CRITICAL10.0
Уязвимость программной платформы Flash Player, позволяющая нарушителю выполнить произвольный код
CVSS 2.0CRITICAL 10.0
CVSS:2.0/AV:N/AC:L/Au:N/C:C/I:C/A:CReferences
ALT-PU-2017-1175-1Package update adobe-flash-player in branch t7
Severity:
Closed issues (26)
MEDIUM6.8
Уязвимость программной платформы Flash Player, позволяющая нарушителю выполнить произвольный код
CVSS 2.0MEDIUM 6.8
CVSS:2.0/AV:N/AC:M/Au:N/C:P/I:P/A:PReferences
MEDIUM6.8
Уязвимость программной платформы Flash Player, позволяющая нарушителю выполнить произвольный код
CVSS 2.0MEDIUM 6.8
CVSS:2.0/AV:N/AC:M/Au:N/C:P/I:P/A:PReferences
CRITICAL10.0
Уязвимость программной платформы Flash Player, позволяющая нарушителю выполнить произвольный код
CVSS 2.0CRITICAL 10.0
CVSS:2.0/AV:N/AC:L/Au:N/C:C/I:C/A:CReferences
CRITICAL10.0
Уязвимость программной платформы Flash Player, позволяющая нарушителю выполнить произвольный код
CVSS 2.0CRITICAL 10.0
CVSS:2.0/AV:N/AC:L/Au:N/C:C/I:C/A:CReferences
CRITICAL10.0
Уязвимость программной платформы Flash Player, позволяющая нарушителю выполнить произвольный код
CVSS 2.0CRITICAL 10.0
CVSS:2.0/AV:N/AC:L/Au:N/C:C/I:C/A:CReferences
CRITICAL10.0
Уязвимость программной платформы Flash Player, позволяющая нарушителю выполнить произвольный код
CVSS 2.0CRITICAL 10.0
CVSS:2.0/AV:N/AC:L/Au:N/C:C/I:C/A:CReferences
CRITICAL10.0
Уязвимость программной платформы Flash Player, позволяющая нарушителю выполнить произвольный код
CVSS 2.0CRITICAL 10.0
CVSS:2.0/AV:N/AC:L/Au:N/C:C/I:C/A:CReferences
CRITICAL10.0
Уязвимость программной платформы Flash Player, позволяющая нарушителю выполнить произвольный код
CVSS 2.0CRITICAL 10.0
CVSS:2.0/AV:N/AC:L/Au:N/C:C/I:C/A:CReferences
CRITICAL10.0
Уязвимость программной платформы Flash Player, позволяющая нарушителю выполнить произвольный код
CVSS 2.0CRITICAL 10.0
CVSS:2.0/AV:N/AC:L/Au:N/C:C/I:C/A:CReferences
CRITICAL10.0
Уязвимость программной платформы Flash Player, позволяющая нарушителю выполнить произвольный код
CVSS 2.0CRITICAL 10.0
CVSS:2.0/AV:N/AC:L/Au:N/C:C/I:C/A:CReferences
CRITICAL10.0
Уязвимость программной платформы Flash Player, позволяющая нарушителю выполнить произвольный код
CVSS 2.0CRITICAL 10.0
CVSS:2.0/AV:N/AC:L/Au:N/C:C/I:C/A:CReferences
CRITICAL10.0
Уязвимость программной платформы Flash Player, позволяющая нарушителю выполнить произвольный код
CVSS 2.0CRITICAL 10.0
CVSS:2.0/AV:N/AC:L/Au:N/C:C/I:C/A:CReferences
HIGH8.8
Adobe Flash Player versions 24.0.0.194 and earlier have an exploitable use after free vulnerability in a routine related to player shutdown. Successful exploitation could lead to arbitrary code execution.
CVSS 2.0CRITICAL 9.3
CVSS:2.0/AV:N/AC:M/Au:N/C:C/I:C/A:CCVSS 3.xHIGH 8.8
CVSS:3.x/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:HReferences
- http://rhn.redhat.com/errata/RHSA-2017-0275.html
- http://www.securityfocus.com/bid/96199
- http://www.securitytracker.com/id/1037815
- https://helpx.adobe.com/security/products/flash-player/apsb17-04.html
- https://security.gentoo.org/glsa/201702-20
- http://rhn.redhat.com/errata/RHSA-2017-0275.html
- http://www.securityfocus.com/bid/96199
- http://www.securitytracker.com/id/1037815
- https://helpx.adobe.com/security/products/flash-player/apsb17-04.html
- https://security.gentoo.org/glsa/201702-20
HIGH8.8
Adobe Flash Player versions 24.0.0.194 and earlier have an exploitable heap overflow vulnerability in the h264 decoder routine. Successful exploitation could lead to arbitrary code execution.
CVSS 2.0CRITICAL 9.3
CVSS:2.0/AV:N/AC:M/Au:N/C:C/I:C/A:CCVSS 3.xHIGH 8.8
CVSS:3.x/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:HReferences
- http://rhn.redhat.com/errata/RHSA-2017-0275.html
- http://www.securityfocus.com/bid/96193
- http://www.securitytracker.com/id/1037815
- https://helpx.adobe.com/security/products/flash-player/apsb17-04.html
- https://security.gentoo.org/glsa/201702-20
- http://rhn.redhat.com/errata/RHSA-2017-0275.html
- http://www.securityfocus.com/bid/96193
- http://www.securitytracker.com/id/1037815
- https://helpx.adobe.com/security/products/flash-player/apsb17-04.html
- https://security.gentoo.org/glsa/201702-20
HIGH8.8
Adobe Flash Player versions 24.0.0.194 and earlier have an exploitable use after free vulnerability in the ActionScript 3 BitmapData class. Successful exploitation could lead to arbitrary code execution.
