Red Hat Security Advisory

RHSA-2017:1439

flash-plugin security update

Released 2017-06-13 · Red Hat rating Critical · View on Red Hat →

Fixed in

Red Hat Enterprise Linux Desktop Supplementary (v. 6) flash-plugin-26.0.0.126-1.el6_9
Red Hat Enterprise Linux Server Supplementary (v. 6) flash-plugin-26.0.0.126-1.el6_9
Red Hat Enterprise Linux Workstation Supplementary (v. 6) flash-plugin-26.0.0.126-1.el6_9

Fixes 9 records

TI-2017-02298 CVE-2017-3078 · GHSA-xw35-x29w-q9gx

Memory corruption in Adobe Flash Player 25.0.0.171 and earlier.

HIGH 66

Adobe Flash Player versions 25.0.0.171 and earlier have an exploitable memory corruption vulnerability in the Adobe Texture Format (ATF) module.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.30886 Published 2017-06-20 Fixed CWE-119

TI-2017-02296 CVE-2017-3076 · GHSA-vfh6-rm76-vxx7

Memory corruption in Adobe Flash Player 25.0.0.171 and earlier.

MEDIUM 63

Adobe Flash Player versions 25.0.0.171 and earlier have an exploitable memory corruption vulnerability in the MPEG-4 AVC module.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.24728 Published 2017-06-20 Fixed CWE-119

TI-2017-02297 CVE-2017-3077 · GHSA-h3fr-2rfg-m24c

Memory corruption in Adobe Flash Player 25.0.0.171 and earlier.

MEDIUM 62

Adobe Flash Player versions 25.0.0.171 and earlier have an exploitable memory corruption vulnerability in the PNG image parser.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.22261 Published 2017-06-20 Fixed CWE-119

TI-2017-02303 CVE-2017-3083 · GHSA-3grj-6wj3-qgc3

Use after free in Adobe Flash Player 25.0.0.171 and earlier.

MEDIUM 57

Adobe Flash Player versions 25.0.0.171 and earlier have an exploitable use after free vulnerability in the Primetime SDK functionality related to the profile metadata of the media stream.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.14425 Published 2017-06-20 Fixed CWE-416

TI-2017-02301 CVE-2017-3081 · GHSA-qhwm-h28f-j26v

Use after free in Adobe Flash Player 25.0.0.171 and earlier.

MEDIUM 57

Adobe Flash Player versions 25.0.0.171 and earlier have an exploitable use after free vulnerability during internal computation caused by multiple display object mask manipulations.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.14425 Published 2017-06-20 Fixed CWE-416

TI-2017-02302 CVE-2017-3082 · GHSA-66pq-m7px-mqjx

Memory corruption in Adobe Flash Player 25.0.0.171 and earlier.

MEDIUM 56

Adobe Flash Player versions 25.0.0.171 and earlier have an exploitable memory corruption vulnerability in the LocaleID class.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.11664 Published 2017-06-20 Fixed CWE-119

TI-2017-02304 CVE-2017-3084 · GHSA-9c6q-6mm3-j66v

Use after free in Adobe Flash Player 25.0.0.171 and earlier.

MEDIUM 53

Adobe Flash Player versions 25.0.0.171 and earlier have an exploitable use after free vulnerability in the advertising metadata functionality.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.08719 Published 2017-06-20 Fixed CWE-416

TI-2017-02295 CVE-2017-3075 · GHSA-3wr2-rw8c-pv3f

Use after free in Adobe Flash Player 25.0.0.171 and earlier.

MEDIUM 53

Adobe Flash Player versions 25.0.0.171 and earlier have an exploitable use after free vulnerability when manipulating the ActionsScript 2 XML class.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.08719 Published 2017-06-20 Fixed CWE-416

TI-2017-02299 CVE-2017-3079 · GHSA-36mx-gp2g-xh52

Memory corruption in Adobe Flash Player 25.0.0.171 and earlier.

MEDIUM 52

Adobe Flash Player versions 25.0.0.171 and earlier have an exploitable memory corruption vulnerability in the internal representation of raster data.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.06991 Published 2017-06-20 Fixed CWE-119