Red Hat Security AdvisoryRHSA-2015:0697
flash-plugin security update
Released 2015-03-17 · Red Hat rating Critical · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Desktop Supplementary (v. 5) flash-plugin-11.2.202.451-1.el5.i386
- Red Hat Enterprise Linux Desktop Supplementary (v. 6) flash-plugin-11.2.202.451-1.el6
- Red Hat Enterprise Linux Server Supplementary (v. 5) flash-plugin-11.2.202.451-1.el5.i386
- Red Hat Enterprise Linux Server Supplementary (v. 6) flash-plugin-11.2.202.451-1.el6
- Red Hat Enterprise Linux Workstation Supplementary (v. 6) flash-plugin-11.2.202.451-1.el6
Fixes 11 records
Priority HIGH 77
Adobe Flash Player before 13.0.0.277 and 14.x through 17.x before 17.0.0.134 on Windows and OS X and before 11.2.202.451 on Linux allows attackers to execute arbitrary code by leveraging an unspecified "type confusion,"…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.70445 · Published 2015-03-13 · Fixed
Priority MEDIUM 53
Use-after-free vulnerability in Adobe Flash Player before 13.0.0.277 and 14.x through 17.x before 17.0.0.134 on Windows and OS X and before 11.2.202.451 on Linux allows attackers to execute arbitrary code via unspecified…
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.07002 · Published 2015-03-13 · Fixed
Priority MEDIUM 53
Integer overflow in Adobe Flash Player before 13.0.0.277 and 14.x through 17.x before 17.0.0.134 on Windows and OS X and before 11.2.202.451 on Linux allows attackers to execute arbitrary code via unspecified vectors.
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.07002 · Published 2015-03-13 · Fixed
Priority MEDIUM 52
Use-after-free vulnerability in Adobe Flash Player before 13.0.0.277 and 14.x through 17.x before 17.0.0.134 on Windows and OS X and before 11.2.202.451 on Linux allows attackers to execute arbitrary code via unspecified…
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.06744 · Published 2015-03-13 · Fixed
Priority MEDIUM 52
Adobe Flash Player before 13.0.0.277 and 14.x through 17.x before 17.0.0.134 on Windows and OS X and before 11.2.202.451 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption…
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.05975 · Published 2015-03-13 · Fixed
Priority MEDIUM 51
Adobe Flash Player before 13.0.0.277 and 14.x through 17.x before 17.0.0.134 on Windows and OS X and before 11.2.202.451 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption…
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.05511 · Published 2015-03-13 · Fixed CWE-399
Priority MEDIUM 51
Adobe Flash Player before 13.0.0.277 and 14.x through 17.x before 17.0.0.134 on Windows and OS X and before 11.2.202.451 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption…
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.05307 · Published 2015-03-13 · Fixed CWE-399
Priority MEDIUM 51
Adobe Flash Player before 13.0.0.277 and 14.x through 17.x before 17.0.0.134 on Windows and OS X and before 11.2.202.451 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption…
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.05511 · Published 2015-03-13 · Fixed CWE-399
Priority MEDIUM 49
Adobe Flash Player before 13.0.0.277 and 14.x through 17.x before 17.0.0.134 on Windows and OS X and before 11.2.202.451 on Linux allows attackers to execute arbitrary code by leveraging an unspecified "type confusion,"…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.05687 · Published 2015-03-13 · Fixed
Priority LOW 30
Adobe Flash Player before 13.0.0.277 and 14.x through 17.x before 17.0.0.134 on Windows and OS X and before 11.2.202.451 on Linux allows remote attackers to bypass the Same Origin Policy via unspecified vectors.
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.0442 · Published 2015-03-13 · Fixed CWE-264
Priority LOW 29
Adobe Flash Player before 13.0.0.277 and 14.x through 17.x before 17.0.0.134 on Windows and OS X and before 11.2.202.451 on Linux allows remote attackers to bypass intended file-upload restrictions via unspecified vector…
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.03412 · Published 2015-03-13 · Fixed