Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and before 11.2.202.554 on Linux, Adobe AIR before 20.0.0.204, Adobe AIR SDK before 20.0.0.204, and Adobe AIR SDK & Compiler before 20.0.0.204 allow attackers to execute arbitrary code or cause a denial of service (out-of-bounds read and memory corruption) via crafted MPEG-4 data, a different vulnerability than CVE-2015-8045, CVE-2015-8047, CVE-2015-8060, CVE-2015-8408, CVE-2015-8416, CVE-2015-8417, CVE-2015-8418, CVE-2015-8419, CVE-2015-8443, CVE-2015-8444, CVE-2015-8451, CVE-2015-8455, CVE-2015-8652, CVE-2015-8656, CVE-2015-8657, CVE-2015-8658, and CVE-2015-8820.
http://www.securityfocus.com/bid/84160
http://www.zerodayinitiative.com/advisories/ZDI-15-658
https://helpx.adobe.com/security/products/flash-player/apsb15-32.html
Source: MITRE
Published: 2016-03-04
Updated: 2016-11-28
Type: CWE-119
Base Score: 9.3
Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C
Impact Score: 10
Exploitability Score: 8.6
Severity: HIGH
Base Score: 8.8
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Impact Score: 5.9
Exploitability Score: 2.8
Severity: HIGH
AND
OR
OR
AND
OR
OR
AND
OR
cpe:2.3:a:adobe:flash_player:*:*:*:*:*:*:*:*
cpe:2.3:a:adobe:flash_player:19.0.0.185:*:*:*:*:*:*:*
cpe:2.3:a:adobe:flash_player:19.0.0.207:*:*:*:*:*:*:*
cpe:2.3:a:adobe:flash_player:19.0.0.226:*:*:*:*:*:*:*
cpe:2.3:a:adobe:flash_player:19.0.0.245:*:*:*:*:*:*:*
cpe:2.3:a:adobe:flash_player:20.0.0.228:*:*:*:*:*:*:*
OR
cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*
AND
OR
OR
cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*
ID | Name | Product | Family | Severity |
---|---|---|---|---|
9043 | Adobe AIR < 20.0.0.204 Multiple Vulnerabilities (APSB15-32) | Nessus Network Monitor | Web Clients | high |
9040 | Flash Player < 20.0.0.228 Multiple Vulnerabilities (APSB15-32) | Nessus Network Monitor | Web Clients | high |
9034 | Google Chrome < 47.0.2526.80 Multiple Vulnerabilities | Nessus Network Monitor | Web Clients | high |
87304 | RHEL 5 / 6 : flash-plugin (RHSA-2015:2593) | Nessus | Red Hat Local Security Checks | critical |
87247 | Adobe Flash Player for Mac <= 19.0.0.245 Multiple Vulnerabilities (APSB15-32) | Nessus | MacOS X Local Security Checks | critical |
87246 | Adobe AIR for Mac <= 19.0.0.241 Multiple Vulnerabilities (APSB15-32) | Nessus | MacOS X Local Security Checks | critical |
87244 | Adobe Flash Player <= 19.0.0.245 Multiple Vulnerabilities (APSB15-32) | Nessus | Windows | critical |
87243 | Adobe AIR <= 19.0.0.241 Multiple Vulnerabilities (APSB15-32) | Nessus | Windows | critical |