遠端 Mac OS X 主機上安裝的 Adobe Flash Player 為 18.0.0.194 版或更舊版本。因此，會受到多個弱點影響：

- 存在一個資訊洩漏弱點，此弱點可允許攻擊者猜測 Flash 堆積的位址。(CVE-2015-3097)

- 存在多個堆積型緩衝區溢位弱點，這會允任意程式碼執行。
 (CVE-2015-3135、CVE-2015-4432、CVE-2015-5118)

- 存在多個記憶體損毀弱點，這會允許任意程式碼執行。(CVE-2015-3117、CVE-2015-3123、CVE-2015-3130、CVE-2015-3133、CVE-2015-3134、CVE-2015-4431)

- 存在多個 NULL 指標解除參照瑕疵。
 (CVE-2015-3126、CVE-2015-4429)

- 存在一個安全性繞過弱點，這會導致資訊洩漏。(CVE-2015-3114)

- 存在多個類型混淆弱點，這會允許任意程式碼執行。(CVE-2015-3119、CVE-2015-3120、CVE-2015-3121、CVE-2015-3122、CVE-2015-4433)

- 存在多個釋放後使用錯誤，這會允許任意程式碼執行。(CVE-2015-3118、CVE-2015-3124、CVE-2015-5117、CVE-2015-3127、CVE-2015-3128、CVE-2015-3129、CVE-2015-3131、CVE-2015-3132、CVE-2015-3136、CVE-2015-3137、CVE-2015-4428、CVE-2015-4430、CVE-2015-5119)

- 存在多個同源原則繞過弱點，這會允許資訊洩漏。(CVE-2014-0578、CVE-2015-3115、CVE-2015-3116、CVE-2015-3125、CVE-2015-5116)

- 存在一個記憶體損毀問題，是因不當驗證使用者提供的輸入所致。攻擊者可惡意利用這點執行任意程式碼。(CVE-2015-5124)

遠端 Windows 主機遺漏 KB3065823。因此，會受到多個弱點影響：

- 存在一個資訊洩漏弱點，此弱點可允許攻擊者猜測 Flash 堆積的位址。(CVE-2015-3097)

- 存在多個堆積型緩衝區溢位弱點，這會允任意程式碼執行。
 (CVE-2015-3135、CVE-2015-4432、CVE-2015-5118)

- 存在多個記憶體損毀弱點，這會允許任意程式碼執行。(CVE-2015-3117、CVE-2015-3123、CVE-2015-3130、CVE-2015-3133、CVE-2015-3134、CVE-2015-4431)

- 存在多個 NULL 指標解除參照瑕疵。
 (CVE-2015-3126、CVE-2015-4429)

- 存在一個安全性繞過弱點，這會導致資訊洩漏。(CVE-2015-3114)

- 存在多個類型混淆弱點，這會允許任意程式碼執行。(CVE-2015-3119、CVE-2015-3120、CVE-2015-3121、CVE-2015-3122、CVE-2015-4433)

- 存在多個釋放後使用錯誤，這會允許任意程式碼執行。(CVE-2015-3118、CVE-2015-3124、CVE-2015-5117、CVE-2015-3127、CVE-2015-3128、CVE-2015-3129、CVE-2015-3131、CVE-2015-3132、CVE-2015-3136、CVE-2015-3137、CVE-2015-4428、CVE-2015-4430、CVE-2015-5119)

- 存在多個同源原則繞過弱點，這會允許資訊洩漏。(CVE-2014-0578、CVE-2015-3115、CVE-2015-3116、CVE-2015-3125、CVE-2015-5116)

- 存在一個記憶體損毀問題，是因不當驗證使用者提供的輸入所致。攻擊者可惡意利用這點執行任意程式碼。(CVE-2015-5124)

Versions of Adobe AIR prior to 18.0.0.180 are outdated and thus unpatched for the following vulnerabilities :

 - An information disclosure vulnerability exists that allows an attacker to guess the address for the Flash heap. (CVE-2015-3097)
 - Multiple heap-based buffer overflow vulnerabilities exist that allow arbitrary code execution. (CVE-2015-3135, CVE-2015-4432, CVE-2015-5118)
 - Multiple memory corruption vulnerabilities exist that allow arbitrary code execution. (CVE-2015-3117, CVE-2015-3123, CVE-2015-3130, CVE-2015-3133, CVE-2015-3134, CVE-2015-4431)
 - Multiple NULL pointer dereference flaws exist. (CVE-2015-3126, CVE-2015-4429)
 - A security bypass vulnerability exists that results in an information disclosure. (CVE-2015-3114)
 - Multiple type confusion vulnerabilities exist that allow arbitrary code execution. (CVE-2015-3119, CVE-2015-3120, CVE-2015-3121, CVE-2015-3122, CVE-2015-4433)
 - Multiple use-after-free errors exist that allow arbitrary code execution. (CVE-2015-3118, CVE-2015-3124, CVE-2015-5117, CVE-2015-3127, CVE-2015-3128, CVE-2015-3129, CVE-2015-3131, CVE-2015-3132, CVE-2015-3136, CVE-2015-3137, CVE-2015-4428, CVE-2015-4430, CVE-2015-5119)
 - Multiple same-origin policy bypass vulnerabilities exist that allow information disclosure. (CVE-2014-0578, CVE-2015-3115, CVE-2015-3116, CVE-2015-3125, CVE-2015-5116)
 - A memory corruption issue exists due to improper validation of user-supplied input. An attacker can exploit this to execute arbitrary code. (CVE-2015-5124)

