote attackers to bypass the Same Origin Policy and obtain sensitive information via unspecified vectors.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686 | — |
Vendor Fix
fix
|
Use-after-free vulnerability in Adobe Flash Player before 18.0.0.252 and 19.x before 19.0.0.207 on Windows and OS X and before 11.2.202.535 on Linux, Adobe AIR before 19.0.0.213, Adobe AIR SDK before 19.0.0.213, and Adobe AIR SDK & Compiler before 19.0.0.213 allows attackers to execute arbitrary code via a TextFormat object with a crafted tabStops property, a different vulnerability than CVE-2015-7631, CVE-2015-7643, and CVE-2015-7644.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686 | — |
Vendor Fix
fix
|
Adobe Flash Player before 18.0.0.252 and 19.x before 19.0.0.207 on Windows and OS X and before 11.2.202.535 on Linux, Adobe AIR before 19.0.0.213, Adobe AIR SDK before 19.0.0.213, and Adobe AIR SDK & Compiler before 19.0.0.213 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-7625, CVE-2015-7626, CVE-2015-7627, CVE-2015-7633, and CVE-2015-7634.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686 | — |
Vendor Fix
fix
|
Use-after-free vulnerability in Adobe Flash Player before 18.0.0.252 and 19.x before 19.0.0.207 on Windows and OS X and before 11.2.202.535 on Linux, Adobe AIR before 19.0.0.213, Adobe AIR SDK before 19.0.0.213, and Adobe AIR SDK & Compiler before 19.0.0.213 allows attackers to execute arbitrary code via a TextLine object with a crafted validity property, a different vulnerability than CVE-2015-7629, CVE-2015-7643, and CVE-2015-7644.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686 | — |
Vendor Fix
fix
|
Buffer overflow in Adobe Flash Player before 18.0.0.252 and 19.x before 19.0.0.207 on Windows and OS X and before 11.2.202.535 on Linux, Adobe AIR before 19.0.0.213, Adobe AIR SDK before 19.0.0.213, and Adobe AIR SDK & Compiler before 19.0.0.213 allows attackers to execute arbitrary code via a Loader object with a crafted loaderBytes property.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686 | — |
Vendor Fix
fix
|
Adobe Flash Player before 18.0.0.252 and 19.x before 19.0.0.207 on Windows and OS X and before 11.2.202.535 on Linux, Adobe AIR before 19.0.0.213, Adobe AIR SDK before 19.0.0.213, and Adobe AIR SDK & Compiler before 19.0.0.213 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-7625, CVE-2015-7626, CVE-2015-7627, CVE-2015-7630, and CVE-2015-7634.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686 | — |
Vendor Fix
fix
|
Adobe Flash Player before 18.0.0.252 and 19.x before 19.0.0.207 on Windows and OS X and before 11.2.202.535 on Linux, Adobe AIR before 19.0.0.213, Adobe AIR SDK before 19.0.0.213, and Adobe AIR SDK & Compiler before 19.0.0.213 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-7625, CVE-2015-7626, CVE-2015-7627, CVE-2015-7630, and CVE-2015-7633.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686 | — |
Vendor Fix
fix
|
Use-after-free vulnerability in Adobe Flash Player before 18.0.0.252 and 19.x before 19.0.0.207 on Windows and OS X and before 11.2.202.535 on Linux, Adobe AIR before 19.0.0.213, Adobe AIR SDK before 19.0.0.213, and Adobe AIR SDK & Compiler before 19.0.0.213 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-7629, CVE-2015-7631, CVE-2015-7636, CVE-2015-7637, CVE-2015-7638, CVE-2015-7639, CVE-2015-7640, CVE-2015-7641, CVE-2015-7642, CVE-2015-7643, and CVE-2015-7644.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686 | — |
Vendor Fix
fix
|
Use-after-free vulnerability in Adobe Flash Player before 18.0.0.252 and 19.x before 19.0.0.207 on Windows and OS X and before 11.2.202.535 on Linux, Adobe AIR before 19.0.0.213, Adobe AIR SDK before 19.0.0.213, and Adobe AIR SDK & Compiler before 19.0.0.213 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-7629, CVE-2015-7631, CVE-2015-7635, CVE-2015-7637, CVE-2015-7638, CVE-2015-7639, CVE-2015-7640, CVE-2015-7641, CVE-2015-7642, CVE-2015-7643, and CVE-2015-7644.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686 | — |
Vendor Fix
fix
|
Use-after-free vulnerability in Adobe Flash Player before 18.0.0.252 and 19.x before 19.0.0.207 on Windows and OS X and before 11.2.202.535 on Linux, Adobe AIR before 19.0.0.213, Adobe AIR SDK before 19.0.0.213, and Adobe AIR SDK & Compiler before 19.0.0.213 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-7629, CVE-2015-7631, CVE-2015-7635, CVE-2015-7636, CVE-2015-7638, CVE-2015-7639, CVE-2015-7640, CVE-2015-7641, CVE-2015-7642, CVE-2015-7643, and CVE-2015-7644.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686 | — |
Vendor Fix
fix
|
Use-after-free vulnerability in Adobe Flash Player before 18.0.0.252 and 19.x before 19.0.0.207 on Windows and OS X and before 11.2.202.535 on Linux, Adobe AIR before 19.0.0.213, Adobe AIR SDK before 19.0.0.213, and Adobe AIR SDK & Compiler before 19.0.0.213 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-7629, CVE-2015-7631, CVE-2015-7635, CVE-2015-7636, CVE-2015-7637, CVE-2015-7639, CVE-2015-7640, CVE-2015-7641, CVE-2015-7642, CVE-2015-7643, and CVE-2015-7644.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686 | — |
Vendor Fix
fix
|
Use-after-free vulnerability in Adobe Flash Player before 18.0.0.252 and 19.x before 19.0.0.207 on Windows and OS X and before 11.2.202.535 on Linux, Adobe AIR before 19.0.0.213, Adobe AIR SDK before 19.0.0.213, and Adobe AIR SDK & Compiler before 19.0.0.213 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-7629, CVE-2015-7631, CVE-2015-7635, CVE-2015-7636, CVE-2015-7637, CVE-2015-7638, CVE-2015-7640, CVE-2015-7641, CVE-2015-7642, CVE-2015-7643, and CVE-2015-7644.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686 | — |
Vendor Fix
fix
|
Use-after-free vulnerability in Adobe Flash Player before 18.0.0.252 and 19.x before 19.0.0.207 on Windows and OS X and before 11.2.202.535 on Linux, Adobe AIR before 19.0.0.213, Adobe AIR SDK before 19.0.0.213, and Adobe AIR SDK & Compiler before 19.0.0.213 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-7629, CVE-2015-7631, CVE-2015-7635, CVE-2015-7636, CVE-2015-7637, CVE-2015-7638, CVE-2015-7639, CVE-2015-7641, CVE-2015-7642, CVE-2015-7643, and CVE-2015-7644.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686 | — |
Vendor Fix
fix
|
Use-after-free vulnerability in Adobe Flash Player before 18.0.0.252 and 19.x before 19.0.0.207 on Windows and OS X and before 11.2.202.535 on Linux, Adobe AIR before 19.0.0.213, Adobe AIR SDK before 19.0.0.213, and Adobe AIR SDK & Compiler before 19.0.0.213 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-7629, CVE-2015-7631, CVE-2015-7635, CVE-2015-7636, CVE-2015-7637, CVE-2015-7638, CVE-2015-7639, CVE-2015-7640, CVE-2015-7642, CVE-2015-7643, and CVE-2015-7644.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686 | — |
Vendor Fix
fix
|
Use-after-free vulnerability in Adobe Flash Player before 18.0.0.252 and 19.x before 19.0.0.207 on Windows and OS X and before 11.2.202.535 on Linux, Adobe AIR before 19.0.0.213, Adobe AIR SDK before 19.0.0.213, and Adobe AIR SDK & Compiler before 19.0.0.213 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-7629, CVE-2015-7631, CVE-2015-7635, CVE-2015-7636, CVE-2015-7637, CVE-2015-7638, CVE-2015-7639, CVE-2015-7640, CVE-2015-7641, CVE-2015-7643, and CVE-2015-7644.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686 | — |
Vendor Fix
fix
|
Use-after-free vulnerability in Adobe Flash Player before 18.0.0.252 and 19.x before 19.0.0.207 on Windows and OS X and before 11.2.202.535 on Linux, Adobe AIR before 19.0.0.213, Adobe AIR SDK before 19.0.0.213, and Adobe AIR SDK & Compiler before 19.0.0.213 allows attackers to execute arbitrary code via a Video object with a crafted deblocking property, a different vulnerability than CVE-2015-7629, CVE-2015-7631, and CVE-2015-7644.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686 | — |
Vendor Fix
fix
|
Use-after-free vulnerability in Adobe Flash Player before 18.0.0.252 and 19.x before 19.0.0.207 on Windows and OS X and before 11.2.202.535 on Linux, Adobe AIR before 19.0.0.213, Adobe AIR SDK before 19.0.0.213, and Adobe AIR SDK & Compiler before 19.0.0.213 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-7629, CVE-2015-7631, and CVE-2015-7643.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686 | — |
Vendor Fix
fix
|
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Critical"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An updated Adobe Flash Player package that fixes multiple security issues\nis now available for Red Hat Enterprise Linux 6 Supplementary.\n\nRed Hat Product Security has rated this update as having Critical security\nimpact. Common Vulnerability Scoring System (CVSS) base scores, which give\ndetailed severity ratings, are available for each vulnerability from the\nCVE links in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "The flash-plugin package contains a Mozilla Firefox compatible Adobe Flash\nPlayer web browser plug-in.\n\nThis update fixes multiple vulnerabilities in Adobe Flash Player. These\nvulnerabilities, detailed in the Adobe Security Bulletin APSB15-25 listed\nin the References section, could allow an attacker to create a specially\ncrafted SWF file that would cause flash-plugin to crash, execute arbitrary\ncode, or disclose sensitive information when the victim loaded a page\ncontaining the malicious SWF content. (CVE-2015-5569, CVE-2015-7625,\nCVE-2015-7626, CVE-2015-7627, CVE-2015-7628, CVE-2015-7629, CVE-2015-7630,\nCVE-2015-7631, CVE-2015-7632, CVE-2015-7633, CVE-2015-7634, CVE-2015-7643,\nCVE-2015-7644)\n\nAll users of Adobe Flash Player should install this updated package, which\nupgrades Flash Player to version 11.2.202.535.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2015:1893",
"url": "https://access.redhat.com/errata/RHSA-2015:1893"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#critical",
"url": "https://access.redhat.com/security/updates/classification/#critical"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb15-25.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb15-25.html"
},
{
"category": "external",
"summary": "1271383",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1271383"
},
{
"category": "external",
"summary": "1271388",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1271388"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2015/rhsa-2015_1893.json"
}
],
"title": "Red Hat Security Advisory: flash-plugin security update",
"tracking": {
"current_release_date": "2025-11-21T17:53:43+00:00",
"generator": {
"date": "2025-11-21T17:53:43+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.6.12"
}
},
"id": "RHSA-2015:1893",
"initial_release_date": "2015-10-15T11:17:22+00:00",
"revision_history": [
{
"date": "2015-10-15T11:17:22+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2015-10-15T11:17:22+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2025-11-21T17:53:43+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Desktop Supplementary (v. 6)",
"product": {
"name": "Red Hat Enterprise Linux Desktop Supplementary (v. 6)",
"product_id": "6Client-Supplementary-6.7.z",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_extras:6"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Server Supplementary (v. 6)",
"product": {
"name": "Red Hat Enterprise Linux Server Supplementary (v. 6)",
"product_id": "6Server-Supplementary-6.7.z",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_extras:6"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Workstation Supplementary (v. 6)",
"product": {
"name": "Red Hat Enterprise Linux Workstation Supplementary (v. 6)",
"product_id": "6Workstation-Supplementary-6.7.z",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_extras:6"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux Supplementary"
},
{
"branches": [
{
"category": "product_version",
"name": "flash-plugin-0:11.2.202.535-1.el6_7.i686",
"product": {
"name": "flash-plugin-0:11.2.202.535-1.el6_7.i686",
"product_id": "flash-plugin-0:11.2.202.535-1.el6_7.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/flash-plugin@11.2.202.535-1.el6_7?arch=i686"
}
}
}
],
"category": "architecture",
"name": "i686"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "flash-plugin-0:11.2.202.535-1.el6_7.i686 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)",
"product_id": "6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686"
},
"product_reference": "flash-plugin-0:11.2.202.535-1.el6_7.i686",
"relates_to_product_reference": "6Client-Supplementary-6.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "flash-plugin-0:11.2.202.535-1.el6_7.i686 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)",
"product_id": "6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686"
},
"product_reference": "flash-plugin-0:11.2.202.535-1.el6_7.i686",
"relates_to_product_reference": "6Server-Supplementary-6.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "flash-plugin-0:11.2.202.535-1.el6_7.i686 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)",
"product_id": "6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686"
},
"product_reference": "flash-plugin-0:11.2.202.535-1.el6_7.i686",
"relates_to_product_reference": "6Workstation-Supplementary-6.7.z"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2015-5569",
"discovery_date": "2015-10-13T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1271388"
}
],
"notes": [
{
"category": "description",
"text": "Adobe Flash Player before 18.0.0.252 and 19.x before 19.0.0.207 on Windows and OS X and before 11.2.202.535 on Linux, Adobe AIR before 19.0.0.213, Adobe AIR SDK before 19.0.0.213, and Adobe AIR SDK \u0026 Compiler before 19.0.0.213 improperly implement the Flash broker API, which has unspecified impact and attack vectors.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: information leak and hardening fixes in APSB15-25",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2015-5569"
},
{
"category": "external",
"summary": "RHBZ#1271388",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1271388"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2015-5569",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-5569"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2015-5569",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2015-5569"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb15-25.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb15-25.html"
}
],
"release_date": "2015-10-13T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-10-15T11:17:22+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:1893"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 4.3,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:N/A:N",
"version": "2.0"
},
"products": [
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "flash-plugin: information leak and hardening fixes in APSB15-25"
},
{
"cve": "CVE-2015-7625",
"discovery_date": "2015-10-13T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1271383"
}
],
"notes": [
{
"category": "description",
"text": "Adobe Flash Player before 18.0.0.252 and 19.x before 19.0.0.207 on Windows and OS X and before 11.2.202.535 on Linux, Adobe AIR before 19.0.0.213, Adobe AIR SDK before 19.0.0.213, and Adobe AIR SDK \u0026 Compiler before 19.0.0.213 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-7626, CVE-2015-7627, CVE-2015-7630, CVE-2015-7633, and CVE-2015-7634.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB15-25",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2015-7625"
},
{
"category": "external",
"summary": "RHBZ#1271383",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1271383"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2015-7625",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-7625"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2015-7625",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2015-7625"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb15-25.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb15-25.html"
}
],
"release_date": "2015-10-13T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-10-15T11:17:22+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:1893"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB15-25"
},
{
"cve": "CVE-2015-7626",
"discovery_date": "2015-10-13T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1271383"
}
],
"notes": [
{
"category": "description",
"text": "Adobe Flash Player before 18.0.0.252 and 19.x before 19.0.0.207 on Windows and OS X and before 11.2.202.535 on Linux, Adobe AIR before 19.0.0.213, Adobe AIR SDK before 19.0.0.213, and Adobe AIR SDK \u0026 Compiler before 19.0.0.213 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-7625, CVE-2015-7627, CVE-2015-7630, CVE-2015-7633, and CVE-2015-7634.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB15-25",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2015-7626"
},
{
"category": "external",
"summary": "RHBZ#1271383",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1271383"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2015-7626",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-7626"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2015-7626",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2015-7626"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb15-25.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb15-25.html"
}
],
"release_date": "2015-10-13T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-10-15T11:17:22+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:1893"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB15-25"
},
{
"cve": "CVE-2015-7627",
"discovery_date": "2015-10-13T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1271383"
}
],
"notes": [
{
"category": "description",
"text": "Adobe Flash Player before 18.0.0.252 and 19.x before 19.0.0.207 on Windows and OS X and before 11.2.202.535 on Linux, Adobe AIR before 19.0.0.213, Adobe AIR SDK before 19.0.0.213, and Adobe AIR SDK \u0026 Compiler before 19.0.0.213 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-7625, CVE-2015-7626, CVE-2015-7630, CVE-2015-7633, and CVE-2015-7634.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB15-25",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2015-7627"
},
{
"category": "external",
"summary": "RHBZ#1271383",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1271383"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2015-7627",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-7627"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2015-7627",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2015-7627"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb15-25.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb15-25.html"
}
],
"release_date": "2015-10-13T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-10-15T11:17:22+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:1893"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB15-25"
},
{
"cve": "CVE-2015-7628",
"discovery_date": "2015-10-13T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1271388"
}
],
"notes": [
{
"category": "description",
"text": "Adobe Flash Player before 18.0.0.252 and 19.x before 19.0.0.207 on Windows and OS X and before 11.2.202.535 on Linux, Adobe AIR before 19.0.0.213, Adobe AIR SDK before 19.0.0.213, and Adobe AIR SDK \u0026 Compiler before 19.0.0.213 allow remote attackers to bypass the Same Origin Policy and obtain sensitive information via unspecified vectors.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: information leak and hardening fixes in APSB15-25",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2015-7628"
},
{
"category": "external",
"summary": "RHBZ#1271388",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1271388"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2015-7628",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-7628"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2015-7628",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2015-7628"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb15-25.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb15-25.html"
}
],
"release_date": "2015-10-13T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-10-15T11:17:22+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:1893"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 4.3,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:N/A:N",
"version": "2.0"
},
"products": [
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "flash-plugin: information leak and hardening fixes in APSB15-25"
},
{
"cve": "CVE-2015-7629",
"discovery_date": "2015-10-13T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1271383"
}
],
"notes": [
{
"category": "description",
"text": "Use-after-free vulnerability in Adobe Flash Player before 18.0.0.252 and 19.x before 19.0.0.207 on Windows and OS X and before 11.2.202.535 on Linux, Adobe AIR before 19.0.0.213, Adobe AIR SDK before 19.0.0.213, and Adobe AIR SDK \u0026 Compiler before 19.0.0.213 allows attackers to execute arbitrary code via a TextFormat object with a crafted tabStops property, a different vulnerability than CVE-2015-7631, CVE-2015-7643, and CVE-2015-7644.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB15-25",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2015-7629"
},
{
"category": "external",
"summary": "RHBZ#1271383",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1271383"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2015-7629",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-7629"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2015-7629",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2015-7629"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb15-25.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb15-25.html"
}
],
"release_date": "2015-10-13T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-10-15T11:17:22+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:1893"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB15-25"
},
{
"cve": "CVE-2015-7630",
"discovery_date": "2015-10-13T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1271383"
}
],
"notes": [
{
"category": "description",
"text": "Adobe Flash Player before 18.0.0.252 and 19.x before 19.0.0.207 on Windows and OS X and before 11.2.202.535 on Linux, Adobe AIR before 19.0.0.213, Adobe AIR SDK before 19.0.0.213, and Adobe AIR SDK \u0026 Compiler before 19.0.0.213 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-7625, CVE-2015-7626, CVE-2015-7627, CVE-2015-7633, and CVE-2015-7634.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB15-25",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2015-7630"
},
{
"category": "external",
"summary": "RHBZ#1271383",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1271383"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2015-7630",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-7630"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2015-7630",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2015-7630"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb15-25.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb15-25.html"
