Red Hat Security Advisory

RHSA-2017:0934

flash-plugin security update

Released 2017-04-12 · Red Hat rating Critical · View on Red Hat →

Fixed in

Red Hat Enterprise Linux Desktop Supplementary (v. 6) flash-plugin-25.0.0.148-1.el6_9
Red Hat Enterprise Linux Server Supplementary (v. 6) flash-plugin-25.0.0.148-1.el6_9
Red Hat Enterprise Linux Workstation Supplementary (v. 6) flash-plugin-25.0.0.148-1.el6_9

Fixes 7 records

TI-2017-02281 CVE-2017-3061 · GHSA-c46q-hcmp-2r44

Memory corruption in Adobe Flash Player 25.0.0.127 and earlier.

MEDIUM 63

Adobe Flash Player versions 25.0.0.127 and earlier have an exploitable memory corruption vulnerability in the SWF parser.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.24728 Published 2017-04-12 Fixed CWE-119

TI-2017-02283 CVE-2017-3063 · GHSA-p25m-24j8-qv7g

Use after free in Adobe Flash Player 25.0.0.127 and earlier.

MEDIUM 54

Adobe Flash Player versions 25.0.0.127 and earlier have an exploitable use after free vulnerability in the ActionScript2 NetStream class.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.08894 Published 2017-04-12 Fixed CWE-416

TI-2017-02282 CVE-2017-3062 · GHSA-wvm6-wvxh-p64f

Use after free in Adobe Flash Player 25.0.0.127 and earlier.

MEDIUM 54

Adobe Flash Player versions 25.0.0.127 and earlier have an exploitable use after free vulnerability in ActionScript2 when creating a getter/setter property.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.09511 Published 2017-04-12 Fixed CWE-416

TI-2017-02279 CVE-2017-3059 · GHSA-cxh3-56px-x3x6

Use after free in Adobe Flash Player 25.0.0.127 and earlier.

MEDIUM 54

Adobe Flash Player versions 25.0.0.127 and earlier have an exploitable use after free vulnerability in the internal script object.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.09511 Published 2017-04-12 Fixed CWE-416

TI-2017-02280 CVE-2017-3060 · GHSA-8rpg-rw6g-v4jc

Out-of-bounds read in Adobe Flash Player 25.0.0.127 and earlier.

MEDIUM 52

Adobe Flash Player versions 25.0.0.127 and earlier have an exploitable memory corruption vulnerability in the ActionScript2 code parser.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.0763 Published 2017-04-12 Fixed CWE-125

TI-2017-02284 CVE-2017-3064 · GHSA-j87c-997w-jvh4

Memory corruption in Adobe Flash Player 25.0.0.127 and earlier.

MEDIUM 49

Adobe Flash Player versions 25.0.0.127 and earlier have an exploitable memory corruption vulnerability when parsing a shape outline.

CVSS 3.0HIGH 7.8 Local No auth User interaction EPSS 0.13454 Published 2017-04-12 Fixed CWE-119

TI-2017-02278 CVE-2017-3058 · GHSA-v8q7-633x-g4mw

Use after free in Adobe Flash Player 25.0.0.127 and earlier.

MEDIUM 43

Adobe Flash Player versions 25.0.0.127 and earlier have an exploitable use after free vulnerability in the sound class.

CVSS 3.0HIGH 7.8 Local No auth User interaction EPSS 0.06504 Published 2017-04-12 Fixed CWE-416