Red Hat Security Advisory

RHSA-2017:0057

flash-plugin security update

Released 2017-01-11 · Red Hat rating Critical · View on Red Hat →

Fixed in

Red Hat Enterprise Linux Desktop Supplementary (v. 6) flash-plugin-24.0.0.194-1.el6_8
Red Hat Enterprise Linux Server Supplementary (v. 6) flash-plugin-24.0.0.194-1.el6_8
Red Hat Enterprise Linux Workstation Supplementary (v. 6) flash-plugin-24.0.0.194-1.el6_8

Fixes 13 records

TI-2017-02155 CVE-2017-2935 · GHSA-2xr7-wx8r-phrv

Out-of-bounds write in Adobe Flash Player 24.0.0.186 and earlier.

MEDIUM 61

Adobe Flash Player versions 24.0.0.186 and earlier have an exploitable heap overflow vulnerability when processing the Flash Video container file format.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.2991 Published 2017-01-11 Partial fix CWE-787

TI-2017-02154 CVE-2017-2934 · GHSA-78mh-69p6-6f9p

Out-of-bounds write in Adobe Flash Player 24.0.0.186 and earlier.

MEDIUM 61

Adobe Flash Player versions 24.0.0.186 and earlier have an exploitable heap overflow vulnerability when parsing Adobe Texture Format files.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.2991 Published 2017-01-11 Partial fix CWE-787

TI-2017-02153 CVE-2017-2933 · GHSA-59jr-cm49-92fm

Out-of-bounds write in Adobe Flash Player 24.0.0.186 and earlier.

MEDIUM 61

Adobe Flash Player versions 24.0.0.186 and earlier have an exploitable heap overflow vulnerability related to texture compression.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.2991 Published 2017-01-11 Partial fix CWE-787

TI-2017-02152 CVE-2017-2932 · GHSA-9fr9-7289-f54p

Use after free in Adobe Flash Player 24.0.0.186 and earlier.

MEDIUM 59

Adobe Flash Player versions 24.0.0.186 and earlier have an exploitable use after free vulnerability in the ActionScript MovieClip class.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.24593 Published 2017-01-11 Partial fix CWE-416

TI-2017-02150 CVE-2017-2930 · GHSA-m8h4-jcmw-392v

Out-of-bounds write in Adobe Flash Player 24.0.0.186 and earlier.

MEDIUM 59

Adobe Flash Player versions 24.0.0.186 and earlier have an exploitable memory corruption vulnerability due to a concurrency error when manipulating a display list.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.25064 Published 2017-01-11 Partial fix CWE-787

TI-2017-02151 CVE-2017-2931 · GHSA-3j7g-gwmc-fxrx

Out-of-bounds write in Adobe Flash Player 24.0.0.186 and earlier.

MEDIUM 57

Adobe Flash Player versions 24.0.0.186 and earlier have an exploitable memory corruption vulnerability related to the parsing of SWF metadata.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.21145 Published 2017-01-11 Partial fix CWE-787

TI-2017-02146 CVE-2017-2926 · GHSA-c49x-6jw2-jchg

Out-of-bounds write in Adobe Flash Player 24.0.0.186 and earlier.

MEDIUM 50

Adobe Flash Player versions 24.0.0.186 and earlier have an exploitable memory corruption vulnerability related to processing of atoms in MP4 files.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.09905 Published 2017-01-11 Partial fix CWE-787

TI-2017-02147 CVE-2017-2927 · GHSA-c239-qf7q-p29h

Out-of-bounds write in Adobe Flash Player 24.0.0.186 and earlier.

MEDIUM 49

Adobe Flash Player versions 24.0.0.186 and earlier have an exploitable heap overflow vulnerability when processing Adobe Texture Format files.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.08861 Published 2017-01-11 Partial fix CWE-787

TI-2017-02157 CVE-2017-2937 · GHSA-fgmg-mqq7-5gq7

Use after free in Adobe Flash Player 24.0.0.186 and earlier.

MEDIUM 47

Adobe Flash Player versions 24.0.0.186 and earlier have an exploitable use after free vulnerability in the ActionScript FileReference class, when using class inheritance.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.06238 Published 2017-01-11 Partial fix CWE-416

TI-2017-02156 CVE-2017-2936 · GHSA-4x24-p8p8-r7hm

Use after free in Adobe Flash Player 24.0.0.186 and earlier.

MEDIUM 47

Adobe Flash Player versions 24.0.0.186 and earlier have an exploitable use after free vulnerability in the ActionScript FileReference class.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.06238 Published 2017-01-11 Partial fix CWE-416

TI-2017-02148 CVE-2017-2928 · GHSA-m7p7-fhfv-qvj6

Out-of-bounds write in Adobe Flash Player 24.0.0.186 and earlier.

MEDIUM 46

Adobe Flash Player versions 24.0.0.186 and earlier have an exploitable memory corruption vulnerability related to setting visual mode effects.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.0502 Published 2017-01-11 Partial fix CWE-787

TI-2017-02145 CVE-2017-2925 · GHSA-c8hx-p75j-hp63

Out-of-bounds write in Adobe Flash Player 24.0.0.186 and earlier.

MEDIUM 46

Adobe Flash Player versions 24.0.0.186 and earlier have an exploitable memory corruption vulnerability in the JPEG XR codec.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.0502 Published 2017-01-11 Partial fix CWE-787

TI-2017-02158 CVE-2017-2938 · GHSA-gx39-fvj4-xp9c

Adobe Flash Player versions 24.0.0.186 and earlier have a security bypass vulnerability…

LOW 37

Adobe Flash Player versions 24.0.0.186 and earlier have a security bypass vulnerability related to handling TCP connections.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.05079 Published 2017-01-11 Partial fix