}
],
"release_date": "2015-10-13T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-10-15T11:17:22+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:1893"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB15-25"
},
{
"cve": "CVE-2015-7631",
"discovery_date": "2015-10-13T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1271383"
}
],
"notes": [
{
"category": "description",
"text": "Use-after-free vulnerability in Adobe Flash Player before 18.0.0.252 and 19.x before 19.0.0.207 on Windows and OS X and before 11.2.202.535 on Linux, Adobe AIR before 19.0.0.213, Adobe AIR SDK before 19.0.0.213, and Adobe AIR SDK \u0026 Compiler before 19.0.0.213 allows attackers to execute arbitrary code via a TextLine object with a crafted validity property, a different vulnerability than CVE-2015-7629, CVE-2015-7643, and CVE-2015-7644.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB15-25",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2015-7631"
},
{
"category": "external",
"summary": "RHBZ#1271383",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1271383"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2015-7631",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-7631"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2015-7631",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2015-7631"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb15-25.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb15-25.html"
}
],
"release_date": "2015-10-13T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-10-15T11:17:22+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:1893"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB15-25"
},
{
"cve": "CVE-2015-7632",
"discovery_date": "2015-10-13T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1271383"
}
],
"notes": [
{
"category": "description",
"text": "Buffer overflow in Adobe Flash Player before 18.0.0.252 and 19.x before 19.0.0.207 on Windows and OS X and before 11.2.202.535 on Linux, Adobe AIR before 19.0.0.213, Adobe AIR SDK before 19.0.0.213, and Adobe AIR SDK \u0026 Compiler before 19.0.0.213 allows attackers to execute arbitrary code via a Loader object with a crafted loaderBytes property.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB15-25",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2015-7632"
},
{
"category": "external",
"summary": "RHBZ#1271383",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1271383"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2015-7632",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-7632"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2015-7632",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2015-7632"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb15-25.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb15-25.html"
}
],
"release_date": "2015-10-13T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-10-15T11:17:22+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:1893"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB15-25"
},
{
"cve": "CVE-2015-7633",
"discovery_date": "2015-10-13T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1271383"
}
],
"notes": [
{
"category": "description",
"text": "Adobe Flash Player before 18.0.0.252 and 19.x before 19.0.0.207 on Windows and OS X and before 11.2.202.535 on Linux, Adobe AIR before 19.0.0.213, Adobe AIR SDK before 19.0.0.213, and Adobe AIR SDK \u0026 Compiler before 19.0.0.213 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-7625, CVE-2015-7626, CVE-2015-7627, CVE-2015-7630, and CVE-2015-7634.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB15-25",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2015-7633"
},
{
"category": "external",
"summary": "RHBZ#1271383",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1271383"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2015-7633",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-7633"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2015-7633",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2015-7633"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb15-25.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb15-25.html"
}
],
"release_date": "2015-10-13T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-10-15T11:17:22+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:1893"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB15-25"
},
{
"cve": "CVE-2015-7634",
"discovery_date": "2015-10-13T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1271383"
}
],
"notes": [
{
"category": "description",
"text": "Adobe Flash Player before 18.0.0.252 and 19.x before 19.0.0.207 on Windows and OS X and before 11.2.202.535 on Linux, Adobe AIR before 19.0.0.213, Adobe AIR SDK before 19.0.0.213, and Adobe AIR SDK \u0026 Compiler before 19.0.0.213 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-7625, CVE-2015-7626, CVE-2015-7627, CVE-2015-7630, and CVE-2015-7633.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB15-25",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2015-7634"
},
{
"category": "external",
"summary": "RHBZ#1271383",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1271383"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2015-7634",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-7634"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2015-7634",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2015-7634"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb15-25.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb15-25.html"
}
],
"release_date": "2015-10-13T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-10-15T11:17:22+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:1893"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB15-25"
},
{
"cve": "CVE-2015-7635",
"discovery_date": "2015-10-13T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1271383"
}
],
"notes": [
{
"category": "description",
"text": "Use-after-free vulnerability in Adobe Flash Player before 18.0.0.252 and 19.x before 19.0.0.207 on Windows and OS X and before 11.2.202.535 on Linux, Adobe AIR before 19.0.0.213, Adobe AIR SDK before 19.0.0.213, and Adobe AIR SDK \u0026 Compiler before 19.0.0.213 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-7629, CVE-2015-7631, CVE-2015-7636, CVE-2015-7637, CVE-2015-7638, CVE-2015-7639, CVE-2015-7640, CVE-2015-7641, CVE-2015-7642, CVE-2015-7643, and CVE-2015-7644.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB15-25",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2015-7635"
},
{
"category": "external",
"summary": "RHBZ#1271383",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1271383"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2015-7635",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-7635"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2015-7635",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2015-7635"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb15-25.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb15-25.html"
}
],
"release_date": "2015-10-13T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-10-15T11:17:22+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:1893"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB15-25"
},
{
"cve": "CVE-2015-7636",
"discovery_date": "2015-10-13T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1271383"
}
],
"notes": [
{
"category": "description",
"text": "Use-after-free vulnerability in Adobe Flash Player before 18.0.0.252 and 19.x before 19.0.0.207 on Windows and OS X and before 11.2.202.535 on Linux, Adobe AIR before 19.0.0.213, Adobe AIR SDK before 19.0.0.213, and Adobe AIR SDK \u0026 Compiler before 19.0.0.213 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-7629, CVE-2015-7631, CVE-2015-7635, CVE-2015-7637, CVE-2015-7638, CVE-2015-7639, CVE-2015-7640, CVE-2015-7641, CVE-2015-7642, CVE-2015-7643, and CVE-2015-7644.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB15-25",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2015-7636"
},
{
"category": "external",
"summary": "RHBZ#1271383",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1271383"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2015-7636",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-7636"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2015-7636",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2015-7636"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb15-25.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb15-25.html"
}
],
"release_date": "2015-10-13T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-10-15T11:17:22+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:1893"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB15-25"
},
{
"cve": "CVE-2015-7637",
"discovery_date": "2015-10-13T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1271383"
}
],
"notes": [
{
"category": "description",
"text": "Use-after-free vulnerability in Adobe Flash Player before 18.0.0.252 and 19.x before 19.0.0.207 on Windows and OS X and before 11.2.202.535 on Linux, Adobe AIR before 19.0.0.213, Adobe AIR SDK before 19.0.0.213, and Adobe AIR SDK \u0026 Compiler before 19.0.0.213 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-7629, CVE-2015-7631, CVE-2015-7635, CVE-2015-7636, CVE-2015-7638, CVE-2015-7639, CVE-2015-7640, CVE-2015-7641, CVE-2015-7642, CVE-2015-7643, and CVE-2015-7644.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB15-25",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2015-7637"
},
{
"category": "external",
"summary": "RHBZ#1271383",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1271383"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2015-7637",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-7637"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2015-7637",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2015-7637"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb15-25.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb15-25.html"
}
],
"release_date": "2015-10-13T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-10-15T11:17:22+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:1893"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB15-25"
},
{
"cve": "CVE-2015-7638",
"discovery_date": "2015-10-13T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1271383"
}
],
"notes": [
{
"category": "description",
"text": "Use-after-free vulnerability in Adobe Flash Player before 18.0.0.252 and 19.x before 19.0.0.207 on Windows and OS X and before 11.2.202.535 on Linux, Adobe AIR before 19.0.0.213, Adobe AIR SDK before 19.0.0.213, and Adobe AIR SDK \u0026 Compiler before 19.0.0.213 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-7629, CVE-2015-7631, CVE-2015-7635, CVE-2015-7636, CVE-2015-7637, CVE-2015-7639, CVE-2015-7640, CVE-2015-7641, CVE-2015-7642, CVE-2015-7643, and CVE-2015-7644.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB15-25",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2015-7638"
},
{
"category": "external",
"summary": "RHBZ#1271383",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1271383"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2015-7638",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-7638"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2015-7638",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2015-7638"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb15-25.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb15-25.html"
}
],
"release_date": "2015-10-13T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-10-15T11:17:22+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:1893"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB15-25"
},
{
"cve": "CVE-2015-7639",
"discovery_date": "2015-10-13T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1271383"
}
],
"notes": [
{
"category": "description",
"text": "Use-after-free vulnerability in Adobe Flash Player before 18.0.0.252 and 19.x before 19.0.0.207 on Windows and OS X and before 11.2.202.535 on Linux, Adobe AIR before 19.0.0.213, Adobe AIR SDK before 19.0.0.213, and Adobe AIR SDK \u0026 Compiler before 19.0.0.213 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-7629, CVE-2015-7631, CVE-2015-7635, CVE-2015-7636, CVE-2015-7637, CVE-2015-7638, CVE-2015-7640, CVE-2015-7641, CVE-2015-7642, CVE-2015-7643, and CVE-2015-7644.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB15-25",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2015-7639"
},
{
"category": "external",
"summary": "RHBZ#1271383",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1271383"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2015-7639",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-7639"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2015-7639",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2015-7639"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb15-25.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb15-25.html"
}
],
"release_date": "2015-10-13T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-10-15T11:17:22+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:1893"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB15-25"
},
{
"cve": "CVE-2015-7640",
"discovery_date": "2015-10-13T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1271383"
}
],
"notes": [
{
"category": "description",
"text": "Use-after-free vulnerability in Adobe Flash Player before 18.0.0.252 and 19.x before 19.0.0.207 on Windows and OS X and before 11.2.202.535 on Linux, Adobe AIR before 19.0.0.213, Adobe AIR SDK before 19.0.0.213, and Adobe AIR SDK \u0026 Compiler before 19.0.0.213 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-7629, CVE-2015-7631, CVE-2015-7635, CVE-2015-7636, CVE-2015-7637, CVE-2015-7638, CVE-2015-7639, CVE-2015-7641, CVE-2015-7642, CVE-2015-7643, and CVE-2015-7644.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB15-25",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2015-7640"
},
{
"category": "external",
"summary": "RHBZ#1271383",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1271383"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2015-7640",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-7640"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2015-7640",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2015-7640"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb15-25.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb15-25.html"
}
],
"release_date": "2015-10-13T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-10-15T11:17:22+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:1893"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB15-25"
},
{
"cve": "CVE-2015-7641",
"discovery_date": "2015-10-13T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1271383"
}
],
"notes": [
{
"category": "description",
"text": "Use-after-free vulnerability in Adobe Flash Player before 18.0.0.252 and 19.x before 19.0.0.207 on Windows and OS X and before 11.2.202.535 on Linux, Adobe AIR before 19.0.0.213, Adobe AIR SDK before 19.0.0.213, and Adobe AIR SDK \u0026 Compiler before 19.0.0.213 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-7629, CVE-2015-7631, CVE-2015-7635, CVE-2015-7636, CVE-2015-7637, CVE-2015-7638, CVE-2015-7639, CVE-2015-7640, CVE-2015-7642, CVE-2015-7643, and CVE-2015-7644.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB15-25",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2015-7641"
},
{
"category": "external",
"summary": "RHBZ#1271383",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1271383"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2015-7641",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-7641"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2015-7641",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2015-7641"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb15-25.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb15-25.html"
}
],
"release_date": "2015-10-13T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-10-15T11:17:22+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:1893"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB15-25"
},
{
"cve": "CVE-2015-7642",
"discovery_date": "2015-10-13T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1271383"
}
],
"notes": [
{
"category": "description",
"text": "Use-after-free vulnerability in Adobe Flash Player before 18.0.0.252 and 19.x before 19.0.0.207 on Windows and OS X and before 11.2.202.535 on Linux, Adobe AIR before 19.0.0.213, Adobe AIR SDK before 19.0.0.213, and Adobe AIR SDK \u0026 Compiler before 19.0.0.213 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-7629, CVE-2015-7631, CVE-2015-7635, CVE-2015-7636, CVE-2015-7637, CVE-2015-7638, CVE-2015-7639, CVE-2015-7640, CVE-2015-7641, CVE-2015-7643, and CVE-2015-7644.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB15-25",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2015-7642"
},
{
"category": "external",
"summary": "RHBZ#1271383",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1271383"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2015-7642",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-7642"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2015-7642",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2015-7642"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb15-25.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb15-25.html"
}
],
"release_date": "2015-10-13T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-10-15T11:17:22+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:1893"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB15-25"
},
{
"cve": "CVE-2015-7643",
"discovery_date": "2015-10-13T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1271383"
}
],
"notes": [
{
"category": "description",
"text": "Use-after-free vulnerability in Adobe Flash Player before 18.0.0.252 and 19.x before 19.0.0.207 on Windows and OS X and before 11.2.202.535 on Linux, Adobe AIR before 19.0.0.213, Adobe AIR SDK before 19.0.0.213, and Adobe AIR SDK \u0026 Compiler before 19.0.0.213 allows attackers to execute arbitrary code via a Video object with a crafted deblocking property, a different vulnerability than CVE-2015-7629, CVE-2015-7631, and CVE-2015-7644.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB15-25",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2015-7643"
},
{
"category": "external",
"summary": "RHBZ#1271383",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1271383"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2015-7643",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-7643"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2015-7643",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2015-7643"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb15-25.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb15-25.html"
}
],
"release_date": "2015-10-13T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-10-15T11:17:22+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:1893"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB15-25"
},
{
"cve": "CVE-2015-7644",
"discovery_date": "2015-10-13T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1271383"
}
],
"notes": [
{
"category": "description",
"text": "Use-after-free vulnerability in Adobe Flash Player before 18.0.0.252 and 19.x before 19.0.0.207 on Windows and OS X and before 11.2.202.535 on Linux, Adobe AIR before 19.0.0.213, Adobe AIR SDK before 19.0.0.213, and Adobe AIR SDK \u0026 Compiler before 19.0.0.213 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-7629, CVE-2015-7631, and CVE-2015-7643.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB15-25",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2015-7644"
},
{
"category": "external",
"summary": "RHBZ#1271383",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1271383"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2015-7644",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-7644"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2015-7644",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2015-7644"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb15-25.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb15-25.html"
}
],
"release_date": "2015-10-13T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-10-15T11:17:22+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:1893"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB15-25"
}
]
}
RHSA-2015:2024
Vulnerability from csaf_redhat - Published: 2015-11-11 11:21 - Updated: 2025-11-21 17:53Adobe Flash Player before 18.0.0.252 and 19.x before 19.0.0.207 on Windows and OS X and before 11.2.202.535 on Linux, Adobe AIR before 19.0.0.213, Adobe AIR SDK before 19.0.0.213, and Adobe AIR SDK & Compiler before 19.0.0.213 improperly implement the Flash broker API, which has unspecified impact and attack vectors.
Adobe Flash Player before 18.0.0.252 and 19.x before 19.0.0.207 on Windows and OS X and before 11.2.202.535 on Linux, Adobe AIR before 19.0.0.213, Adobe AIR SDK before 19.0.0.213, and Adobe AIR SDK & Compiler before 19.0.0.213 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-7626, CVE-2015-7627, CVE-2015-7630, CVE-2015-7633, and CVE-2015-7634.
Adobe Flash Player before 18.0.0.252 and 19.x before 19.0.0.207 on Windows and OS X and before 11.2.202.535 on Linux, Adobe AIR before 19.0.0.213, Adobe AIR SDK before 19.0.0.213, and Adobe AIR SDK & Compiler before 19.0.0.213 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-7625, CVE-2015-7627, CVE-2015-7630, CVE-2015-7633, and CVE-2015-7634.
Adobe Flash Player before 18.0.0.252 and 19.x before 19.0.0.207 on Windows and OS X and before 11.2.202.535 on Linux, Adobe AIR before 19.0.0.213, Adobe AIR SDK before 19.0.0.213, and Adobe AIR SDK & Compiler before 19.0.0.213 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-7625, CVE-2015-7626, CVE-2015-7630, CVE-2015-7633, and CVE-2015-7634.
Adobe Flash Player before 18.0.0.252 and 19.x before 19.0.0.207 on Windows and OS X and before 11.2.202.535 on Linux, Adobe AIR before 19.0.0.213, Adobe AIR SDK before 19.0.0.213, and Adobe AIR SDK & Compiler before 19.0.0.213 allow remote attackers to bypass the Same Origin Policy and obtain sensitive information via unspecified vectors.
Use-after-free vulnerability in Adobe Flash Player before 18.0.0.252 and 19.x before 19.0.0.207 on Windows and OS X and before 11.2.202.535 on Linux, Adobe AIR before 19.0.0.213, Adobe AIR SDK before 19.0.0.213, and Adobe AIR SDK & Compiler before 19.0.0.213 allows attackers to execute arbitrary code via a TextFormat object with a crafted tabStops property, a different vulnerability than CVE-2015-7631, CVE-2015-7643, and CVE-2015-7644.