Versions of Adobe Flash Player prior to 18.0.0.203 are outdated and thus unpatched for the following vulnerabilities :

  - An information disclosure vulnerability exists that allows an attacker to guess the address for the Flash heap. (CVE-2015-3097)
  - Multiple heap-based buffer overflow vulnerabilities exist that allow arbitrary code execution. (CVE-2015-3135, CVE-2015-4432, CVE-2015-5118)
  - Multiple memory corruption vulnerabilities exist that allow arbitrary code execution. (CVE-2015-3117, CVE-2015-3123, CVE-2015-3130, CVE-2015-3133, CVE-2015-3134, CVE-2015-4431)
  - Multiple NULL pointer dereference flaws exist. (CVE-2015-3126, CVE-2015-4429)
  - A security bypass vulnerability exists that results in an information disclosure. (CVE-2015-3114)
  - Multiple type confusion vulnerabilities exist that allow arbitrary code execution. (CVE-2015-3119, CVE-2015-3120, CVE-2015-3121, CVE-2015-3122, CVE-2015-4433)
  - Multiple use-after-free errors exist that allow arbitrary code execution. (CVE-2015-3118, CVE-2015-3124, CVE-2015-5117, CVE-2015-3127, CVE-2015-3128, CVE-2015-3129, CVE-2015-3131, CVE-2015-3132, CVE-2015-3136, CVE-2015-3137, CVE-2015-4428, CVE-2015-4430, CVE-2015-5119)
  - Multiple same-origin policy bypass vulnerabilities exist that allow information disclosure. (CVE-2014-0578, CVE-2015-3115, CVE-2015-3116, CVE-2015-3125, CVE-2015-5116)
  - A memory corruption issue exists due to improper validation of user-supplied input. An attacker can exploit this to execute arbitrary code. (CVE-2015-5124)

The version of Google Chrome OS on the remote mobile host is prior to 43.0.2357.132 and thus unpatched for the following vulnerabilities :

 - A use-after-free error exists in the opaqueBackground class in the ActionScript 3 (AS3) implementation. A remote attacker, via specially crafted Flash content, can dereference already freed memory, resulting in the execution of arbitrary code. (CVE-2015-5122) 
 - A use-after-free error exists in the BitmapData class in the ActionScript 3 (AS3) implementation. A remote attacker, via specially crafted Flash content, can dereference already freed memory, resulting in the execution of arbitrary code. (CVE-2015-5123) 
 - A flaw exists due to user-supplied input not being properly validated. This may allow a context-dependent attacker to corrupt memory and potentially execute arbitrary code. (CVE-2015-5124) 
 - An information disclosure vulnerability exists that allows an attacker to guess the address for the Flash heap. (CVE-2015-3097) 
 - Multiple heap-based buffer overflow vulnerabilities exist that allow arbitrary code execution. (CVE-2015-3135, CVE-2015-4432, CVE-2015-5118) 
 - Multiple memory corruption vulnerabilities exist that allow arbitrary code execution. (CVE-2015-3117, CVE-2015-3123, CVE-2015-3130, CVE-2015-3133, CVE-2015-3134, CVE-2015-4431) 
 - Multiple NULL pointer dereference flaws exist. (CVE-2015-3126, CVE-2015-4429) 
 - A security bypass vulnerability exists that results in an information disclosure. (CVE-2015-3114) 
 - Multiple type confusion vulnerabilities exist that allow arbitrary code execution. (CVE-2015-3119, CVE-2015-3120, CVE-2015-3121, CVE-2015-3122, CVE-2015-4433) 
 - Multiple use-after-free errors exist that allow arbitrary code execution. (CVE-2015-3118, CVE-2015-3124, CVE-2015-5117, CVE-2015-3127, CVE-2015-3128, CVE-2015-3129, CVE-2015-3131, CVE-2015-3132, CVE-2015-3136, CVE-2015-3137, CVE-2015-4428, CVE-2015-4430, CVE-2015-5119) 
 - Multiple same-origin policy bypass vulnerabilities exist that allow information disclosure. (CVE-2014-0578, CVE-2015-3115, CVE-2015-3116, CVE-2015-3125, CVE-2015-5116) 
 - A memory corruption issue exists due to improper validation of user-supplied input. An attacker can exploit this to execute arbitrary code. (CVE-2015-5124)

ID	Name	Product	Family	Published	Updated	Severity
84644	Adobe Flash Player <= 18.0.0.194 多個弱點 (APSB15-16) (Mac OS X)	Nessus	MacOS X Local Security Checks	7/9/2015	3/8/2022	critical
84645	MS KB3065823：針對 Internet Explorer 中的 Adobe Flash Player 的弱點更新	Nessus	Windows	7/9/2015	3/8/2022	critical
8858	Adobe AIR < 18.0.0.180 Multiple Vulnerabilities (APSB15-16)	Nessus Network Monitor	Web Clients	9/11/2015	3/6/2019	high
8821	Flash Player < 13.0.0.302 / 18.0.0.203 Multiple Vulnerabilities (APSB15-16)	Nessus Network Monitor	Web Clients	7/24/2015	3/6/2019	high
8886	Google Chrome OS < 43.0.2357.132 Multiple Vulnerabilities	Nessus Network Monitor	Mobile Devices	9/25/2015	3/6/2019	critical

Detections

Analytics

Plugins Search

critical

critical

high

high

critical