RHSA-2016:0610: flash-plugin security update

TI-2016-00925 CVE-2016-1019 · GHSA-mj28-pj3c-6jwr

Adobe Flash Player 21.0.0.197 and earlier allows remote attackers to cause a denial of…

CRITICAL 100KEV

Adobe Flash Player 21.0.0.197 and earlier allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via unspecified vectors, as exploited in the wild in April 2016.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.22316 Published 2016-04-07 Fixed

TI-2016-00917 CVE-2016-1011 · GHSA-6j5q-5p93-ghjx

Use-after-free vulnerability in Adobe Flash Player before 18.0.0.343 and 19.x through…

MEDIUM 59

Use-after-free vulnerability in Adobe Flash Player before 18.0.0.343 and 19.x through 21.x before 21.0.0.213 on Windows and OS X and before 11.2.202.616 on Linux allows attackers to execute arbitrary code via unspecified…

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.24882 Published 2016-04-09 Fixed CWE-416

TI-2016-00919 CVE-2016-1013 · GHSA-vh5c-rcpj-3744

Use-after-free vulnerability in Adobe Flash Player before 18.0.0.343 and 19.x through…

MEDIUM 58

Use-after-free vulnerability in Adobe Flash Player before 18.0.0.343 and 19.x through 21.x before 21.0.0.213 on Windows and OS X and before 11.2.202.616 on Linux allows attackers to execute arbitrary code via unspecified…

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.21792 Published 2016-04-09 Fixed CWE-416

TI-2016-00924 CVE-2016-1018 · GHSA-fq6f-9mhj-9mhq

Stack-based buffer overflow in Adobe Flash Player before 18.0.0.343 and 19.x through 21.x…

MEDIUM 49

Stack-based buffer overflow in Adobe Flash Player before 18.0.0.343 and 19.x through 21.x before 21.0.0.213 on Windows and OS X and before 11.2.202.616 on Linux allows attackers to execute arbitrary code via crafted JPEG…

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.08292 Published 2016-04-09 Fixed CWE-787

TI-2016-00921 CVE-2016-1015 · GHSA-qxr5-2c92-fj86

Adobe Flash Player before 18.0.0.343 and 19.x through 21.x before 21.0.0.213 on Windows…

MEDIUM 48

Adobe Flash Player before 18.0.0.343 and 19.x through 21.x before 21.0.0.213 on Windows and OS X and before 11.2.202.616 on Linux allows attackers to execute arbitrary code by overriding NetConnection object properties t…

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.07133 Published 2016-04-09 Fixed CWE-843

TI-2016-00923 CVE-2016-1017 · GHSA-4wrp-m389-3rjm

Use-after-free vulnerability in the LoadVars.decode function in Adobe Flash Player before…

MEDIUM 47

Use-after-free vulnerability in the LoadVars.decode function in Adobe Flash Player before 18.0.0.343 and 19.x through 21.x before 21.0.0.213 on Windows and OS X and before 11.2.202.616 on Linux allows attackers to execut…

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.06102 Published 2016-04-09 Fixed CWE-416

TI-2016-00922 CVE-2016-1016 · GHSA-7v4g-vc2q-829q

Use-after-free vulnerability in the Transform object implementation in Adobe Flash Player…

MEDIUM 47

Use-after-free vulnerability in the Transform object implementation in Adobe Flash Player before 18.0.0.343 and 19.x through 21.x before 21.0.0.213 on Windows and OS X and before 11.2.202.616 on Linux allows attackers to…

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.06102 Published 2016-04-09 Fixed CWE-416

TI-2016-00937 CVE-2016-1031 · GHSA-89vh-wwvw-xxh6

Use-after-free vulnerability in Adobe Flash Player before 18.0.0.343 and 19.x through…

MEDIUM 46

Use-after-free vulnerability in Adobe Flash Player before 18.0.0.343 and 19.x through 21.x before 21.0.0.213 on Windows and OS X and before 11.2.202.616 on Linux allows attackers to execute arbitrary code via unspecified…

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.05079 Published 2016-04-09 Fixed CWE-416

TI-2016-00939 CVE-2016-1033 · GHSA-7jmc-v7p8-49rr