Adobe Flash Player before 18.0.0.252 and 19.x before 19.0.0.207 on Windows and OS X and before 11.2.202.535 on Linux, Adobe AIR before 19.0.0.213, Adobe AIR SDK before 19.0.0.213, and Adobe AIR SDK & Compiler before 19.0.0.213 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-7625, CVE-2015-7626, CVE-2015-7627, CVE-2015-7633, and CVE-2015-7634.
Use-after-free vulnerability in Adobe Flash Player before 18.0.0.252 and 19.x before 19.0.0.207 on Windows and OS X and before 11.2.202.535 on Linux, Adobe AIR before 19.0.0.213, Adobe AIR SDK before 19.0.0.213, and Adobe AIR SDK & Compiler before 19.0.0.213 allows attackers to execute arbitrary code via a TextLine object with a crafted validity property, a different vulnerability than CVE-2015-7629, CVE-2015-7643, and CVE-2015-7644.
Buffer overflow in Adobe Flash Player before 18.0.0.252 and 19.x before 19.0.0.207 on Windows and OS X and before 11.2.202.535 on Linux, Adobe AIR before 19.0.0.213, Adobe AIR SDK before 19.0.0.213, and Adobe AIR SDK & Compiler before 19.0.0.213 allows attackers to execute arbitrary code via a Loader object with a crafted loaderBytes property.
Adobe Flash Player before 18.0.0.252 and 19.x before 19.0.0.207 on Windows and OS X and before 11.2.202.535 on Linux, Adobe AIR before 19.0.0.213, Adobe AIR SDK before 19.0.0.213, and Adobe AIR SDK & Compiler before 19.0.0.213 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-7625, CVE-2015-7626, CVE-2015-7627, CVE-2015-7630, and CVE-2015-7634.
Adobe Flash Player before 18.0.0.252 and 19.x before 19.0.0.207 on Windows and OS X and before 11.2.202.535 on Linux, Adobe AIR before 19.0.0.213, Adobe AIR SDK before 19.0.0.213, and Adobe AIR SDK & Compiler before 19.0.0.213 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-7625, CVE-2015-7626, CVE-2015-7627, CVE-2015-7630, and CVE-2015-7633.
Use-after-free vulnerability in Adobe Flash Player before 18.0.0.252 and 19.x before 19.0.0.207 on Windows and OS X and before 11.2.202.535 on Linux, Adobe AIR before 19.0.0.213, Adobe AIR SDK before 19.0.0.213, and Adobe AIR SDK & Compiler before 19.0.0.213 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-7629, CVE-2015-7631, CVE-2015-7636, CVE-2015-7637, CVE-2015-7638, CVE-2015-7639, CVE-2015-7640, CVE-2015-7641, CVE-2015-7642, CVE-2015-7643, and CVE-2015-7644.
Use-after-free vulnerability in Adobe Flash Player before 18.0.0.252 and 19.x before 19.0.0.207 on Windows and OS X and before 11.2.202.535 on Linux, Adobe AIR before 19.0.0.213, Adobe AIR SDK before 19.0.0.213, and Adobe AIR SDK & Compiler before 19.0.0.213 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-7629, CVE-2015-7631, CVE-2015-7635, CVE-2015-7637, CVE-2015-7638, CVE-2015-7639, CVE-2015-7640, CVE-2015-7641, CVE-2015-7642, CVE-2015-7643, and CVE-2015-7644.
Use-after-free vulnerability in Adobe Flash Player before 18.0.0.252 and 19.x before 19.0.0.207 on Windows and OS X and before 11.2.202.535 on Linux, Adobe AIR before 19.0.0.213, Adobe AIR SDK before 19.0.0.213, and Adobe AIR SDK & Compiler before 19.0.0.213 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-7629, CVE-2015-7631, CVE-2015-7635, CVE-2015-7636, CVE-2015-7638, CVE-2015-7639, CVE-2015-7640, CVE-2015-7641, CVE-2015-7642, CVE-2015-7643, and CVE-2015-7644.
Use-after-free vulnerability in Adobe Flash Player before 18.0.0.252 and 19.x before 19.0.0.207 on Windows and OS X and before 11.2.202.535 on Linux, Adobe AIR before 19.0.0.213, Adobe AIR SDK before 19.0.0.213, and Adobe AIR SDK & Compiler before 19.0.0.213 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-7629, CVE-2015-7631, CVE-2015-7635, CVE-2015-7636, CVE-2015-7637, CVE-2015-7639, CVE-2015-7640, CVE-2015-7641, CVE-2015-7642, CVE-2015-7643, and CVE-2015-7644.
Use-after-free vulnerability in Adobe Flash Player before 18.0.0.252 and 19.x before 19.0.0.207 on Windows and OS X and before 11.2.202.535 on Linux, Adobe AIR before 19.0.0.213, Adobe AIR SDK before 19.0.0.213, and Adobe AIR SDK & Compiler before 19.0.0.213 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-7629, CVE-2015-7631, CVE-2015-7635, CVE-2015-7636, CVE-2015-7637, CVE-2015-7638, CVE-2015-7640, CVE-2015-7641, CVE-2015-7642, CVE-2015-7643, and CVE-2015-7644.
Use-after-free vulnerability in Adobe Flash Player before 18.0.0.252 and 19.x before 19.0.0.207 on Windows and OS X and before 11.2.202.535 on Linux, Adobe AIR before 19.0.0.213, Adobe AIR SDK before 19.0.0.213, and Adobe AIR SDK & Compiler before 19.0.0.213 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-7629, CVE-2015-7631, CVE-2015-7635, CVE-2015-7636, CVE-2015-7637, CVE-2015-7638, CVE-2015-7639, CVE-2015-7641, CVE-2015-7642, CVE-2015-7643, and CVE-2015-7644.
Use-after-free vulnerability in Adobe Flash Player before 18.0.0.252 and 19.x before 19.0.0.207 on Windows and OS X and before 11.2.202.535 on Linux, Adobe AIR before 19.0.0.213, Adobe AIR SDK before 19.0.0.213, and Adobe AIR SDK & Compiler before 19.0.0.213 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-7629, CVE-2015-7631, CVE-2015-7635, CVE-2015-7636, CVE-2015-7637, CVE-2015-7638, CVE-2015-7639, CVE-2015-7640, CVE-2015-7642, CVE-2015-7643, and CVE-2015-7644.
Use-after-free vulnerability in Adobe Flash Player before 18.0.0.252 and 19.x before 19.0.0.207 on Windows and OS X and before 11.2.202.535 on Linux, Adobe AIR before 19.0.0.213, Adobe AIR SDK before 19.0.0.213, and Adobe AIR SDK & Compiler before 19.0.0.213 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-7629, CVE-2015-7631, CVE-2015-7635, CVE-2015-7636, CVE-2015-7637, CVE-2015-7638, CVE-2015-7639, CVE-2015-7640, CVE-2015-7641, CVE-2015-7643, and CVE-2015-7644.
Use-after-free vulnerability in Adobe Flash Player before 18.0.0.252 and 19.x before 19.0.0.207 on Windows and OS X and before 11.2.202.535 on Linux, Adobe AIR before 19.0.0.213, Adobe AIR SDK before 19.0.0.213, and Adobe AIR SDK & Compiler before 19.0.0.213 allows attackers to execute arbitrary code via a Video object with a crafted deblocking property, a different vulnerability than CVE-2015-7629, CVE-2015-7631, and CVE-2015-7644.
Use-after-free vulnerability in Adobe Flash Player before 18.0.0.252 and 19.x before 19.0.0.207 on Windows and OS X and before 11.2.202.535 on Linux, Adobe AIR before 19.0.0.213, Adobe AIR SDK before 19.0.0.213, and Adobe AIR SDK & Compiler before 19.0.0.213 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-7629, CVE-2015-7631, and CVE-2015-7643.
Adobe Flash Player 18.x through 18.0.0.252 and 19.x through 19.0.0.207 on Windows and OS X and 11.x through 11.2.202.535 on Linux allows remote attackers to execute arbitrary code via a crafted SWF file, as exploited in the wild in October 2015.
Adobe Flash Player before 18.0.0.255 and 19.x before 19.0.0.226 on Windows and OS X and before 11.2.202.540 on Linux allows attackers to execute arbitrary code by leveraging an unspecified "type confusion," a different vulnerability than CVE-2015-7648.
Adobe Flash Player before 18.0.0.255 and 19.x before 19.0.0.226 on Windows and OS X and before 11.2.202.540 on Linux allows attackers to execute arbitrary code by leveraging an unspecified "type confusion," a different vulnerability than CVE-2015-7647.
Use-after-free vulnerability in Adobe Flash Player before 18.0.0.261 and 19.x before 19.0.0.245 on Windows and OS X and before 11.2.202.548 on Linux, Adobe AIR before 19.0.0.241, Adobe AIR SDK before 19.0.0.241, and Adobe AIR SDK & Compiler before 19.0.0.241 allows attackers to execute arbitrary code via crafted DefineFunction atoms, a different vulnerability than CVE-2015-7652, CVE-2015-7653, CVE-2015-7654, CVE-2015-7655, CVE-2015-7656, CVE-2015-7657, CVE-2015-7658, CVE-2015-7660, CVE-2015-7661, CVE-2015-7663, CVE-2015-8042, CVE-2015-8043, CVE-2015-8044, and CVE-2015-8046.
Use-after-free vulnerability in Adobe Flash Player before 18.0.0.261 and 19.x before 19.0.0.245 on Windows and OS X and before 11.2.202.548 on Linux, Adobe AIR before 19.0.0.241, Adobe AIR SDK before 19.0.0.241, and Adobe AIR SDK & Compiler before 19.0.0.241 allows attackers to execute arbitrary code via a crafted gridFitType property value, a different vulnerability than CVE-2015-7651, CVE-2015-7653, CVE-2015-7654, CVE-2015-7655, CVE-2015-7656, CVE-2015-7657, CVE-2015-7658, CVE-2015-7660, CVE-2015-7661, CVE-2015-7663, CVE-2015-8042, CVE-2015-8043, CVE-2015-8044, and CVE-2015-8046.
Use-after-free vulnerability in Adobe Flash Player before 18.0.0.261 and 19.x before 19.0.0.245 on Windows and OS X and before 11.2.202.548 on Linux, Adobe AIR before 19.0.0.241, Adobe AIR SDK before 19.0.0.241, and Adobe AIR SDK & Compiler before 19.0.0.241 allows attackers to execute arbitrary code via crafted globalToLocal arguments, a different vulnerability than CVE-2015-7651, CVE-2015-7652, CVE-2015-7654, CVE-2015-7655, CVE-2015-7656, CVE-2015-7657, CVE-2015-7658, CVE-2015-7660, CVE-2015-7661, CVE-2015-7663, CVE-2015-8042, CVE-2015-8043, CVE-2015-8044, and CVE-2015-8046.
Use-after-free vulnerability in Adobe Flash Player before 18.0.0.261 and 19.x before 19.0.0.245 on Windows and OS X and before 11.2.202.548 on Linux, Adobe AIR before 19.0.0.241, Adobe AIR SDK before 19.0.0.241, and Adobe AIR SDK & Compiler before 19.0.0.241 allows attackers to execute arbitrary code via crafted attachSound arguments, a different vulnerability than CVE-2015-7651, CVE-2015-7652, CVE-2015-7653, CVE-2015-7655, CVE-2015-7656, CVE-2015-7657, CVE-2015-7658, CVE-2015-7660, CVE-2015-7661, CVE-2015-7663, CVE-2015-8042, CVE-2015-8043, CVE-2015-8044, and CVE-2015-8046.
Use-after-free vulnerability in Adobe Flash Player before 18.0.0.261 and 19.x before 19.0.0.245 on Windows and OS X and before 11.2.202.548 on Linux, Adobe AIR before 19.0.0.241, Adobe AIR SDK before 19.0.0.241, and Adobe AIR SDK & Compiler before 19.0.0.241 allows attackers to execute arbitrary code via crafted actionExtends arguments, a different vulnerability than CVE-2015-7651, CVE-2015-7652, CVE-2015-7653, CVE-2015-7654, CVE-2015-7656, CVE-2015-7657, CVE-2015-7658, CVE-2015-7660, CVE-2015-7661, CVE-2015-7663, CVE-2015-8042, CVE-2015-8043, CVE-2015-8044, and CVE-2015-8046.
Use-after-free vulnerability in Adobe Flash Player before 18.0.0.261 and 19.x before 19.0.0.245 on Windows and OS X and before 11.2.202.548 on Linux, Adobe AIR before 19.0.0.241, Adobe AIR SDK before 19.0.0.241, and Adobe AIR SDK & Compiler before 19.0.0.241 allows attackers to execute arbitrary code via crafted actionImplementsOp arguments, a different vulnerability than CVE-2015-7651, CVE-2015-7652, CVE-2015-7653, CVE-2015-7654, CVE-2015-7655, CVE-2015-7657, CVE-2015-7658, CVE-2015-7660, CVE-2015-7661, CVE-2015-7663, CVE-2015-8042, CVE-2015-8043, CVE-2015-8044, and CVE-2015-8046.
Use-after-free vulnerability in Adobe Flash Player before 18.0.0.261 and 19.x before 19.0.0.245 on Windows and OS X and before 11.2.202.548 on Linux, Adobe AIR before 19.0.0.241, Adobe AIR SDK before 19.0.0.241, and Adobe AIR SDK & Compiler before 19.0.0.241 allows attackers to execute arbitrary code via crafted actionCallMethod arguments, a different vulnerability than CVE-2015-7651, CVE-2015-7652, CVE-2015-7653, CVE-2015-7654, CVE-2015-7655, CVE-2015-7656, CVE-2015-7658, CVE-2015-7660, CVE-2015-7661, CVE-2015-7663, CVE-2015-8042, CVE-2015-8043, CVE-2015-8044, and CVE-2015-8046.
Use-after-free vulnerability in Adobe Flash Player before 18.0.0.261 and 19.x before 19.0.0.245 on Windows and OS X and before 11.2.202.548 on Linux, Adobe AIR before 19.0.0.241, Adobe AIR SDK before 19.0.0.241, and Adobe AIR SDK & Compiler before 19.0.0.241 allows attackers to execute arbitrary code via crafted actionInstanceOf arguments, a different vulnerability than CVE-2015-7651, CVE-2015-7652, CVE-2015-7653, CVE-2015-7654, CVE-2015-7655, CVE-2015-7656, CVE-2015-7657, CVE-2015-7660, CVE-2015-7661, CVE-2015-7663, CVE-2015-8042, CVE-2015-8043, CVE-2015-8044, and CVE-2015-8046.
Adobe Flash Player before 18.0.0.261 and 19.x before 19.0.0.245 on Windows and OS X and before 11.2.202.548 on Linux, Adobe AIR before 19.0.0.241, Adobe AIR SDK before 19.0.0.241, and Adobe AIR SDK & Compiler before 19.0.0.241 allow attackers to execute arbitrary code by leveraging an unspecified "type confusion" in the NetConnection object implementation.
Use-after-free vulnerability in Adobe Flash Player before 18.0.0.261 and 19.x before 19.0.0.245 on Windows and OS X and before 11.2.202.548 on Linux, Adobe AIR before 19.0.0.241, Adobe AIR SDK before 19.0.0.241, and Adobe AIR SDK & Compiler before 19.0.0.241 allows attackers to execute arbitrary code via crafted setMask arguments, a different vulnerability than CVE-2015-7651, CVE-2015-7652, CVE-2015-7653, CVE-2015-7654, CVE-2015-7655, CVE-2015-7656, CVE-2015-7657, CVE-2015-7658, CVE-2015-7661, CVE-2015-7663, CVE-2015-8042, CVE-2015-8043, CVE-2015-8044, and CVE-2015-8046.
Use-after-free vulnerability in Adobe Flash Player before 18.0.0.261 and 19.x before 19.0.0.245 on Windows and OS X and before 11.2.202.548 on Linux, Adobe AIR before 19.0.0.241, Adobe AIR SDK before 19.0.0.241, and Adobe AIR SDK & Compiler before 19.0.0.241 allows attackers to execute arbitrary code via a crafted getBounds call, a different vulnerability than CVE-2015-7651, CVE-2015-7652, CVE-2015-7653, CVE-2015-7654, CVE-2015-7655, CVE-2015-7656, CVE-2015-7657, CVE-2015-7658, CVE-2015-7660, CVE-2015-7663, CVE-2015-8042, CVE-2015-8043, CVE-2015-8044, and CVE-2015-8046.
Adobe Flash Player before 18.0.0.261 and 19.x before 19.0.0.245 on Windows and OS X and before 11.2.202.548 on Linux, Adobe AIR before 19.0.0.241, Adobe AIR SDK before 19.0.0.241, and Adobe AIR SDK & Compiler before 19.0.0.241 allow remote attackers to bypass intended access restrictions and write to files via unspecified vectors.
Use-after-free vulnerability in Adobe Flash Player before 18.0.0.261 and 19.x before 19.0.0.245 on Windows and OS X and before 11.2.202.548 on Linux, Adobe AIR before 19.0.0.241, Adobe AIR SDK before 19.0.0.241, and Adobe AIR SDK & Compiler before 19.0.0.241 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-7651, CVE-2015-7652, CVE-2015-7653, CVE-2015-7654, CVE-2015-7655, CVE-2015-7656, CVE-2015-7657, CVE-2015-7658, CVE-2015-7660, CVE-2015-7661, CVE-2015-8042, CVE-2015-8043, CVE-2015-8044, and CVE-2015-8046.
Use-after-free vulnerability in Adobe Flash Player before 18.0.0.261 and 19.x before 19.0.0.245 on Windows and OS X and before 11.2.202.548 on Linux, Adobe AIR before 19.0.0.241, Adobe AIR SDK before 19.0.0.241, and Adobe AIR SDK & Compiler before 19.0.0.241 allows attackers to execute arbitrary code via a crafted loadSound call, a different vulnerability than CVE-2015-7651, CVE-2015-7652, CVE-2015-7653, CVE-2015-7654, CVE-2015-7655, CVE-2015-7656, CVE-2015-7657, CVE-2015-7658, CVE-2015-7660, CVE-2015-7661, CVE-2015-7663, CVE-2015-8043, CVE-2015-8044, and CVE-2015-8046.
