Red Hat Security AdvisoryRHSA-2017:0275
flash-plugin security update
Released 2017-02-15 · Red Hat rating Critical · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Desktop Supplementary (v. 6) flash-plugin-24.0.0.221-1.el6_8
- Red Hat Enterprise Linux Server Supplementary (v. 6) flash-plugin-24.0.0.221-1.el6_8
- Red Hat Enterprise Linux Workstation Supplementary (v. 6) flash-plugin-24.0.0.221-1.el6_8
Fixes 12 records
Priority MEDIUM 63
Adobe Flash Player versions 24.0.0.194 and earlier have an exploitable heap overflow vulnerability when parsing an MP4 header.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.32676 · Published 2017-02-15 · Partial fix CWE-787
Priority MEDIUM 62
Adobe Flash Player versions 24.0.0.194 and earlier have an exploitable heap overflow vulnerability in the Flash Video (FLV) codec.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.30873 · Published 2017-02-15 · Partial fix CWE-787
Priority MEDIUM 58
Adobe Flash Player versions 24.0.0.194 and earlier have an exploitable use after free vulnerability in the ActionScript 3 BitmapData class.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.21828 · Published 2017-02-15 · Partial fix CWE-416
Priority MEDIUM 56
Adobe Flash Player versions 24.0.0.194 and earlier have an exploitable memory corruption vulnerability when performing garbage collection.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.18095 · Published 2017-02-15 · Partial fix CWE-787
Priority MEDIUM 56
Adobe Flash Player versions 24.0.0.194 and earlier have an exploitable heap overflow vulnerability in the h264 decoder routine.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.18219 · Published 2017-02-15 · Partial fix CWE-787
Priority MEDIUM 50
Adobe Flash Player versions 24.0.0.194 and earlier have an exploitable memory corruption vulnerability in the h264 decompression routine.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.0969 · Published 2017-02-15 · Partial fix CWE-787
Priority MEDIUM 49
Adobe Flash Player versions 24.0.0.194 and earlier have an exploitable memory corruption vulnerability in the h264 codec (related to decompression).
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.08666 · Published 2017-02-15 · Partial fix CWE-787
Priority MEDIUM 49
Adobe Flash Player versions 24.0.0.194 and earlier have an exploitable integer overflow vulnerability related to Flash Broker COM.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.08526 · Published 2017-02-15 · Partial fix CWE-190
Priority MEDIUM 47
Adobe Flash Player versions 24.0.0.194 and earlier have an exploitable type confusion vulnerability related to the MessageChannel class.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.06439 · Published 2017-02-15 · Partial fix CWE-843
Priority MEDIUM 47
Adobe Flash Player versions 24.0.0.194 and earlier have an exploitable use after free vulnerability related to event handlers.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.06049 · Published 2017-02-15 · Partial fix CWE-416
Priority MEDIUM 47
Adobe Flash Player versions 24.0.0.194 and earlier have an exploitable use after free vulnerability in a routine related to player shutdown.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.06049 · Published 2017-02-15 · Partial fix CWE-416
Priority MEDIUM 46
Adobe Flash Player versions 24.0.0.194 and earlier have an exploitable memory corruption vulnerability in Primetime SDK.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.04868 · Published 2017-02-15 · Partial fix CWE-787
THREATIST.IORead the docs