Adobe Shockwave Player before 12.2.0.162 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-6680.

The remote host is affected by the vulnerability described in GLSA-201509-07 (Adobe Flash Player: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in Adobe Flash Player.
      Please review the CVE identifiers referenced below for details.
  Impact :

    A remote attacker could possibly execute arbitrary code with the       privileges of the process, cause a Denial of Service condition, obtain       sensitive information, or bypass security restrictions.
  Workaround :

    There is no known workaround at this time.

The remote Windows host contains a version of Adobe Shockwave Player that is prior or equal to 12.1.9.160. It is, therefore, affected by multiple remote code execution vulnerabilities due improper validation of user-supplied input. A remote attacker can exploit these vulnerabilities to corrupt memory, potentially resulting in the execution of arbitrary code.

The remote Mac OS X host contains a version of Adobe Shockwave Player that is prior or equal to 12.1.9.160. It is, therefore, affected by multiple remote code execution vulnerabilities due improper validation of user-supplied input. A remote attacker can exploit these vulnerabilities to corrupt memory, potentially resulting in the execution of arbitrary code.

ID	Name	Product	Family	Type	Severity
91735	GLSA-201509-07 : Adobe Flash Player: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	Local	critical
85882	Adobe Shockwave Player <= 12.1.9.160 Multiple RCE (APSB15-22)	Nessus	Windows	Local	critical
85881	Adobe Shockwave Player <= 12.1.9.160 Multiple RCE (APSB15-22) (Mac OS X)	Nessus	MacOS X Local Security Checks	Local	critical

Detections

Analytics

CVE-2015-6681

critical

Tenable Plugins

critical

critical

critical