Use-after-free vulnerability in Adobe Flash Player before 18.0.0.261 and 19.x before 19.0.0.245 on Windows and OS X and before 11.2.202.548 on Linux, Adobe AIR before 19.0.0.241, Adobe AIR SDK before 19.0.0.241, and Adobe AIR SDK & Compiler before 19.0.0.241 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-7651, CVE-2015-7652, CVE-2015-7653, CVE-2015-7654, CVE-2015-7655, CVE-2015-7656, CVE-2015-7657, CVE-2015-7658, CVE-2015-7660, CVE-2015-7661, CVE-2015-7663, CVE-2015-8042, CVE-2015-8044, and CVE-2015-8046.
Use-after-free vulnerability in Adobe Flash Player before 18.0.0.261 and 19.x before 19.0.0.245 on Windows and OS X and before 11.2.202.548 on Linux, Adobe AIR before 19.0.0.241, Adobe AIR SDK before 19.0.0.241, and Adobe AIR SDK & Compiler before 19.0.0.241 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-7651, CVE-2015-7652, CVE-2015-7653, CVE-2015-7654, CVE-2015-7655, CVE-2015-7656, CVE-2015-7657, CVE-2015-7658, CVE-2015-7660, CVE-2015-7661, CVE-2015-7663, CVE-2015-8042, CVE-2015-8043, and CVE-2015-8046.
Use-after-free vulnerability in Adobe Flash Player before 18.0.0.261 and 19.x before 19.0.0.245 on Windows and OS X and before 11.2.202.548 on Linux, Adobe AIR before 19.0.0.241, Adobe AIR SDK before 19.0.0.241, and Adobe AIR SDK & Compiler before 19.0.0.241 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-7651, CVE-2015-7652, CVE-2015-7653, CVE-2015-7654, CVE-2015-7655, CVE-2015-7656, CVE-2015-7657, CVE-2015-7658, CVE-2015-7660, CVE-2015-7661, CVE-2015-7663, CVE-2015-8042, CVE-2015-8043, and CVE-2015-8044.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Critical"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An updated Adobe Flash Player package that fixes multiple security issues\nis now available for Red Hat Enterprise Linux 5 Supplementary.\n\nRed Hat Product Security has rated this update as having Critical security\nimpact. Common Vulnerability Scoring System (CVSS) base scores, which give\ndetailed severity ratings, are available for each vulnerability from the\nCVE links in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "The flash-plugin package contains a Mozilla Firefox compatible Adobe Flash\nPlayer web browser plug-in.\n\nThis update fixes multiple vulnerabilities in Adobe Flash Player. These\nvulnerabilities, detailed in the Adobe Security Bulletins APSB15-25,\nAPSB15-27, and APSB15-28 listed in the References section, could allow an\nattacker to create a specially crafted SWF file that would cause\nflash-plugin to crash, execute arbitrary code, or disclose sensitive\ninformation when the victim loaded a page containing the malicious SWF\ncontent. (CVE-2015-5569, CVE-2015-7625, CVE-2015-7626, CVE-2015-7627,\nCVE-2015-7628, CVE-2015-7629, CVE-2015-7630, CVE-2015-7631, CVE-2015-7632,\nCVE-2015-7633, CVE-2015-7634, CVE-2015-7635, CVE-2015-7636, CVE-2015-7637,\nCVE-2015-7638, CVE-2015-7639, CVE-2015-7640, CVE-2015-7641, CVE-2015-7642,\nCVE-2015-7643, CVE-2015-7644, CVE-2015-7645, CVE-2015-7647, CVE-2015-7648,\nCVE-2015-7651, CVE-2015-7652, CVE-2015-7653, CVE-2015-7654, CVE-2015-7655,\nCVE-2015-7656, CVE-2015-7657, CVE-2015-7658, CVE-2015-7659, CVE-2015-7660,\nCVE-2015-7661, CVE-2015-7662, CVE-2015-7663, CVE-2015-8042, CVE-2015-8043,\nCVE-2015-8044, CVE-2015-8046)\n\nAll users of Adobe Flash Player should install this updated package, which\nupgrades Flash Player to version 11.2.202.548.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2015:2024",
"url": "https://access.redhat.com/errata/RHSA-2015:2024"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#critical",
"url": "https://access.redhat.com/security/updates/classification/#critical"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb15-25.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb15-25.html"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb15-27.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb15-27.html"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb15-28.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb15-28.html"
},
{
"category": "external",
"summary": "1271383",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1271383"
},
{
"category": "external",
"summary": "1271388",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1271388"
},
{
"category": "external",
"summary": "1271966",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1271966"
},
{
"category": "external",
"summary": "1280062",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1280062"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2015/rhsa-2015_2024.json"
}
],
"title": "Red Hat Security Advisory: flash-plugin security update",
"tracking": {
"current_release_date": "2025-11-21T17:53:56+00:00",
"generator": {
"date": "2025-11-21T17:53:56+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.6.12"
}
},
"id": "RHSA-2015:2024",
"initial_release_date": "2015-11-11T11:21:16+00:00",
"revision_history": [
{
"date": "2015-11-11T11:21:16+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2015-11-11T11:21:16+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2025-11-21T17:53:56+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Desktop Supplementary (v. 5)",
"product": {
"name": "Red Hat Enterprise Linux Desktop Supplementary (v. 5)",
"product_id": "5Client-Supplementary-5.11.Z",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_extras:5::client"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Server Supplementary (v. 5)",
"product": {
"name": "Red Hat Enterprise Linux Server Supplementary (v. 5)",
"product_id": "5Server-Supplementary-5.11.Z",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_extras:5::server"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux Supplementary"
},
{
"branches": [
{
"category": "product_version",
"name": "flash-plugin-0:11.2.202.548-1.el5.i386",
"product": {
"name": "flash-plugin-0:11.2.202.548-1.el5.i386",
"product_id": "flash-plugin-0:11.2.202.548-1.el5.i386",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/flash-plugin@11.2.202.548-1.el5?arch=i386"
}
}
}
],
"category": "architecture",
"name": "i386"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "flash-plugin-0:11.2.202.548-1.el5.i386 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 5)",
"product_id": "5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.548-1.el5.i386"
},
"product_reference": "flash-plugin-0:11.2.202.548-1.el5.i386",
"relates_to_product_reference": "5Client-Supplementary-5.11.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "flash-plugin-0:11.2.202.548-1.el5.i386 as a component of Red Hat Enterprise Linux Server Supplementary (v. 5)",
"product_id": "5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.548-1.el5.i386"
},
"product_reference": "flash-plugin-0:11.2.202.548-1.el5.i386",
"relates_to_product_reference": "5Server-Supplementary-5.11.Z"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2015-5569",
"discovery_date": "2015-10-13T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1271388"
}
],
"notes": [
{
"category": "description",
"text": "Adobe Flash Player before 18.0.0.252 and 19.x before 19.0.0.207 on Windows and OS X and before 11.2.202.535 on Linux, Adobe AIR before 19.0.0.213, Adobe AIR SDK before 19.0.0.213, and Adobe AIR SDK \u0026 Compiler before 19.0.0.213 improperly implement the Flash broker API, which has unspecified impact and attack vectors.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: information leak and hardening fixes in APSB15-25",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.548-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.548-1.el5.i386"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2015-5569"
},
{
"category": "external",
"summary": "RHBZ#1271388",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1271388"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2015-5569",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-5569"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2015-5569",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2015-5569"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb15-25.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb15-25.html"
}
],
"release_date": "2015-10-13T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-11-11T11:21:16+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.548-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.548-1.el5.i386"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:2024"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 4.3,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:N/A:N",
"version": "2.0"
},
"products": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.548-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.548-1.el5.i386"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "flash-plugin: information leak and hardening fixes in APSB15-25"
},
{
"cve": "CVE-2015-7625",
"discovery_date": "2015-10-13T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1271383"
}
],
"notes": [
{
"category": "description",
"text": "Adobe Flash Player before 18.0.0.252 and 19.x before 19.0.0.207 on Windows and OS X and before 11.2.202.535 on Linux, Adobe AIR before 19.0.0.213, Adobe AIR SDK before 19.0.0.213, and Adobe AIR SDK \u0026 Compiler before 19.0.0.213 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-7626, CVE-2015-7627, CVE-2015-7630, CVE-2015-7633, and CVE-2015-7634.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB15-25",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.548-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.548-1.el5.i386"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2015-7625"
},
{
"category": "external",
"summary": "RHBZ#1271383",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1271383"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2015-7625",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-7625"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2015-7625",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2015-7625"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb15-25.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb15-25.html"
}
],
"release_date": "2015-10-13T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-11-11T11:21:16+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.548-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.548-1.el5.i386"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:2024"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.548-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.548-1.el5.i386"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB15-25"
},
{
"cve": "CVE-2015-7626",
"discovery_date": "2015-10-13T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1271383"
}
],
"notes": [
{
"category": "description",
"text": "Adobe Flash Player before 18.0.0.252 and 19.x before 19.0.0.207 on Windows and OS X and before 11.2.202.535 on Linux, Adobe AIR before 19.0.0.213, Adobe AIR SDK before 19.0.0.213, and Adobe AIR SDK \u0026 Compiler before 19.0.0.213 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-7625, CVE-2015-7627, CVE-2015-7630, CVE-2015-7633, and CVE-2015-7634.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB15-25",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.548-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.548-1.el5.i386"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2015-7626"
},
{
"category": "external",
"summary": "RHBZ#1271383",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1271383"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2015-7626",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-7626"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2015-7626",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2015-7626"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb15-25.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb15-25.html"
}
],
"release_date": "2015-10-13T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-11-11T11:21:16+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.548-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.548-1.el5.i386"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:2024"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.548-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.548-1.el5.i386"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB15-25"
},
{
"cve": "CVE-2015-7627",
"discovery_date": "2015-10-13T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1271383"
}
],
"notes": [
{
"category": "description",
"text": "Adobe Flash Player before 18.0.0.252 and 19.x before 19.0.0.207 on Windows and OS X and before 11.2.202.535 on Linux, Adobe AIR before 19.0.0.213, Adobe AIR SDK before 19.0.0.213, and Adobe AIR SDK \u0026 Compiler before 19.0.0.213 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-7625, CVE-2015-7626, CVE-2015-7630, CVE-2015-7633, and CVE-2015-7634.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB15-25",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.548-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.548-1.el5.i386"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2015-7627"
},
{
"category": "external",
"summary": "RHBZ#1271383",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1271383"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2015-7627",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-7627"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2015-7627",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2015-7627"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb15-25.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb15-25.html"
}
],
"release_date": "2015-10-13T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-11-11T11:21:16+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.548-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.548-1.el5.i386"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:2024"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.548-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.548-1.el5.i386"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB15-25"
},
{
"cve": "CVE-2015-7628",
"discovery_date": "2015-10-13T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1271388"
}
],
"notes": [
{
"category": "description",
"text": "Adobe Flash Player before 18.0.0.252 and 19.x before 19.0.0.207 on Windows and OS X and before 11.2.202.535 on Linux, Adobe AIR before 19.0.0.213, Adobe AIR SDK before 19.0.0.213, and Adobe AIR SDK \u0026 Compiler before 19.0.0.213 allow remote attackers to bypass the Same Origin Policy and obtain sensitive information via unspecified vectors.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: information leak and hardening fixes in APSB15-25",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.548-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.548-1.el5.i386"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2015-7628"
},
{
"category": "external",
"summary": "RHBZ#1271388",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1271388"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2015-7628",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-7628"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2015-7628",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2015-7628"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb15-25.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb15-25.html"
}
],
"release_date": "2015-10-13T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-11-11T11:21:16+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.548-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.548-1.el5.i386"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:2024"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 4.3,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:N/A:N",
"version": "2.0"
},
"products": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.548-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.548-1.el5.i386"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "flash-plugin: information leak and hardening fixes in APSB15-25"
},
{
"cve": "CVE-2015-7629",
"discovery_date": "2015-10-13T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1271383"
}
],
"notes": [
{
"category": "description",
"text": "Use-after-free vulnerability in Adobe Flash Player before 18.0.0.252 and 19.x before 19.0.0.207 on Windows and OS X and before 11.2.202.535 on Linux, Adobe AIR before 19.0.0.213, Adobe AIR SDK before 19.0.0.213, and Adobe AIR SDK \u0026 Compiler before 19.0.0.213 allows attackers to execute arbitrary code via a TextFormat object with a crafted tabStops property, a different vulnerability than CVE-2015-7631, CVE-2015-7643, and CVE-2015-7644.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB15-25",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.548-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.548-1.el5.i386"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2015-7629"
},
{
"category": "external",
"summary": "RHBZ#1271383",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1271383"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2015-7629",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-7629"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2015-7629",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2015-7629"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb15-25.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb15-25.html"
}
],
"release_date": "2015-10-13T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-11-11T11:21:16+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.548-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.548-1.el5.i386"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:2024"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.548-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.548-1.el5.i386"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB15-25"
},
{
"cve": "CVE-2015-7630",
"discovery_date": "2015-10-13T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1271383"
}
],
"notes": [
{
"category": "description",
"text": "Adobe Flash Player before 18.0.0.252 and 19.x before 19.0.0.207 on Windows and OS X and before 11.2.202.535 on Linux, Adobe AIR before 19.0.0.213, Adobe AIR SDK before 19.0.0.213, and Adobe AIR SDK \u0026 Compiler before 19.0.0.213 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-7625, CVE-2015-7626, CVE-2015-7627, CVE-2015-7633, and CVE-2015-7634.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB15-25",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.548-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.548-1.el5.i386"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2015-7630"
},
{
"category": "external",
"summary": "RHBZ#1271383",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1271383"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2015-7630",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-7630"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2015-7630",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2015-7630"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb15-25.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb15-25.html"
}
],
"release_date": "2015-10-13T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-11-11T11:21:16+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.548-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.548-1.el5.i386"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:2024"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.548-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.548-1.el5.i386"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB15-25"
},
{
"cve": "CVE-2015-7631",
"discovery_date": "2015-10-13T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1271383"
}
],
"notes": [
{
"category": "description",
"text": "Use-after-free vulnerability in Adobe Flash Player before 18.0.0.252 and 19.x before 19.0.0.207 on Windows and OS X and before 11.2.202.535 on Linux, Adobe AIR before 19.0.0.213, Adobe AIR SDK before 19.0.0.213, and Adobe AIR SDK \u0026 Compiler before 19.0.0.213 allows attackers to execute arbitrary code via a TextLine object with a crafted validity property, a different vulnerability than CVE-2015-7629, CVE-2015-7643, and CVE-2015-7644.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB15-25",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.548-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.548-1.el5.i386"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2015-7631"
},
{
"category": "external",
"summary": "RHBZ#1271383",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1271383"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2015-7631",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-7631"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2015-7631",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2015-7631"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb15-25.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb15-25.html"
}
],
"release_date": "2015-10-13T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-11-11T11:21:16+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.548-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.548-1.el5.i386"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:2024"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.548-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.548-1.el5.i386"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB15-25"
},
{
"cve": "CVE-2015-7632",
"discovery_date": "2015-10-13T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1271383"
}
],
"notes": [
{
"category": "description",
"text": "Buffer overflow in Adobe Flash Player before 18.0.0.252 and 19.x before 19.0.0.207 on Windows and OS X and before 11.2.202.535 on Linux, Adobe AIR before 19.0.0.213, Adobe AIR SDK before 19.0.0.213, and Adobe AIR SDK \u0026 Compiler before 19.0.0.213 allows attackers to execute arbitrary code via a Loader object with a crafted loaderBytes property.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB15-25",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.548-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.548-1.el5.i386"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2015-7632"
},
{
"category": "external",
"summary": "RHBZ#1271383",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1271383"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2015-7632",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-7632"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2015-7632",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2015-7632"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb15-25.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb15-25.html"
}
],
"release_date": "2015-10-13T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-11-11T11:21:16+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.548-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.548-1.el5.i386"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:2024"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.548-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.548-1.el5.i386"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB15-25"
},
{
"cve": "CVE-2015-7633",
"discovery_date": "2015-10-13T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1271383"
}
],
"notes": [
{
"category": "description",
"text": "Adobe Flash Player before 18.0.0.252 and 19.x before 19.0.0.207 on Windows and OS X and before 11.2.202.535 on Linux, Adobe AIR before 19.0.0.213, Adobe AIR SDK before 19.0.0.213, and Adobe AIR SDK \u0026 Compiler before 19.0.0.213 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-7625, CVE-2015-7626, CVE-2015-7627, CVE-2015-7630, and CVE-2015-7634.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB15-25",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.548-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.548-1.el5.i386"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2015-7633"
},
{
"category": "external",
"summary": "RHBZ#1271383",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1271383"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2015-7633",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-7633"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2015-7633",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2015-7633"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb15-25.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb15-25.html"
}
],
"release_date": "2015-10-13T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-11-11T11:21:16+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.548-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.548-1.el5.i386"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:2024"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.548-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.548-1.el5.i386"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB15-25"
},
{
"cve": "CVE-2015-7634",
"discovery_date": "2015-10-13T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1271383"
}
],
"notes": [
{
"category": "description",
"text": "Adobe Flash Player before 18.0.0.252 and 19.x before 19.0.0.207 on Windows and OS X and before 11.2.202.535 on Linux, Adobe AIR before 19.0.0.213, Adobe AIR SDK before 19.0.0.213, and Adobe AIR SDK \u0026 Compiler before 19.0.0.213 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-7625, CVE-2015-7626, CVE-2015-7627, CVE-2015-7630, and CVE-2015-7633.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB15-25",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.548-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.548-1.el5.i386"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2015-7634"
},
{
"category": "external",
