Red Hat Security Advisory

RHSA-2017:1219

flash-plugin security update

Released 2017-05-09 · Red Hat rating Critical · View on Red Hat →

Fixed in

Red Hat Enterprise Linux Desktop Supplementary (v. 6) flash-plugin-25.0.0.171-1.el6_9
Red Hat Enterprise Linux Server Supplementary (v. 6) flash-plugin-25.0.0.171-1.el6_9
Red Hat Enterprise Linux Workstation Supplementary (v. 6) flash-plugin-25.0.0.171-1.el6_9

Fixes 7 records

TI-2017-02288 CVE-2017-3068 · GHSA-x5qr-f738-x6hv

Out-of-bounds write in Adobe Flash Player 25.0.0.148 and earlier.

MEDIUM 57

Adobe Flash Player versions 25.0.0.148 and earlier have an exploitable memory corruption vulnerability in the Advanced Video Coding engine.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.20353 Published 2017-05-09 Fixed CWE-787

TI-2017-02291 CVE-2017-3071 · GHSA-jfvx-4557-pgcj

Use after free in Adobe Flash Player 25.0.0.148 and earlier.

MEDIUM 47

Adobe Flash Player versions 25.0.0.148 and earlier have an exploitable use after free vulnerability when masking display objects.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.0621 Published 2017-05-09 Fixed CWE-416

TI-2017-02294 CVE-2017-3074 · GHSA-vgg2-rxqr-3f72

Out-of-bounds write in Adobe Flash Player 25.0.0.148 and earlier.

MEDIUM 46

Adobe Flash Player versions 25.0.0.148 and earlier have an exploitable memory corruption vulnerability in the Graphics class.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.04998 Published 2017-05-09 Fixed CWE-787

TI-2017-02293 CVE-2017-3073 · GHSA-r88h-g29r-792h

Use after free in Adobe Flash Player 25.0.0.148 and earlier.

MEDIUM 46

Adobe Flash Player versions 25.0.0.148 and earlier have an exploitable use after free vulnerability when handling multiple mask properties of display objects, aka memory corruption.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.0486 Published 2017-05-09 Fixed CWE-416

TI-2017-02292 CVE-2017-3072 · GHSA-mfj9-rqfm-mcvg

Out-of-bounds write in Adobe Flash Player 25.0.0.148 and earlier.

MEDIUM 46

Adobe Flash Player versions 25.0.0.148 and earlier have an exploitable memory corruption vulnerability in the BitmapData class.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.04998 Published 2017-05-09 Fixed CWE-787

TI-2017-02290 CVE-2017-3070 · GHSA-v25h-33j8-h6x5

Out-of-bounds write in Adobe Flash Player 25.0.0.148 and earlier.

MEDIUM 46

Adobe Flash Player versions 25.0.0.148 and earlier have an exploitable memory corruption vulnerability in the ConvolutionFilter class.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.04998 Published 2017-05-09 Fixed CWE-787

TI-2017-02289 CVE-2017-3069 · GHSA-9cj3-pw56-qhh3

Out-of-bounds write in Adobe Flash Player 25.0.0.148 and earlier.

MEDIUM 46

Adobe Flash Player versions 25.0.0.148 and earlier have an exploitable memory corruption vulnerability in the BlendMode class.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.04998 Published 2017-05-09 Fixed CWE-787