Heap-based buffer overflow in Adobe Flash Player before 13.0.0.296 and 14.x through 18.x before 18.0.0.194 on Windows and OS X and before 11.2.202.468 on Linux allows remote attackers to execute arbitrary code via unspecified vectors, as exploited in the wild in June 2015.

The remote host is affected by the vulnerability described in GLSA-201507-13 (Adobe Flash Player: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in Adobe Flash Player.
      Please review the CVE identifiers referenced below for details.
  Impact :

    A remote attacker could possibly execute arbitrary code with the       privileges of the process, cause a Denial of Service condition, obtain       sensitive information, or bypass security restrictions.
  Workaround :

    There is no known workaround at this time.

Versions of Adobe Flash Player prior to 18.0.0.194 are outdated and thus unpatched for a remote code execution vulnerability due to improper validation of unspecified user-supplied input. A remote attacker can exploit this, via specially crafted Flash content, to cause a heap-based buffer overflow, resulting in the execution of arbitrary code.

Adobe Flash Player was updated to 11.2.202.468, fixing a security issue, where attackers could have triggered a heap overflow and could have executed code.

<a href='https://helpx.adobe.com/security/products/flash-player/apsb15-14 .html'>https://helpx.adobe.com/security/products/flash-player/apsb15-1 4.html</a>

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Adobe Flash Player was updated to 11.2.202.468 to fix one security issue.

The following vulnerability was fixed :

  - CVE-2015-3113: A heap buffer overflow vulnerability     could have allowed code execution (bsc#935701,     APSB15-14)

Adobe Flash Player was updated to 11.2.202.468, fixing a security issue, where attackers could trigger a heap overflow and could execute code.

https://helpx.adobe.com/security/products/flash-player/apsb15-14.html

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

An updated Adobe Flash Player package that fixes one security issue is now available for Red Hat Enterprise Linux 5 and 6 Supplementary.

Red Hat Product Security has rated this update as having Critical security impact. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available from the CVE link in the References section.

The flash-plugin package contains a Mozilla Firefox compatible Adobe Flash Player web browser plug-in.

A flaw was found in the way flash-plugin displayed certain SWF content. An attacker could use this flaw to create a specially crafted SWF file that would cause flash-plugin to crash or, potentially, execute arbitrary code when the victim loaded a page containing the malicious SWF content. (CVE-2015-3113)

All users of Adobe Flash Player should install this updated package, which upgrades Flash Player to version 11.2.202.468.

Adobe reports :

Adobe has released security updates for Adobe Flash Player for Windows, Macintosh and Linux. These updates address a critical vulnerability (CVE-2015-3113) that could potentially allow an attacker to take control of the affected system.

Adobe is aware of reports that CVE-2015-3113 is being actively exploited in the wild via limited, targeted attacks. Systems running Internet Explorer for Windows 7 and below, as well as Firefox on Windows XP, are known targets.

The remote Windows host is missing KB3074219. It is, therefore, affected by a remote code execution vulnerability due to improper validation of unspecified user-supplied input. A remote attacker can exploit this, via specially crafted Flash content, to cause a heap-based buffer overflow, resulting in the execution of arbitrary code.

The version of Adobe Flash Player installed on the remote Mac OS X host is equal or prior to version 18.0.0.161. It is, therefore, affected by a remote code execution vulnerability due to improper validation of unspecified user-supplied input. A remote attacker can exploit this, via specially crafted Flash content, to cause a heap-based buffer overflow, resulting in the execution of arbitrary code.

The version of Adobe Flash Player installed on the remote Windows host is equal or prior to version 18.0.0.161. It is, therefore, affected by a remote code execution vulnerability due to improper validation of unspecified user-supplied input. A remote attacker can exploit this, via specially crafted Flash content, to cause a heap-based buffer overflow, resulting in the execution of arbitrary code.

ID	Name	Product	Family	Severity
86083	GLSA-201507-13 : Adobe Flash Player: Multiple vulnerabilities (Underminer)	Nessus	Gentoo Local Security Checks	critical
8820	Flash Player < 13.0.0.296 / 18.0.0.194 RCE (APSB15-14)	Nessus Network Monitor	Web Clients	high
84424	SUSE SLED11 Security Update : flash-player (SUSE-SU-2015:1137-1)	Nessus	SuSE Local Security Checks	critical
84416	openSUSE Security Update : Adobe Flash Player (openSUSE-2015-450)	Nessus	SuSE Local Security Checks	critical
84397	SUSE SLED12 Security Update : flash-player (SUSE-SU-2015:1136-1)	Nessus	SuSE Local Security Checks	critical
84391	RHEL 5 / 6 : flash-plugin (RHSA-2015:1184)	Nessus	Red Hat Local Security Checks	critical
84383	FreeBSD : Adobe Flash Player -- critical vulnerabilities (d02f6b01-1a3f-11e5-8bd6-c485083ca99c)	Nessus	FreeBSD Local Security Checks	critical
84367	MS KB3074219: Update for Vulnerabilities in Adobe Flash Player in Internet Explorer	Nessus	Windows	critical
84366	Adobe Flash Player <= 18.0.0.161 RCE (APSB15-14) (Mac OS X)	Nessus	MacOS X Local Security Checks	critical
84365	Adobe Flash Player <= 18.0.0.161 RCE (APSB15-14)	Nessus	Windows	critical

Detections

Analytics

CVE-2015-3113

critical

Tenable Plugins

critical

high

critical

critical

critical

critical

critical

critical

critical

critical