"summary": "RHBZ#1271383",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1271383"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2015-7634",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-7634"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2015-7634",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2015-7634"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb15-25.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb15-25.html"
}
],
"release_date": "2015-10-13T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-11-11T11:21:16+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.548-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.548-1.el5.i386"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:2024"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.548-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.548-1.el5.i386"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB15-25"
},
{
"cve": "CVE-2015-7635",
"discovery_date": "2015-10-13T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1271383"
}
],
"notes": [
{
"category": "description",
"text": "Use-after-free vulnerability in Adobe Flash Player before 18.0.0.252 and 19.x before 19.0.0.207 on Windows and OS X and before 11.2.202.535 on Linux, Adobe AIR before 19.0.0.213, Adobe AIR SDK before 19.0.0.213, and Adobe AIR SDK \u0026 Compiler before 19.0.0.213 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-7629, CVE-2015-7631, CVE-2015-7636, CVE-2015-7637, CVE-2015-7638, CVE-2015-7639, CVE-2015-7640, CVE-2015-7641, CVE-2015-7642, CVE-2015-7643, and CVE-2015-7644.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB15-25",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.548-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.548-1.el5.i386"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2015-7635"
},
{
"category": "external",
"summary": "RHBZ#1271383",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1271383"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2015-7635",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-7635"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2015-7635",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2015-7635"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb15-25.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb15-25.html"
}
],
"release_date": "2015-10-13T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-11-11T11:21:16+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.548-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.548-1.el5.i386"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:2024"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.548-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.548-1.el5.i386"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB15-25"
},
{
"cve": "CVE-2015-7636",
"discovery_date": "2015-10-13T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1271383"
}
],
"notes": [
{
"category": "description",
"text": "Use-after-free vulnerability in Adobe Flash Player before 18.0.0.252 and 19.x before 19.0.0.207 on Windows and OS X and before 11.2.202.535 on Linux, Adobe AIR before 19.0.0.213, Adobe AIR SDK before 19.0.0.213, and Adobe AIR SDK \u0026 Compiler before 19.0.0.213 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-7629, CVE-2015-7631, CVE-2015-7635, CVE-2015-7637, CVE-2015-7638, CVE-2015-7639, CVE-2015-7640, CVE-2015-7641, CVE-2015-7642, CVE-2015-7643, and CVE-2015-7644.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB15-25",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.548-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.548-1.el5.i386"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2015-7636"
},
{
"category": "external",
"summary": "RHBZ#1271383",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1271383"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2015-7636",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-7636"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2015-7636",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2015-7636"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb15-25.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb15-25.html"
}
],
"release_date": "2015-10-13T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-11-11T11:21:16+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.548-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.548-1.el5.i386"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:2024"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.548-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.548-1.el5.i386"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB15-25"
},
{
"cve": "CVE-2015-7637",
"discovery_date": "2015-10-13T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1271383"
}
],
"notes": [
{
"category": "description",
"text": "Use-after-free vulnerability in Adobe Flash Player before 18.0.0.252 and 19.x before 19.0.0.207 on Windows and OS X and before 11.2.202.535 on Linux, Adobe AIR before 19.0.0.213, Adobe AIR SDK before 19.0.0.213, and Adobe AIR SDK \u0026 Compiler before 19.0.0.213 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-7629, CVE-2015-7631, CVE-2015-7635, CVE-2015-7636, CVE-2015-7638, CVE-2015-7639, CVE-2015-7640, CVE-2015-7641, CVE-2015-7642, CVE-2015-7643, and CVE-2015-7644.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB15-25",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.548-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.548-1.el5.i386"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2015-7637"
},
{
"category": "external",
"summary": "RHBZ#1271383",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1271383"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2015-7637",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-7637"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2015-7637",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2015-7637"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb15-25.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb15-25.html"
}
],
"release_date": "2015-10-13T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-11-11T11:21:16+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.548-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.548-1.el5.i386"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:2024"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.548-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.548-1.el5.i386"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB15-25"
},
{
"cve": "CVE-2015-7638",
"discovery_date": "2015-10-13T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1271383"
}
],
"notes": [
{
"category": "description",
"text": "Use-after-free vulnerability in Adobe Flash Player before 18.0.0.252 and 19.x before 19.0.0.207 on Windows and OS X and before 11.2.202.535 on Linux, Adobe AIR before 19.0.0.213, Adobe AIR SDK before 19.0.0.213, and Adobe AIR SDK \u0026 Compiler before 19.0.0.213 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-7629, CVE-2015-7631, CVE-2015-7635, CVE-2015-7636, CVE-2015-7637, CVE-2015-7639, CVE-2015-7640, CVE-2015-7641, CVE-2015-7642, CVE-2015-7643, and CVE-2015-7644.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB15-25",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.548-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.548-1.el5.i386"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2015-7638"
},
{
"category": "external",
"summary": "RHBZ#1271383",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1271383"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2015-7638",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-7638"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2015-7638",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2015-7638"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb15-25.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb15-25.html"
}
],
"release_date": "2015-10-13T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-11-11T11:21:16+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.548-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.548-1.el5.i386"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:2024"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.548-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.548-1.el5.i386"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB15-25"
},
{
"cve": "CVE-2015-7639",
"discovery_date": "2015-10-13T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1271383"
}
],
"notes": [
{
"category": "description",
"text": "Use-after-free vulnerability in Adobe Flash Player before 18.0.0.252 and 19.x before 19.0.0.207 on Windows and OS X and before 11.2.202.535 on Linux, Adobe AIR before 19.0.0.213, Adobe AIR SDK before 19.0.0.213, and Adobe AIR SDK \u0026 Compiler before 19.0.0.213 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-7629, CVE-2015-7631, CVE-2015-7635, CVE-2015-7636, CVE-2015-7637, CVE-2015-7638, CVE-2015-7640, CVE-2015-7641, CVE-2015-7642, CVE-2015-7643, and CVE-2015-7644.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB15-25",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.548-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.548-1.el5.i386"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2015-7639"
},
{
"category": "external",
"summary": "RHBZ#1271383",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1271383"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2015-7639",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-7639"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2015-7639",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2015-7639"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb15-25.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb15-25.html"
}
],
"release_date": "2015-10-13T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-11-11T11:21:16+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.548-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.548-1.el5.i386"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:2024"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.548-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.548-1.el5.i386"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB15-25"
},
{
"cve": "CVE-2015-7640",
"discovery_date": "2015-10-13T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1271383"
}
],
"notes": [
{
"category": "description",
"text": "Use-after-free vulnerability in Adobe Flash Player before 18.0.0.252 and 19.x before 19.0.0.207 on Windows and OS X and before 11.2.202.535 on Linux, Adobe AIR before 19.0.0.213, Adobe AIR SDK before 19.0.0.213, and Adobe AIR SDK \u0026 Compiler before 19.0.0.213 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-7629, CVE-2015-7631, CVE-2015-7635, CVE-2015-7636, CVE-2015-7637, CVE-2015-7638, CVE-2015-7639, CVE-2015-7641, CVE-2015-7642, CVE-2015-7643, and CVE-2015-7644.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB15-25",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.548-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.548-1.el5.i386"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2015-7640"
},
{
"category": "external",
"summary": "RHBZ#1271383",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1271383"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2015-7640",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-7640"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2015-7640",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2015-7640"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb15-25.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb15-25.html"
}
],
"release_date": "2015-10-13T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-11-11T11:21:16+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.548-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.548-1.el5.i386"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:2024"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.548-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.548-1.el5.i386"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB15-25"
},
{
"cve": "CVE-2015-7641",
"discovery_date": "2015-10-13T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1271383"
}
],
"notes": [
{
"category": "description",
"text": "Use-after-free vulnerability in Adobe Flash Player before 18.0.0.252 and 19.x before 19.0.0.207 on Windows and OS X and before 11.2.202.535 on Linux, Adobe AIR before 19.0.0.213, Adobe AIR SDK before 19.0.0.213, and Adobe AIR SDK \u0026 Compiler before 19.0.0.213 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-7629, CVE-2015-7631, CVE-2015-7635, CVE-2015-7636, CVE-2015-7637, CVE-2015-7638, CVE-2015-7639, CVE-2015-7640, CVE-2015-7642, CVE-2015-7643, and CVE-2015-7644.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB15-25",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.548-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.548-1.el5.i386"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2015-7641"
},
{
"category": "external",
"summary": "RHBZ#1271383",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1271383"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2015-7641",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-7641"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2015-7641",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2015-7641"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb15-25.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb15-25.html"
}
],
"release_date": "2015-10-13T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-11-11T11:21:16+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.548-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.548-1.el5.i386"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:2024"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.548-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.548-1.el5.i386"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB15-25"
},
{
"cve": "CVE-2015-7642",
"discovery_date": "2015-10-13T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1271383"
}
],
"notes": [
{
"category": "description",
"text": "Use-after-free vulnerability in Adobe Flash Player before 18.0.0.252 and 19.x before 19.0.0.207 on Windows and OS X and before 11.2.202.535 on Linux, Adobe AIR before 19.0.0.213, Adobe AIR SDK before 19.0.0.213, and Adobe AIR SDK \u0026 Compiler before 19.0.0.213 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-7629, CVE-2015-7631, CVE-2015-7635, CVE-2015-7636, CVE-2015-7637, CVE-2015-7638, CVE-2015-7639, CVE-2015-7640, CVE-2015-7641, CVE-2015-7643, and CVE-2015-7644.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB15-25",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.548-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.548-1.el5.i386"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2015-7642"
},
{
"category": "external",
"summary": "RHBZ#1271383",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1271383"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2015-7642",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-7642"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2015-7642",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2015-7642"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb15-25.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb15-25.html"
}
],
"release_date": "2015-10-13T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-11-11T11:21:16+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.548-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.548-1.el5.i386"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:2024"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.548-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.548-1.el5.i386"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB15-25"
},
{
"cve": "CVE-2015-7643",
"discovery_date": "2015-10-13T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1271383"
}
],
"notes": [
{
"category": "description",
"text": "Use-after-free vulnerability in Adobe Flash Player before 18.0.0.252 and 19.x before 19.0.0.207 on Windows and OS X and before 11.2.202.535 on Linux, Adobe AIR before 19.0.0.213, Adobe AIR SDK before 19.0.0.213, and Adobe AIR SDK \u0026 Compiler before 19.0.0.213 allows attackers to execute arbitrary code via a Video object with a crafted deblocking property, a different vulnerability than CVE-2015-7629, CVE-2015-7631, and CVE-2015-7644.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB15-25",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.548-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.548-1.el5.i386"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2015-7643"
},
{
"category": "external",
"summary": "RHBZ#1271383",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1271383"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2015-7643",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-7643"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2015-7643",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2015-7643"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb15-25.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb15-25.html"
}
],
"release_date": "2015-10-13T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-11-11T11:21:16+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.548-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.548-1.el5.i386"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:2024"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.548-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.548-1.el5.i386"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB15-25"
},
{
"cve": "CVE-2015-7644",
"discovery_date": "2015-10-13T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1271383"
}
],
"notes": [
{
"category": "description",
"text": "Use-after-free vulnerability in Adobe Flash Player before 18.0.0.252 and 19.x before 19.0.0.207 on Windows and OS X and before 11.2.202.535 on Linux, Adobe AIR before 19.0.0.213, Adobe AIR SDK before 19.0.0.213, and Adobe AIR SDK \u0026 Compiler before 19.0.0.213 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-7629, CVE-2015-7631, and CVE-2015-7643.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB15-25",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.548-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.548-1.el5.i386"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2015-7644"
},
{
"category": "external",
"summary": "RHBZ#1271383",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1271383"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2015-7644",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-7644"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2015-7644",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2015-7644"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb15-25.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb15-25.html"
}
],
"release_date": "2015-10-13T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-11-11T11:21:16+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.548-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.548-1.el5.i386"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:2024"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.548-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.548-1.el5.i386"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB15-25"
},
{
"cve": "CVE-2015-7645",
"discovery_date": "2015-10-14T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1271966"
}
],
"notes": [
{
"category": "description",
"text": "Adobe Flash Player 18.x through 18.0.0.252 and 19.x through 19.0.0.207 on Windows and OS X and 11.x through 11.2.202.535 on Linux allows remote attackers to execute arbitrary code via a crafted SWF file, as exploited in the wild in October 2015.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issue fixed in APSB15-27",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.548-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.548-1.el5.i386"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2015-7645"
},
{
"category": "external",
"summary": "RHBZ#1271966",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1271966"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2015-7645",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-7645"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2015-7645",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2015-7645"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsa15-05.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsa15-05.html"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb15-27.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb15-27.html"
},
{
"category": "external",
"summary": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog",
"url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
}
],
"release_date": "2015-10-14T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-11-11T11:21:16+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.548-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.548-1.el5.i386"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:2024"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.548-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.548-1.el5.i386"
]
}
],
"threats": [
{
"category": "exploit_status",
"date": "2022-03-03T00:00:00+00:00",
"details": "CISA: https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
},
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issue fixed in APSB15-27"
},
{
"cve": "CVE-2015-7647",
"discovery_date": "2015-10-14T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1271966"
}
],
"notes": [
{
"category": "description",
"text": "Adobe Flash Player before 18.0.0.255 and 19.x before 19.0.0.226 on Windows and OS X and before 11.2.202.540 on Linux allows attackers to execute arbitrary code by leveraging an unspecified \"type confusion,\" a different vulnerability than CVE-2015-7648.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issue fixed in APSB15-27",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.548-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.548-1.el5.i386"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2015-7647"
},
{
"category": "external",
"summary": "RHBZ#1271966",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1271966"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2015-7647",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-7647"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2015-7647",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2015-7647"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsa15-05.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsa15-05.html"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb15-27.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb15-27.html"
}
],
"release_date": "2015-10-14T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-11-11T11:21:16+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.548-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.548-1.el5.i386"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:2024"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.548-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.548-1.el5.i386"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issue fixed in APSB15-27"
},
{
"cve": "CVE-2015-7648",
"discovery_date": "2015-10-14T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1271966"
}
],
"notes": [
{
"category": "description",
"text": "Adobe Flash Player before 18.0.0.255 and 19.x before 19.0.0.226 on Windows and OS X and before 11.2.202.540 on Linux allows attackers to execute arbitrary code by leveraging an unspecified \"type confusion,\" a different vulnerability than CVE-2015-7647.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issue fixed in APSB15-27",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.548-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.548-1.el5.i386"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2015-7648"
},
{
"category": "external",
"summary": "RHBZ#1271966",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1271966"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2015-7648",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-7648"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2015-7648",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2015-7648"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsa15-05.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsa15-05.html"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb15-27.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb15-27.html"
}
],
"release_date": "2015-10-14T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-11-11T11:21:16+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.548-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.548-1.el5.i386"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:2024"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.548-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.548-1.el5.i386"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issue fixed in APSB15-27"
},
{
"cve": "CVE-2015-7651",
"discovery_date": "2015-11-10T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1280062"
}
],
"notes": [
{
"category": "description",
"text": "Use-after-free vulnerability in Adobe Flash Player before 18.0.0.261 and 19.x before 19.0.0.245 on Windows and OS X and before 11.2.202.548 on Linux, Adobe AIR before 19.0.0.241, Adobe AIR SDK before 19.0.0.241, and Adobe AIR SDK \u0026 Compiler before 19.0.0.241 allows attackers to execute arbitrary code via crafted DefineFunction atoms, a different vulnerability than CVE-2015-7652, CVE-2015-7653, CVE-2015-7654, CVE-2015-7655, CVE-2015-7656, CVE-2015-7657, CVE-2015-7658, CVE-2015-7660, CVE-2015-7661, CVE-2015-7663, CVE-2015-8042, CVE-2015-8043, CVE-2015-8044, and CVE-2015-8046.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB15-28",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.548-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.548-1.el5.i386"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2015-7651"
},
{
"category": "external",
"summary": "RHBZ#1280062",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1280062"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2015-7651",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-7651"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2015-7651",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2015-7651"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb15-28.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb15-28.html"
}
],
"release_date": "2015-11-10T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-11-11T11:21:16+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.548-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.548-1.el5.i386"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:2024"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.548-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.548-1.el5.i386"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB15-28"
},
{
"cve": "CVE-2015-7652",
"discovery_date": "2015-11-10T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1280062"
}
],
"notes": [
{
"category": "description",
"text": "Use-after-free vulnerability in Adobe Flash Player before 18.0.0.261 and 19.x before 19.0.0.245 on Windows and OS X and before 11.2.202.548 on Linux, Adobe AIR before 19.0.0.241, Adobe AIR SDK before 19.0.0.241, and Adobe AIR SDK \u0026 Compiler before 19.0.0.241 allows attackers to execute arbitrary code via a crafted gridFitType property value, a different vulnerability than CVE-2015-7651, CVE-2015-7653, CVE-2015-7654, CVE-2015-7655, CVE-2015-7656, CVE-2015-7657, CVE-2015-7658, CVE-2015-7660, CVE-2015-7661, CVE-2015-7663, CVE-2015-8042, CVE-2015-8043, CVE-2015-8044, and CVE-2015-8046.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB15-28",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.548-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.548-1.el5.i386"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2015-7652"
},
{
"category": "external",
"summary": "RHBZ#1280062",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1280062"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2015-7652",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-7652"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2015-7652",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2015-7652"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb15-28.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb15-28.html"
}
],
"release_date": "2015-11-10T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-11-11T11:21:16+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.548-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.548-1.el5.i386"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:2024"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.548-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.548-1.el5.i386"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB15-28"
},
{
"cve": "CVE-2015-7653",
"discovery_date": "2015-11-10T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1280062"
}
],
"notes": [
{
"category": "description",
"text": "Use-after-free vulnerability in Adobe Flash Player before 18.0.0.261 and 19.x before 19.0.0.245 on Windows and OS X and before 11.2.202.548 on Linux, Adobe AIR before 19.0.0.241, Adobe AIR SDK before 19.0.0.241, and Adobe AIR SDK \u0026 Compiler before 19.0.0.241 allows attackers to execute arbitrary code via crafted globalToLocal arguments, a different vulnerability than CVE-2015-7651, CVE-2015-7652, CVE-2015-7654, CVE-2015-7655, CVE-2015-7656, CVE-2015-7657, CVE-2015-7658, CVE-2015-7660, CVE-2015-7661, CVE-2015-7663, CVE-2015-8042, CVE-2015-8043, CVE-2015-8044, and CVE-2015-8046.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB15-28",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.548-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.548-1.el5.i386"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2015-7653"
},
{
"category": "external",
"summary": "RHBZ#1280062",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1280062"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2015-7653",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-7653"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2015-7653",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2015-7653"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb15-28.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb15-28.html"
}
],
"release_date": "2015-11-10T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-11-11T11:21:16+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.548-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.548-1.el5.i386"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:2024"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.548-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.548-1.el5.i386"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB15-28"
},
{
"cve": "CVE-2015-7654",
"discovery_date": "2015-11-10T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1280062"
}
],
"notes": [
{
"category": "description",
"text": "Use-after-free vulnerability in Adobe Flash Player before 18.0.0.261 and 19.x before 19.0.0.245 on Windows and OS X and before 11.2.202.548 on Linux, Adobe AIR before 19.0.0.241, Adobe AIR SDK before 19.0.0.241, and Adobe AIR SDK \u0026 Compiler before 19.0.0.241 allows attackers to execute arbitrary code via crafted attachSound arguments, a different vulnerability than CVE-2015-7651, CVE-2015-7652, CVE-2015-7653, CVE-2015-7655, CVE-2015-7656, CVE-2015-7657, CVE-2015-7658, CVE-2015-7660, CVE-2015-7661, CVE-2015-7663, CVE-2015-8042, CVE-2015-8043, CVE-2015-8044, and CVE-2015-8046.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB15-28",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.548-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.548-1.el5.i386"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2015-7654"
},
{
"category": "external",
"summary": "RHBZ#1280062",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1280062"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2015-7654",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-7654"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2015-7654",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2015-7654"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb15-28.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb15-28.html"
}
],
"release_date": "2015-11-10T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-11-11T11:21:16+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.548-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.548-1.el5.i386"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:2024"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.548-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.548-1.el5.i386"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB15-28"
},
{
"cve": "CVE-2015-7655",
"discovery_date": "2015-11-10T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1280062"
}
],
"notes": [
{
"category": "description",
"text": "Use-after-free vulnerability in Adobe Flash Player before 18.0.0.261 and 19.x before 19.0.0.245 on Windows and OS X and before 11.2.202.548 on Linux, Adobe AIR before 19.0.0.241, Adobe AIR SDK before 19.0.0.241, and Adobe AIR SDK \u0026 Compiler before 19.0.0.241 allows attackers to execute arbitrary code via crafted actionExtends arguments, a different vulnerability than CVE-2015-7651, CVE-2015-7652, CVE-2015-7653, CVE-2015-7654, CVE-2015-7656, CVE-2015-7657, CVE-2015-7658, CVE-2015-7660, CVE-2015-7661, CVE-2015-7663, CVE-2015-8042, CVE-2015-8043, CVE-2015-8044, and CVE-2015-8046.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB15-28",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.548-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.548-1.el5.i386"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2015-7655"
},
{
"category": "external",
"summary": "RHBZ#1280062",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1280062"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2015-7655",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-7655"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2015-7655",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2015-7655"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb15-28.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb15-28.html"
}
],
"release_date": "2015-11-10T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-11-11T11:21:16+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.548-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.548-1.el5.i386"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:2024"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.548-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.548-1.el5.i386"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB15-28"
},
{
"cve": "CVE-2015-7656",
"discovery_date": "2015-11-10T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1280062"
}
],
"notes": [
{
"category": "description",
"text": "Use-after-free vulnerability in Adobe Flash Player before 18.0.0.261 and 19.x before 19.0.0.245 on Windows and OS X and before 11.2.202.548 on Linux, Adobe AIR before 19.0.0.241, Adobe AIR SDK before 19.0.0.241, and Adobe AIR SDK \u0026 Compiler before 19.0.0.241 allows attackers to execute arbitrary code via crafted actionImplementsOp arguments, a different vulnerability than CVE-2015-7651, CVE-2015-7652, CVE-2015-7653, CVE-2015-7654, CVE-2015-7655, CVE-2015-7657, CVE-2015-7658, CVE-2015-7660, CVE-2015-7661, CVE-2015-7663, CVE-2015-8042, CVE-2015-8043, CVE-2015-8044, and CVE-2015-8046.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB15-28",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.548-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.548-1.el5.i386"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2015-7656"
},
{
"category": "external",
"summary": "RHBZ#1280062",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1280062"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2015-7656",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-7656"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2015-7656",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2015-7656"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb15-28.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb15-28.html"
}
],
"release_date": "2015-11-10T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-11-11T11:21:16+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.548-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.548-1.el5.i386"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:2024"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.548-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.548-1.el5.i386"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB15-28"
},
{
"cve": "CVE-2015-7657",
"discovery_date": "2015-11-10T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1280062"
}
],
"notes": [
{
"category": "description",
"text": "Use-after-free vulnerability in Adobe Flash Player before 18.0.0.261 and 19.x before 19.0.0.245 on Windows and OS X and before 11.2.202.548 on Linux, Adobe AIR before 19.0.0.241, Adobe AIR SDK before 19.0.0.241, and Adobe AIR SDK \u0026 Compiler before 19.0.0.241 allows attackers to execute arbitrary code via crafted actionCallMethod arguments, a different vulnerability than CVE-2015-7651, CVE-2015-7652, CVE-2015-7653, CVE-2015-7654, CVE-2015-7655, CVE-2015-7656, CVE-2015-7658, CVE-2015-7660, CVE-2015-7661, CVE-2015-7663, CVE-2015-8042, CVE-2015-8043, CVE-2015-8044, and CVE-2015-8046.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB15-28",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.548-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.548-1.el5.i386"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2015-7657"
},
{
"category": "external",
"summary": "RHBZ#1280062",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1280062"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2015-7657",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-7657"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2015-7657",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2015-7657"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb15-28.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb15-28.html"
}
],
"release_date": "2015-11-10T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-11-11T11:21:16+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.548-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.548-1.el5.i386"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:2024"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.548-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.548-1.el5.i386"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB15-28"
},
{
"cve": "CVE-2015-7658",
"discovery_date": "2015-11-10T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1280062"
}
],
"notes": [
{
"category": "description",
"text": "Use-after-free vulnerability in Adobe Flash Player before 18.0.0.261 and 19.x before 19.0.0.245 on Windows and OS X and before 11.2.202.548 on Linux, Adobe AIR before 19.0.0.241, Adobe AIR SDK before 19.0.0.241, and Adobe AIR SDK \u0026 Compiler before 19.0.0.241 allows attackers to execute arbitrary code via crafted actionInstanceOf arguments, a different vulnerability than CVE-2015-7651, CVE-2015-7652, CVE-2015-7653, CVE-2015-7654, CVE-2015-7655, CVE-2015-7656, CVE-2015-7657, CVE-2015-7660, CVE-2015-7661, CVE-2015-7663, CVE-2015-8042, CVE-2015-8043, CVE-2015-8044, and CVE-2015-8046.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB15-28",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.548-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.548-1.el5.i386"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2015-7658"
},
{
"category": "external",
"summary": "RHBZ#1280062",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1280062"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2015-7658",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-7658"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2015-7658",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2015-7658"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb15-28.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb15-28.html"
}
],
"release_date": "2015-11-10T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-11-11T11:21:16+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.548-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.548-1.el5.i386"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:2024"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.548-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.548-1.el5.i386"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB15-28"
},
{
"cve": "CVE-2015-7659",
"discovery_date": "2015-11-10T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1280062"
}
],
"notes": [
{
"category": "description",
"text": "Adobe Flash Player before 18.0.0.261 and 19.x before 19.0.0.245 on Windows and OS X and before 11.2.202.548 on Linux, Adobe AIR before 19.0.0.241, Adobe AIR SDK before 19.0.0.241, and Adobe AIR SDK \u0026 Compiler before 19.0.0.241 allow attackers to execute arbitrary code by leveraging an unspecified \"type confusion\" in the NetConnection object implementation.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB15-28",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.548-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.548-1.el5.i386"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2015-7659"
},
{
"category": "external",
"summary": "RHBZ#1280062",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1280062"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2015-7659",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-7659"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2015-7659",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2015-7659"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb15-28.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb15-28.html"
}
],
"release_date": "2015-11-10T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-11-11T11:21:16+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.548-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.548-1.el5.i386"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:2024"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.548-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.548-1.el5.i386"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB15-28"
},
{
"cve": "CVE-2015-7660",
"discovery_date": "2015-11-10T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1280062"
}
],
"notes": [
{
"category": "description",
"text": "Use-after-free vulnerability in Adobe Flash Player before 18.0.0.261 and 19.x before 19.0.0.245 on Windows and OS X and before 11.2.202.548 on Linux, Adobe AIR before 19.0.0.241, Adobe AIR SDK before 19.0.0.241, and Adobe AIR SDK \u0026 Compiler before 19.0.0.241 allows attackers to execute arbitrary code via crafted setMask arguments, a different vulnerability than CVE-2015-7651, CVE-2015-7652, CVE-2015-7653, CVE-2015-7654, CVE-2015-7655, CVE-2015-7656, CVE-2015-7657, CVE-2015-7658, CVE-2015-7661, CVE-2015-7663, CVE-2015-8042, CVE-2015-8043, CVE-2015-8044, and CVE-2015-8046.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB15-28",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.548-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.548-1.el5.i386"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2015-7660"
},
{
"category": "external",
"summary": "RHBZ#1280062",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1280062"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2015-7660",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-7660"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2015-7660",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2015-7660"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb15-28.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb15-28.html"
}
],
"release_date": "2015-11-10T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-11-11T11:21:16+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.548-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.548-1.el5.i386"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:2024"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.548-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.548-1.el5.i386"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB15-28"
},
{
"cve": "CVE-2015-7661",
"discovery_date": "2015-11-10T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1280062"
}
],
"notes": [
{
"category": "description",
"text": "Use-after-free vulnerability in Adobe Flash Player before 18.0.0.261 and 19.x before 19.0.0.245 on Windows and OS X and before 11.2.202.548 on Linux, Adobe AIR before 19.0.0.241, Adobe AIR SDK before 19.0.0.241, and Adobe AIR SDK \u0026 Compiler before 19.0.0.241 allows attackers to execute arbitrary code via a crafted getBounds call, a different vulnerability than CVE-2015-7651, CVE-2015-7652, CVE-2015-7653, CVE-2015-7654, CVE-2015-7655, CVE-2015-7656, CVE-2015-7657, CVE-2015-7658, CVE-2015-7660, CVE-2015-7663, CVE-2015-8042, CVE-2015-8043, CVE-2015-8044, and CVE-2015-8046.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB15-28",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.548-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.548-1.el5.i386"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2015-7661"
},
{
"category": "external",
"summary": "RHBZ#1280062",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1280062"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2015-7661",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-7661"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2015-7661",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2015-7661"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb15-28.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb15-28.html"
}
],
"release_date": "2015-11-10T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-11-11T11:21:16+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.548-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.548-1.el5.i386"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:2024"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.548-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.548-1.el5.i386"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB15-28"
},
{
"cve": "CVE-2015-7662",
"discovery_date": "2015-11-10T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1280062"
}
],
"notes": [
{
"category": "description",
"text": "Adobe Flash Player before 18.0.0.261 and 19.x before 19.0.0.245 on Windows and OS X and before 11.2.202.548 on Linux, Adobe AIR before 19.0.0.241, Adobe AIR SDK before 19.0.0.241, and Adobe AIR SDK \u0026 Compiler before 19.0.0.241 allow remote attackers to bypass intended access restrictions and write to files via unspecified vectors.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB15-28",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.548-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.548-1.el5.i386"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2015-7662"
},
{
"category": "external",
"summary": "RHBZ#1280062",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1280062"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2015-7662",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-7662"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2015-7662",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2015-7662"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb15-28.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb15-28.html"
}
],
"release_date": "2015-11-10T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-11-11T11:21:16+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.548-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.548-1.el5.i386"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:2024"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.548-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.548-1.el5.i386"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB15-28"
},
{
"cve": "CVE-2015-7663",
"discovery_date": "2015-11-10T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1280062"
}
],
"notes": [
{
"category": "description",
"text": "Use-after-free vulnerability in Adobe Flash Player before 18.0.0.261 and 19.x before 19.0.0.245 on Windows and OS X and before 11.2.202.548 on Linux, Adobe AIR before 19.0.0.241, Adobe AIR SDK before 19.0.0.241, and Adobe AIR SDK \u0026 Compiler before 19.0.0.241 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-7651, CVE-2015-7652, CVE-2015-7653, CVE-2015-7654, CVE-2015-7655, CVE-2015-7656, CVE-2015-7657, CVE-2015-7658, CVE-2015-7660, CVE-2015-7661, CVE-2015-8042, CVE-2015-8043, CVE-2015-8044, and CVE-2015-8046.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB15-28",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.548-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.548-1.el5.i386"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2015-7663"
},
{
"category": "external",
"summary": "RHBZ#1280062",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1280062"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2015-7663",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-7663"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2015-7663",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2015-7663"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb15-28.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb15-28.html"
}
],
"release_date": "2015-11-10T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-11-11T11:21:16+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.548-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.548-1.el5.i386"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:2024"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.548-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.548-1.el5.i386"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB15-28"
},
{
"cve": "CVE-2015-8042",
"discovery_date": "2015-11-10T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1280062"
}
],
"notes": [
{
"category": "description",
"text": "Use-after-free vulnerability in Adobe Flash Player before 18.0.0.261 and 19.x before 19.0.0.245 on Windows and OS X and before 11.2.202.548 on Linux, Adobe AIR before 19.0.0.241, Adobe AIR SDK before 19.0.0.241, and Adobe AIR SDK \u0026 Compiler before 19.0.0.241 allows attackers to execute arbitrary code via a crafted loadSound call, a different vulnerability than CVE-2015-7651, CVE-2015-7652, CVE-2015-7653, CVE-2015-7654, CVE-2015-7655, CVE-2015-7656, CVE-2015-7657, CVE-2015-7658, CVE-2015-7660, CVE-2015-7661, CVE-2015-7663, CVE-2015-8043, CVE-2015-8044, and CVE-2015-8046.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB15-28",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.548-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.548-1.el5.i386"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2015-8042"
},
{
"category": "external",
"summary": "RHBZ#1280062",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1280062"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2015-8042",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-8042"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2015-8042",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2015-8042"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb15-28.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb15-28.html"
}
],
"release_date": "2015-11-10T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-11-11T11:21:16+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.548-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.548-1.el5.i386"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:2024"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.548-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.548-1.el5.i386"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB15-28"
},
{
"cve": "CVE-2015-8043",
"discovery_date": "2015-11-10T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1280062"
}
],
"notes": [
{
"category": "description",
"text": "Use-after-free vulnerability in Adobe Flash Player before 18.0.0.261 and 19.x before 19.0.0.245 on Windows and OS X and before 11.2.202.548 on Linux, Adobe AIR before 19.0.0.241, Adobe AIR SDK before 19.0.0.241, and Adobe AIR SDK \u0026 Compiler before 19.0.0.241 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-7651, CVE-2015-7652, CVE-2015-7653, CVE-2015-7654, CVE-2015-7655, CVE-2015-7656, CVE-2015-7657, CVE-2015-7658, CVE-2015-7660, CVE-2015-7661, CVE-2015-7663, CVE-2015-8042, CVE-2015-8044, and CVE-2015-8046.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB15-28",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.548-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.548-1.el5.i386"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2015-8043"
},
{
"category": "external",
"summary": "RHBZ#1280062",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1280062"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2015-8043",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-8043"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2015-8043",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2015-8043"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb15-28.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb15-28.html"
}
],
"release_date": "2015-11-10T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-11-11T11:21:16+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.548-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.548-1.el5.i386"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:2024"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.548-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.548-1.el5.i386"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB15-28"
},
{
"cve": "CVE-2015-8044",
"discovery_date": "2015-11-10T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1280062"
}
],
"notes": [
{
"category": "description",
"text": "Use-after-free vulnerability in Adobe Flash Player before 18.0.0.261 and 19.x before 19.0.0.245 on Windows and OS X and before 11.2.202.548 on Linux, Adobe AIR before 19.0.0.241, Adobe AIR SDK before 19.0.0.241, and Adobe AIR SDK \u0026 Compiler before 19.0.0.241 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-7651, CVE-2015-7652, CVE-2015-7653, CVE-2015-7654, CVE-2015-7655, CVE-2015-7656, CVE-2015-7657, CVE-2015-7658, CVE-2015-7660, CVE-2015-7661, CVE-2015-7663, CVE-2015-8042, CVE-2015-8043, and CVE-2015-8046.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB15-28",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.548-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.548-1.el5.i386"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2015-8044"
},
{
"category": "external",
"summary": "RHBZ#1280062",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1280062"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2015-8044",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-8044"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2015-8044",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2015-8044"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb15-28.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb15-28.html"
}
],
"release_date": "2015-11-10T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-11-11T11:21:16+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.548-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.548-1.el5.i386"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:2024"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.548-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.548-1.el5.i386"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB15-28"
},
{
"cve": "CVE-2015-8046",
"discovery_date": "2015-11-10T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1280062"
}
],
"notes": [
{
"category": "description",
"text": "Use-after-free vulnerability in Adobe Flash Player before 18.0.0.261 and 19.x before 19.0.0.245 on Windows and OS X and before 11.2.202.548 on Linux, Adobe AIR before 19.0.0.241, Adobe AIR SDK before 19.0.0.241, and Adobe AIR SDK \u0026 Compiler before 19.0.0.241 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-7651, CVE-2015-7652, CVE-2015-7653, CVE-2015-7654, CVE-2015-7655, CVE-2015-7656, CVE-2015-7657, CVE-2015-7658, CVE-2015-7660, CVE-2015-7661, CVE-2015-7663, CVE-2015-8042, CVE-2015-8043, and CVE-2015-8044.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB15-28",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.548-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.548-1.el5.i386"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2015-8046"
},
{
"category": "external",
"summary": "RHBZ#1280062",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1280062"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2015-8046",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-8046"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2015-8046",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2015-8046"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb15-28.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb15-28.html"
}
],
"release_date": "2015-11-10T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-11-11T11:21:16+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.548-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.548-1.el5.i386"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:2024"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.548-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.548-1.el5.i386"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB15-28"
}
]
}
RHSA-2015_1893
Vulnerability from csaf_redhat - Published: 2015-10-15 11:17 - Updated: 2024-11-14 17:17Adobe Flash Player before 18.0.0.252 and 19.x before 19.0.0.207 on Windows and OS X and before 11.2.202.535 on Linux, Adobe AIR before 19.0.0.213, Adobe AIR SDK before 19.0.0.213, and Adobe AIR SDK & Compiler before 19.0.0.213 improperly implement the Flash broker API, which has unspecified impact and attack vectors.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686 | — |
Vendor Fix
fix
|
Adobe Flash Player before 18.0.0.252 and 19.x before 19.0.0.207 on Windows and OS X and before 11.2.202.535 on Linux, Adobe AIR before 19.0.0.213, Adobe AIR SDK before 19.0.0.213, and Adobe AIR SDK & Compiler before 19.0.0.213 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-7626, CVE-2015-7627, CVE-2015-7630, CVE-2015-7633, and CVE-2015-7634.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686 | — |
Vendor Fix
fix
|
Adobe Flash Player before 18.0.0.252 and 19.x before 19.0.0.207 on Windows and OS X and before 11.2.202.535 on Linux, Adobe AIR before 19.0.0.213, Adobe AIR SDK before 19.0.0.213, and Adobe AIR SDK & Compiler before 19.0.0.213 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-7625, CVE-2015-7627, CVE-2015-7630, CVE-2015-7633, and CVE-2015-7634.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686 | — |
Vendor Fix
fix
|
Adobe Flash Player before 18.0.0.252 and 19.x before 19.0.0.207 on Windows and OS X and before 11.2.202.535 on Linux, Adobe AIR before 19.0.0.213, Adobe AIR SDK before 19.0.0.213, and Adobe AIR SDK & Compiler before 19.0.0.213 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-7625, CVE-2015-7626, CVE-2015-7630, CVE-2015-7633, and CVE-2015-7634.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686 | — |
Vendor Fix
fix
|
Adobe Flash Player before 18.0.0.252 and 19.x before 19.0.0.207 on Windows and OS X and before 11.2.202.535 on Linux, Adobe AIR before 19.0.0.213, Adobe AIR SDK before 19.0.0.213, and Adobe AIR SDK & Compiler before 19.0.0.213 allow remote attackers to bypass the Same Origin Policy and obtain sensitive information via unspecified vectors.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686 | — |
Vendor Fix
fix
|
Use-after-free vulnerability in Adobe Flash Player before 18.0.0.252 and 19.x before 19.0.0.207 on Windows and OS X and before 11.2.202.535 on Linux, Adobe AIR before 19.0.0.213, Adobe AIR SDK before 19.0.0.213, and Adobe AIR SDK & Compiler before 19.0.0.213 allows attackers to execute arbitrary code via a TextFormat object with a crafted tabStops property, a different vulnerability than CVE-2015-7631, CVE-2015-7643, and CVE-2015-7644.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686 | — |
Vendor Fix
fix
|
Adobe Flash Player before 18.0.0.252 and 19.x before 19.0.0.207 on Windows and OS X and before 11.2.202.535 on Linux, Adobe AIR before 19.0.0.213, Adobe AIR SDK before 19.0.0.213, and Adobe AIR SDK & Compiler before 19.0.0.213 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-7625, CVE-2015-7626, CVE-2015-7627, CVE-2015-7633, and CVE-2015-7634.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686 | — |
Vendor Fix
fix
|
Use-after-free vulnerability in Adobe Flash Player before 18.0.0.252 and 19.x before 19.0.0.207 on Windows and OS X and before 11.2.202.535 on Linux, Adobe AIR before 19.0.0.213, Adobe AIR SDK before 19.0.0.213, and Adobe AIR SDK & Compiler before 19.0.0.213 allows attackers to execute arbitrary code via a TextLine object with a crafted validity property, a different vulnerability than CVE-2015-7629, CVE-2015-7643, and CVE-2015-7644.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686 | — |
Vendor Fix
fix
|
Buffer overflow in Adobe Flash Player before 18.0.0.252 and 19.x before 19.0.0.207 on Windows and OS X and before 11.2.202.535 on Linux, Adobe AIR before 19.0.0.213, Adobe AIR SDK before 19.0.0.213, and Adobe AIR SDK & Compiler before 19.0.0.213 allows attackers to execute arbitrary code via a Loader object with a crafted loaderBytes property.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686 | — |
Vendor Fix
fix
|
Adobe Flash Player before 18.0.0.252 and 19.x before 19.0.0.207 on Windows and OS X and before 11.2.202.535 on Linux, Adobe AIR before 19.0.0.213, Adobe AIR SDK before 19.0.0.213, and Adobe AIR SDK & Compiler before 19.0.0.213 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-7625, CVE-2015-7626, CVE-2015-7627, CVE-2015-7630, and CVE-2015-7634.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686 | — |
Vendor Fix
fix
|
Adobe Flash Player before 18.0.0.252 and 19.x before 19.0.0.207 on Windows and OS X and before 11.2.202.535 on Linux, Adobe AIR before 19.0.0.213, Adobe AIR SDK before 19.0.0.213, and Adobe AIR SDK & Compiler before 19.0.0.213 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-7625, CVE-2015-7626, CVE-2015-7627, CVE-2015-7630, and CVE-2015-7633.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686 | — |
Vendor Fix
fix
|
Use-after-free vulnerability in Adobe Flash Player before 18.0.0.252 and 19.x before 19.0.0.207 on Windows and OS X and before 11.2.202.535 on Linux, Adobe AIR before 19.0.0.213, Adobe AIR SDK before 19.0.0.213, and Adobe AIR SDK & Compiler before 19.0.0.213 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-7629, CVE-2015-7631, CVE-2015-7636, CVE-2015-7637, CVE-2015-7638, CVE-2015-7639, CVE-2015-7640, CVE-2015-7641, CVE-2015-7642, CVE-2015-7643, and CVE-2015-7644.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686 | — |
Vendor Fix
fix
|
Use-after-free vulnerability in Adobe Flash Player before 18.0.0.252 and 19.x before 19.0.0.207 on Windows and OS X and before 11.2.202.535 on Linux, Adobe AIR before 19.0.0.213, Adobe AIR SDK before 19.0.0.213, and Adobe AIR SDK & Compiler before 19.0.0.213 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-7629, CVE-2015-7631, CVE-2015-7635, CVE-2015-7637, CVE-2015-7638, CVE-2015-7639, CVE-2015-7640, CVE-2015-7641, CVE-2015-7642, CVE-2015-7643, and CVE-2015-7644.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686 | — |
Vendor Fix
fix
|
Use-after-free vulnerability in Adobe Flash Player before 18.0.0.252 and 19.x before 19.0.0.207 on Windows and OS X and before 11.2.202.535 on Linux, Adobe AIR before 19.0.0.213, Adobe AIR SDK before 19.0.0.213, and Adobe AIR SDK & Compiler before 19.0.0.213 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-7629, CVE-2015-7631, CVE-2015-7635, CVE-2015-7636, CVE-2015-7638, CVE-2015-7639, CVE-2015-7640, CVE-2015-7641, CVE-2015-7642, CVE-2015-7643, and CVE-2015-7644.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686 | — |
Vendor Fix
fix
|
Use-after-free vulnerability in Adobe Flash Player before 18.0.0.252 and 19.x before 19.0.0.207 on Windows and OS X and before 11.2.202.535 on Linux, Adobe AIR before 19.0.0.213, Adobe AIR SDK before 19.0.0.213, and Adobe AIR SDK & Compiler before 19.0.0.213 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-7629, CVE-2015-7631, CVE-2015-7635, CVE-2015-7636, CVE-2015-7637, CVE-2015-7639, CVE-2015-7640, CVE-2015-7641, CVE-2015-7642, CVE-2015-7643, and CVE-2015-7644.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686 | — |
Vendor Fix
fix
|
Use-after-free vulnerability in Adobe Flash Player before 18.0.0.252 and 19.x before 19.0.0.207 on Windows and OS X and before 11.2.202.535 on Linux, Adobe AIR before 19.0.0.213, Adobe AIR SDK before 19.0.0.213, and Adobe AIR SDK & Compiler before 19.0.0.213 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-7629, CVE-2015-7631, CVE-2015-7635, CVE-2015-7636, CVE-2015-7637, CVE-2015-7638, CVE-2015-7640, CVE-2015-7641, CVE-2015-7642, CVE-2015-7643, and CVE-2015-7644.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686 | — |
Vendor Fix
fix
|
Use-after-free vulnerability in Adobe Flash Player before 18.0.0.252 and 19.x before 19.0.0.207 on Windows and OS X and before 11.2.202.535 on Linux, Adobe AIR before 19.0.0.213, Adobe AIR SDK before 19.0.0.213, and Adobe AIR SDK & Compiler before 19.0.0.213 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-7629, CVE-2015-7631, CVE-2015-7635, CVE-2015-7636, CVE-2015-7637, CVE-2015-7638, CVE-2015-7639, CVE-2015-7641, CVE-2015-7642, CVE-2015-7643, and CVE-2015-7644.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686 | — |
Vendor Fix
fix
|
Use-after-free vulnerability in Adobe Flash Player before 18.0.0.252 and 19.x before 19.0.0.207 on Windows and OS X and before 11.2.202.535 on Linux, Adobe AIR before 19.0.0.213, Adobe AIR SDK before 19.0.0.213, and Adobe AIR SDK & Compiler before 19.0.0.213 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-7629, CVE-2015-7631, CVE-2015-7635, CVE-2015-7636, CVE-2015-7637, CVE-2015-7638, CVE-2015-7639, CVE-2015-7640, CVE-2015-7642, CVE-2015-7643, and CVE-2015-7644.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686 | — |
Vendor Fix
fix
|
Use-after-free vulnerability in Adobe Flash Player before 18.0.0.252 and 19.x before 19.0.0.207 on Windows and OS X and before 11.2.202.535 on Linux, Adobe AIR before 19.0.0.213, Adobe AIR SDK before 19.0.0.213, and Adobe AIR SDK & Compiler before 19.0.0.213 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-7629, CVE-2015-7631, CVE-2015-7635, CVE-2015-7636, CVE-2015-7637, CVE-2015-7638, CVE-2015-7639, CVE-2015-7640, CVE-2015-7641, CVE-2015-7643, and CVE-2015-7644.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686 | — |
Vendor Fix
fix
|
Use-after-free vulnerability in Adobe Flash Player before 18.0.0.252 and 19.x before 19.0.0.207 on Windows and OS X and before 11.2.202.535 on Linux, Adobe AIR before 19.0.0.213, Adobe AIR SDK before 19.0.0.213, and Adobe AIR SDK & Compiler before 19.0.0.213 allows attackers to execute arbitrary code via a Video object with a crafted deblocking property, a different vulnerability than CVE-2015-7629, CVE-2015-7631, and CVE-2015-7644.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686 | — |
Vendor Fix
fix
|
Use-after-free vulnerability in Adobe Flash Player before 18.0.0.252 and 19.x before 19.0.0.207 on Windows and OS X and before 11.2.202.535 on Linux, Adobe AIR before 19.0.0.213, Adobe AIR SDK before 19.0.0.213, and Adobe AIR SDK & Compiler before 19.0.0.213 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-7629, CVE-2015-7631, and CVE-2015-7643.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686 | — |
Vendor Fix
fix
|
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Critical"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An updated Adobe Flash Player package that fixes multiple security issues\nis now available for Red Hat Enterprise Linux 6 Supplementary.\n\nRed Hat Product Security has rated this update as having Critical security\nimpact. Common Vulnerability Scoring System (CVSS) base scores, which give\ndetailed severity ratings, are available for each vulnerability from the\nCVE links in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "The flash-plugin package contains a Mozilla Firefox compatible Adobe Flash\nPlayer web browser plug-in.\n\nThis update fixes multiple vulnerabilities in Adobe Flash Player. These\nvulnerabilities, detailed in the Adobe Security Bulletin APSB15-25 listed\nin the References section, could allow an attacker to create a specially\ncrafted SWF file that would cause flash-plugin to crash, execute arbitrary\ncode, or disclose sensitive information when the victim loaded a page\ncontaining the malicious SWF content. (CVE-2015-5569, CVE-2015-7625,\nCVE-2015-7626, CVE-2015-7627, CVE-2015-7628, CVE-2015-7629, CVE-2015-7630,\nCVE-2015-7631, CVE-2015-7632, CVE-2015-7633, CVE-2015-7634, CVE-2015-7643,\nCVE-2015-7644)\n\nAll users of Adobe Flash Player should install this updated package, which\nupgrades Flash Player to version 11.2.202.535.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2015:1893",
"url": "https://access.redhat.com/errata/RHSA-2015:1893"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#critical",
"url": "https://access.redhat.com/security/updates/classification/#critical"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb15-25.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb15-25.html"
},
{
"category": "external",
"summary": "1271383",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1271383"
},
{
"category": "external",
"summary": "1271388",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1271388"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2015/rhsa-2015_1893.json"
}
],
"title": "Red Hat Security Advisory: flash-plugin security update",
"tracking": {
"current_release_date": "2024-11-14T17:17:33+00:00",
"generator": {
"date": "2024-11-14T17:17:33+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.2.0"
}
},
"id": "RHSA-2015:1893",
"initial_release_date": "2015-10-15T11:17:22+00:00",
"revision_history": [
{
"date": "2015-10-15T11:17:22+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2015-10-15T11:17:22+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2024-11-14T17:17:33+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Desktop Supplementary (v. 6)",
"product": {
"name": "Red Hat Enterprise Linux Desktop Supplementary (v. 6)",
"product_id": "6Client-Supplementary-6.7.z",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_extras:6"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Server Supplementary (v. 6)",
"product": {
"name": "Red Hat Enterprise Linux Server Supplementary (v. 6)",
"product_id": "6Server-Supplementary-6.7.z",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_extras:6"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Workstation Supplementary (v. 6)",
"product": {
"name": "Red Hat Enterprise Linux Workstation Supplementary (v. 6)",
"product_id": "6Workstation-Supplementary-6.7.z",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_extras:6"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux Supplementary"
},
{
"branches": [
{
"category": "product_version",
"name": "flash-plugin-0:11.2.202.535-1.el6_7.i686",
"product": {
"name": "flash-plugin-0:11.2.202.535-1.el6_7.i686",
"product_id": "flash-plugin-0:11.2.202.535-1.el6_7.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/flash-plugin@11.2.202.535-1.el6_7?arch=i686"
}
}
}
],
"category": "architecture",
"name": "i686"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "flash-plugin-0:11.2.202.535-1.el6_7.i686 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)",
"product_id": "6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686"
},
"product_reference": "flash-plugin-0:11.2.202.535-1.el6_7.i686",
"relates_to_product_reference": "6Client-Supplementary-6.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "flash-plugin-0:11.2.202.535-1.el6_7.i686 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)",
"product_id": "6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686"
},
"product_reference": "flash-plugin-0:11.2.202.535-1.el6_7.i686",
"relates_to_product_reference": "6Server-Supplementary-6.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "flash-plugin-0:11.2.202.535-1.el6_7.i686 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)",
"product_id": "6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686"
},
"product_reference": "flash-plugin-0:11.2.202.535-1.el6_7.i686",
"relates_to_product_reference": "6Workstation-Supplementary-6.7.z"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2015-5569",
"discovery_date": "2015-10-13T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1271388"
}
],
"notes": [
{
"category": "description",
"text": "Adobe Flash Player before 18.0.0.252 and 19.x before 19.0.0.207 on Windows and OS X and before 11.2.202.535 on Linux, Adobe AIR before 19.0.0.213, Adobe AIR SDK before 19.0.0.213, and Adobe AIR SDK \u0026 Compiler before 19.0.0.213 improperly implement the Flash broker API, which has unspecified impact and attack vectors.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: information leak and hardening fixes in APSB15-25",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2015-5569"
},
{
"category": "external",
"summary": "RHBZ#1271388",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1271388"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2015-5569",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-5569"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2015-5569",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2015-5569"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb15-25.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb15-25.html"
}
],
"release_date": "2015-10-13T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-10-15T11:17:22+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:1893"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 4.3,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:N/A:N",
"version": "2.0"
},
"products": [
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "flash-plugin: information leak and hardening fixes in APSB15-25"
},
{
"cve": "CVE-2015-7625",
"discovery_date": "2015-10-13T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1271383"
}
],
"notes": [
{
"category": "description",
"text": "Adobe Flash Player before 18.0.0.252 and 19.x before 19.0.0.207 on Windows and OS X and before 11.2.202.535 on Linux, Adobe AIR before 19.0.0.213, Adobe AIR SDK before 19.0.0.213, and Adobe AIR SDK \u0026 Compiler before 19.0.0.213 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-7626, CVE-2015-7627, CVE-2015-7630, CVE-2015-7633, and CVE-2015-7634.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB15-25",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2015-7625"
},
{
"category": "external",
"summary": "RHBZ#1271383",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1271383"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2015-7625",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-7625"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2015-7625",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2015-7625"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb15-25.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb15-25.html"
}
],
"release_date": "2015-10-13T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-10-15T11:17:22+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:1893"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB15-25"
},
{
"cve": "CVE-2015-7626",
"discovery_date": "2015-10-13T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1271383"
}
],
"notes": [
{
"category": "description",
"text": "Adobe Flash Player before 18.0.0.252 and 19.x before 19.0.0.207 on Windows and OS X and before 11.2.202.535 on Linux, Adobe AIR before 19.0.0.213, Adobe AIR SDK before 19.0.0.213, and Adobe AIR SDK \u0026 Compiler before 19.0.0.213 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-7625, CVE-2015-7627, CVE-2015-7630, CVE-2015-7633, and CVE-2015-7634.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB15-25",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2015-7626"
},
{
"category": "external",
"summary": "RHBZ#1271383",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1271383"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2015-7626",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-7626"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2015-7626",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2015-7626"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb15-25.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb15-25.html"
}
],
"release_date": "2015-10-13T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-10-15T11:17:22+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:1893"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB15-25"
},
{
"cve": "CVE-2015-7627",
"discovery_date": "2015-10-13T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1271383"
}
],
"notes": [
{
"category": "description",
"text": "Adobe Flash Player before 18.0.0.252 and 19.x before 19.0.0.207 on Windows and OS X and before 11.2.202.535 on Linux, Adobe AIR before 19.0.0.213, Adobe AIR SDK before 19.0.0.213, and Adobe AIR SDK \u0026 Compiler before 19.0.0.213 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-7625, CVE-2015-7626, CVE-2015-7630, CVE-2015-7633, and CVE-2015-7634.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB15-25",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2015-7627"
},
{
"category": "external",
"summary": "RHBZ#1271383",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1271383"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2015-7627",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-7627"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2015-7627",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2015-7627"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb15-25.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb15-25.html"
}
],
"release_date": "2015-10-13T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-10-15T11:17:22+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:1893"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB15-25"
},
{
"cve": "CVE-2015-7628",
"discovery_date": "2015-10-13T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1271388"
}
],
"notes": [
{
"category": "description",
"text": "Adobe Flash Player before 18.0.0.252 and 19.x before 19.0.0.207 on Windows and OS X and before 11.2.202.535 on Linux, Adobe AIR before 19.0.0.213, Adobe AIR SDK before 19.0.0.213, and Adobe AIR SDK \u0026 Compiler before 19.0.0.213 allow remote attackers to bypass the Same Origin Policy and obtain sensitive information via unspecified vectors.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: information leak and hardening fixes in APSB15-25",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2015-7628"
},
{
"category": "external",
"summary": "RHBZ#1271388",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1271388"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2015-7628",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-7628"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2015-7628",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2015-7628"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb15-25.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb15-25.html"
}
],
"release_date": "2015-10-13T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-10-15T11:17:22+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:1893"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 4.3,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:N/A:N",
"version": "2.0"
},
"products": [
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "flash-plugin: information leak and hardening fixes in APSB15-25"
},
{
"cve": "CVE-2015-7629",
"discovery_date": "2015-10-13T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1271383"
}
],
"notes": [
{
"category": "description",
"text": "Use-after-free vulnerability in Adobe Flash Player before 18.0.0.252 and 19.x before 19.0.0.207 on Windows and OS X and before 11.2.202.535 on Linux, Adobe AIR before 19.0.0.213, Adobe AIR SDK before 19.0.0.213, and Adobe AIR SDK \u0026 Compiler before 19.0.0.213 allows attackers to execute arbitrary code via a TextFormat object with a crafted tabStops property, a different vulnerability than CVE-2015-7631, CVE-2015-7643, and CVE-2015-7644.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB15-25",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2015-7629"
},
{
"category": "external",
"summary": "RHBZ#1271383",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1271383"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2015-7629",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-7629"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2015-7629",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2015-7629"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb15-25.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb15-25.html"
}
],
"release_date": "2015-10-13T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-10-15T11:17:22+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:1893"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB15-25"
},
{
"cve": "CVE-2015-7630",
"discovery_date": "2015-10-13T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1271383"
}
],
"notes": [
{
"category": "description",
"text": "Adobe Flash Player before 18.0.0.252 and 19.x before 19.0.0.207 on Windows and OS X and before 11.2.202.535 on Linux, Adobe AIR before 19.0.0.213, Adobe AIR SDK before 19.0.0.213, and Adobe AIR SDK \u0026 Compiler before 19.0.0.213 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-7625, CVE-2015-7626, CVE-2015-7627, CVE-2015-7633, and CVE-2015-7634.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB15-25",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2015-7630"
},
{
"category": "external",
"summary": "RHBZ#1271383",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1271383"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2015-7630",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-7630"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2015-7630",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2015-7630"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb15-25.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb15-25.html"
}
],
"release_date": "2015-10-13T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-10-15T11:17:22+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:1893"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB15-25"
},
{
"cve": "CVE-2015-7631",
"discovery_date": "2015-10-13T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1271383"
}
],
"notes": [
{
"category": "description",
"text": "Use-after-free vulnerability in Adobe Flash Player before 18.0.0.252 and 19.x before 19.0.0.207 on Windows and OS X and before 11.2.202.535 on Linux, Adobe AIR before 19.0.0.213, Adobe AIR SDK before 19.0.0.213, and Adobe AIR SDK \u0026 Compiler before 19.0.0.213 allows attackers to execute arbitrary code via a TextLine object with a crafted validity property, a different vulnerability than CVE-2015-7629, CVE-2015-7643, and CVE-2015-7644.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB15-25",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2015-7631"
},
{
"category": "external",
"summary": "RHBZ#1271383",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1271383"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2015-7631",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-7631"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2015-7631",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2015-7631"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb15-25.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb15-25.html"
}
],
"release_date": "2015-10-13T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-10-15T11:17:22+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:1893"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB15-25"
},
{
"cve": "CVE-2015-7632",
"discovery_date": "2015-10-13T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1271383"
}
],
"notes": [
{
"category": "description",
"text": "Buffer overflow in Adobe Flash Player before 18.0.0.252 and 19.x before 19.0.0.207 on Windows and OS X and before 11.2.202.535 on Linux, Adobe AIR before 19.0.0.213, Adobe AIR SDK before 19.0.0.213, and Adobe AIR SDK \u0026 Compiler before 19.0.0.213 allows attackers to execute arbitrary code via a Loader object with a crafted loaderBytes property.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB15-25",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2015-7632"
},
{
"category": "external",
"summary": "RHBZ#1271383",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1271383"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2015-7632",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-7632"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2015-7632",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2015-7632"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb15-25.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb15-25.html"
}
],
"release_date": "2015-10-13T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-10-15T11:17:22+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:1893"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB15-25"
},
{
"cve": "CVE-2015-7633",
"discovery_date": "2015-10-13T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1271383"
}
],
"notes": [
{
"category": "description",
"text": "Adobe Flash Player before 18.0.0.252 and 19.x before 19.0.0.207 on Windows and OS X and before 11.2.202.535 on Linux, Adobe AIR before 19.0.0.213, Adobe AIR SDK before 19.0.0.213, and Adobe AIR SDK \u0026 Compiler before 19.0.0.213 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-7625, CVE-2015-7626, CVE-2015-7627, CVE-2015-7630, and CVE-2015-7634.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB15-25",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2015-7633"
},
{
"category": "external",
"summary": "RHBZ#1271383",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1271383"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2015-7633",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-7633"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2015-7633",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2015-7633"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb15-25.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb15-25.html"
}
],
"release_date": "2015-10-13T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-10-15T11:17:22+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:1893"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB15-25"
},
{
"cve": "CVE-2015-7634",
"discovery_date": "2015-10-13T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1271383"
}
],
"notes": [
{
"category": "description",
"text": "Adobe Flash Player before 18.0.0.252 and 19.x before 19.0.0.207 on Windows and OS X and before 11.2.202.535 on Linux, Adobe AIR before 19.0.0.213, Adobe AIR SDK before 19.0.0.213, and Adobe AIR SDK \u0026 Compiler before 19.0.0.213 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-7625, CVE-2015-7626, CVE-2015-7627, CVE-2015-7630, and CVE-2015-7633.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB15-25",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2015-7634"
},
{
"category": "external",
"summary": "RHBZ#1271383",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1271383"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2015-7634",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-7634"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2015-7634",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2015-7634"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb15-25.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb15-25.html"
}
],
"release_date": "2015-10-13T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-10-15T11:17:22+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:1893"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB15-25"
},
{
"cve": "CVE-2015-7635",
"discovery_date": "2015-10-13T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1271383"
}
],
"notes": [
{
"category": "description",
"text": "Use-after-free vulnerability in Adobe Flash Player before 18.0.0.252 and 19.x before 19.0.0.207 on Windows and OS X and before 11.2.202.535 on Linux, Adobe AIR before 19.0.0.213, Adobe AIR SDK before 19.0.0.213, and Adobe AIR SDK \u0026 Compiler before 19.0.0.213 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-7629, CVE-2015-7631, CVE-2015-7636, CVE-2015-7637, CVE-2015-7638, CVE-2015-7639, CVE-2015-7640, CVE-2015-7641, CVE-2015-7642, CVE-2015-7643, and CVE-2015-7644.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB15-25",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2015-7635"
},
{
"category": "external",
"summary": "RHBZ#1271383",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1271383"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2015-7635",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-7635"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2015-7635",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2015-7635"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb15-25.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb15-25.html"
}
],
"release_date": "2015-10-13T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-10-15T11:17:22+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:1893"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB15-25"
},
{
"cve": "CVE-2015-7636",
"discovery_date": "2015-10-13T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1271383"
}
],
"notes": [
{
"category": "description",
"text": "Use-after-free vulnerability in Adobe Flash Player before 18.0.0.252 and 19.x before 19.0.0.207 on Windows and OS X and before 11.2.202.535 on Linux, Adobe AIR before 19.0.0.213, Adobe AIR SDK before 19.0.0.213, and Adobe AIR SDK \u0026 Compiler before 19.0.0.213 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-7629, CVE-2015-7631, CVE-2015-7635, CVE-2015-7637, CVE-2015-7638, CVE-2015-7639, CVE-2015-7640, CVE-2015-7641, CVE-2015-7642, CVE-2015-7643, and CVE-2015-7644.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB15-25",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2015-7636"
},
{
"category": "external",
"summary": "RHBZ#1271383",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1271383"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2015-7636",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-7636"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2015-7636",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2015-7636"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb15-25.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb15-25.html"
}
],
"release_date": "2015-10-13T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-10-15T11:17:22+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:1893"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB15-25"
},
{
"cve": "CVE-2015-7637",
"discovery_date": "2015-10-13T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1271383"
}
],
"notes": [
{
"category": "description",
"text": "Use-after-free vulnerability in Adobe Flash Player before 18.0.0.252 and 19.x before 19.0.0.207 on Windows and OS X and before 11.2.202.535 on Linux, Adobe AIR before 19.0.0.213, Adobe AIR SDK before 19.0.0.213, and Adobe AIR SDK \u0026 Compiler before 19.0.0.213 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-7629, CVE-2015-7631, CVE-2015-7635, CVE-2015-7636, CVE-2015-7638, CVE-2015-7639, CVE-2015-7640, CVE-2015-7641, CVE-2015-7642, CVE-2015-7643, and CVE-2015-7644.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB15-25",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2015-7637"
},
{
"category": "external",
"summary": "RHBZ#1271383",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1271383"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2015-7637",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-7637"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2015-7637",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2015-7637"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb15-25.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb15-25.html"
}
],
"release_date": "2015-10-13T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-10-15T11:17:22+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:1893"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB15-25"
},
{
"cve": "CVE-2015-7638",
"discovery_date": "2015-10-13T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1271383"
}
],
"notes": [
{
"category": "description",
"text": "Use-after-free vulnerability in Adobe Flash Player before 18.0.0.252 and 19.x before 19.0.0.207 on Windows and OS X and before 11.2.202.535 on Linux, Adobe AIR before 19.0.0.213, Adobe AIR SDK before 19.0.0.213, and Adobe AIR SDK \u0026 Compiler before 19.0.0.213 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-7629, CVE-2015-7631, CVE-2015-7635, CVE-2015-7636, CVE-2015-7637, CVE-2015-7639, CVE-2015-7640, CVE-2015-7641, CVE-2015-7642, CVE-2015-7643, and CVE-2015-7644.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB15-25",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2015-7638"
},
{
"category": "external",
"summary": "RHBZ#1271383",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1271383"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2015-7638",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-7638"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2015-7638",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2015-7638"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb15-25.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb15-25.html"
}
],
"release_date": "2015-10-13T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-10-15T11:17:22+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:1893"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB15-25"
},
{
"cve": "CVE-2015-7639",
"discovery_date": "2015-10-13T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1271383"
}
],
"notes": [
{
"category": "description",
"text": "Use-after-free vulnerability in Adobe Flash Player before 18.0.0.252 and 19.x before 19.0.0.207 on Windows and OS X and before 11.2.202.535 on Linux, Adobe AIR before 19.0.0.213, Adobe AIR SDK before 19.0.0.213, and Adobe AIR SDK \u0026 Compiler before 19.0.0.213 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-7629, CVE-2015-7631, CVE-2015-7635, CVE-2015-7636, CVE-2015-7637, CVE-2015-7638, CVE-2015-7640, CVE-2015-7641, CVE-2015-7642, CVE-2015-7643, and CVE-2015-7644.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB15-25",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2015-7639"
},
{
"category": "external",
"summary": "RHBZ#1271383",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1271383"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2015-7639",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-7639"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2015-7639",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2015-7639"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb15-25.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb15-25.html"
}
],
"release_date": "2015-10-13T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-10-15T11:17:22+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:1893"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB15-25"
},
{
"cve": "CVE-2015-7640",
"discovery_date": "2015-10-13T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1271383"
}
],
"notes": [
{
"category": "description",
"text": "Use-after-free vulnerability in Adobe Flash Player before 18.0.0.252 and 19.x before 19.0.0.207 on Windows and OS X and before 11.2.202.535 on Linux, Adobe AIR before 19.0.0.213, Adobe AIR SDK before 19.0.0.213, and Adobe AIR SDK \u0026 Compiler before 19.0.0.213 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-7629, CVE-2015-7631, CVE-2015-7635, CVE-2015-7636, CVE-2015-7637, CVE-2015-7638, CVE-2015-7639, CVE-2015-7641, CVE-2015-7642, CVE-2015-7643, and CVE-2015-7644.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB15-25",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2015-7640"
},
{
"category": "external",
"summary": "RHBZ#1271383",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1271383"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2015-7640",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-7640"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2015-7640",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2015-7640"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb15-25.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb15-25.html"
}
],
"release_date": "2015-10-13T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-10-15T11:17:22+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:1893"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB15-25"
},
{
"cve": "CVE-2015-7641",
"discovery_date": "2015-10-13T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1271383"
}
],
"notes": [
{
"category": "description",
"text": "Use-after-free vulnerability in Adobe Flash Player before 18.0.0.252 and 19.x before 19.0.0.207 on Windows and OS X and before 11.2.202.535 on Linux, Adobe AIR before 19.0.0.213, Adobe AIR SDK before 19.0.0.213, and Adobe AIR SDK \u0026 Compiler before 19.0.0.213 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-7629, CVE-2015-7631, CVE-2015-7635, CVE-2015-7636, CVE-2015-7637, CVE-2015-7638, CVE-2015-7639, CVE-2015-7640, CVE-2015-7642, CVE-2015-7643, and CVE-2015-7644.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB15-25",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2015-7641"
},
{
"category": "external",
"summary": "RHBZ#1271383",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1271383"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2015-7641",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-7641"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2015-7641",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2015-7641"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb15-25.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb15-25.html"
}
],
"release_date": "2015-10-13T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-10-15T11:17:22+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:1893"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB15-25"
},
{
"cve": "CVE-2015-7642",
"discovery_date": "2015-10-13T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1271383"
}
],
"notes": [
{
"category": "description",
"text": "Use-after-free vulnerability in Adobe Flash Player before 18.0.0.252 and 19.x before 19.0.0.207 on Windows and OS X and before 11.2.202.535 on Linux, Adobe AIR before 19.0.0.213, Adobe AIR SDK before 19.0.0.213, and Adobe AIR SDK \u0026 Compiler before 19.0.0.213 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-7629, CVE-2015-7631, CVE-2015-7635, CVE-2015-7636, CVE-2015-7637, CVE-2015-7638, CVE-2015-7639, CVE-2015-7640, CVE-2015-7641, CVE-2015-7643, and CVE-2015-7644.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB15-25",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2015-7642"
},
{
"category": "external",
"summary": "RHBZ#1271383",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1271383"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2015-7642",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-7642"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2015-7642",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2015-7642"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb15-25.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb15-25.html"
}
],
"release_date": "2015-10-13T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-10-15T11:17:22+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:1893"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB15-25"
},
{
"cve": "CVE-2015-7643",
"discovery_date": "2015-10-13T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1271383"
}
],
"notes": [
{
"category": "description",
"text": "Use-after-free vulnerability in Adobe Flash Player before 18.0.0.252 and 19.x before 19.0.0.207 on Windows and OS X and before 11.2.202.535 on Linux, Adobe AIR before 19.0.0.213, Adobe AIR SDK before 19.0.0.213, and Adobe AIR SDK \u0026 Compiler before 19.0.0.213 allows attackers to execute arbitrary code via a Video object with a crafted deblocking property, a different vulnerability than CVE-2015-7629, CVE-2015-7631, and CVE-2015-7644.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB15-25",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2015-7643"
},
{
"category": "external",
"summary": "RHBZ#1271383",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1271383"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2015-7643",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-7643"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2015-7643",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2015-7643"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb15-25.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb15-25.html"
}
],
"release_date": "2015-10-13T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-10-15T11:17:22+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:1893"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB15-25"
},
{
"cve": "CVE-2015-7644",
"discovery_date": "2015-10-13T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1271383"
}
],
"notes": [
{
"category": "description",
"text": "Use-after-free vulnerability in Adobe Flash Player before 18.0.0.252 and 19.x before 19.0.0.207 on Windows and OS X and before 11.2.202.535 on Linux, Adobe AIR before 19.0.0.213, Adobe AIR SDK before 19.0.0.213, and Adobe AIR SDK \u0026 Compiler before 19.0.0.213 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-7629, CVE-2015-7631, and CVE-2015-7643.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB15-25",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2015-7644"
},
{
"category": "external",
"summary": "RHBZ#1271383",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1271383"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2015-7644",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-7644"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2015-7644",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2015-7644"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb15-25.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb15-25.html"
}
],
"release_date": "2015-10-13T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-10-15T11:17:22+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:1893"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.535-1.el6_7.i686"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB15-25"
}
]
}
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.