CVSS 2.0CRITICAL 9.3
CVSS:2.0/AV:N/AC:M/Au:N/C:C/I:C/A:CCVSS 3.xHIGH 8.8
CVSS:3.x/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:HReferences
- http://rhn.redhat.com/errata/RHSA-2017-0275.html
- http://www.securityfocus.com/bid/96199
- http://www.securitytracker.com/id/1037815
- https://helpx.adobe.com/security/products/flash-player/apsb17-04.html
- https://security.gentoo.org/glsa/201702-20
- https://www.exploit-db.com/exploits/41422/
- http://rhn.redhat.com/errata/RHSA-2017-0275.html
- http://www.securityfocus.com/bid/96199
- http://www.securitytracker.com/id/1037815
- https://helpx.adobe.com/security/products/flash-player/apsb17-04.html
- https://security.gentoo.org/glsa/201702-20
- https://www.exploit-db.com/exploits/41422/
HIGH8.8
Adobe Flash Player versions 24.0.0.194 and earlier have an exploitable heap overflow vulnerability in the Flash Video (FLV) codec. Successful exploitation could lead to arbitrary code execution.
CVSS 2.0CRITICAL 9.3
CVSS:2.0/AV:N/AC:M/Au:N/C:C/I:C/A:CCVSS 3.xHIGH 8.8
CVSS:3.x/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:HReferences
- http://rhn.redhat.com/errata/RHSA-2017-0275.html
- http://www.securityfocus.com/bid/96193
- http://www.securitytracker.com/id/1037815
- https://helpx.adobe.com/security/products/flash-player/apsb17-04.html
- https://security.gentoo.org/glsa/201702-20
- https://www.exploit-db.com/exploits/41423/
- http://rhn.redhat.com/errata/RHSA-2017-0275.html
- http://www.securityfocus.com/bid/96193
- http://www.securitytracker.com/id/1037815
- https://helpx.adobe.com/security/products/flash-player/apsb17-04.html
- https://security.gentoo.org/glsa/201702-20
- https://www.exploit-db.com/exploits/41423/
HIGH8.8
Adobe Flash Player versions 24.0.0.194 and earlier have an exploitable integer overflow vulnerability related to Flash Broker COM. Successful exploitation could lead to arbitrary code execution.
CVSS 2.0CRITICAL 9.3
CVSS:2.0/AV:N/AC:M/Au:N/C:C/I:C/A:CCVSS 3.xHIGH 8.8
CVSS:3.x/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:HReferences
- http://rhn.redhat.com/errata/RHSA-2017-0275.html
- http://www.securityfocus.com/bid/96194
- http://www.securitytracker.com/id/1037815
- https://helpx.adobe.com/security/products/flash-player/apsb17-04.html
- https://security.gentoo.org/glsa/201702-20
- http://rhn.redhat.com/errata/RHSA-2017-0275.html
- http://www.securityfocus.com/bid/96194
- http://www.securitytracker.com/id/1037815
- https://helpx.adobe.com/security/products/flash-player/apsb17-04.html
- https://security.gentoo.org/glsa/201702-20
HIGH8.8
Adobe Flash Player versions 24.0.0.194 and earlier have an exploitable memory corruption vulnerability when performing garbage collection. Successful exploitation could lead to arbitrary code execution.
CVSS 2.0CRITICAL 9.3
CVSS:2.0/AV:N/AC:M/Au:N/C:C/I:C/A:CCVSS 3.xHIGH 8.8
CVSS:3.x/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:HReferences
- http://rhn.redhat.com/errata/RHSA-2017-0275.html
- http://www.securityfocus.com/bid/96190
- http://www.securitytracker.com/id/1037815
- https://helpx.adobe.com/security/products/flash-player/apsb17-04.html
- https://security.gentoo.org/glsa/201702-20
- https://www.exploit-db.com/exploits/41421/
- http://rhn.redhat.com/errata/RHSA-2017-0275.html
- http://www.securityfocus.com/bid/96190
- http://www.securitytracker.com/id/1037815
- https://helpx.adobe.com/security/products/flash-player/apsb17-04.html
- https://security.gentoo.org/glsa/201702-20
- https://www.exploit-db.com/exploits/41421/
HIGH8.8
Adobe Flash Player versions 24.0.0.194 and earlier have an exploitable memory corruption vulnerability in the h264 decompression routine. Successful exploitation could lead to arbitrary code execution.
CVSS 2.0CRITICAL 9.3
CVSS:2.0/AV:N/AC:M/Au:N/C:C/I:C/A:CCVSS 3.xHIGH 8.8
CVSS:3.x/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:HReferences
- http://rhn.redhat.com/errata/RHSA-2017-0275.html
- http://www.securityfocus.com/bid/96190
- http://www.securitytracker.com/id/1037815
- https://helpx.adobe.com/security/products/flash-player/apsb17-04.html
- https://security.gentoo.org/glsa/201702-20
- http://rhn.redhat.com/errata/RHSA-2017-0275.html
- http://www.securityfocus.com/bid/96190
- http://www.securitytracker.com/id/1037815
- https://helpx.adobe.com/security/products/flash-player/apsb17-04.html
- https://security.gentoo.org/glsa/201702-20
HIGH8.8
Adobe Flash Player versions 24.0.0.194 and earlier have an exploitable memory corruption vulnerability in the h264 codec (related to decompression). Successful exploitation could lead to arbitrary code execution.
CVSS 2.0CRITICAL 9.3
CVSS:2.0/AV:N/AC:M/Au:N/C:C/I:C/A:CCVSS 3.xHIGH 8.8
CVSS:3.x/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:HReferences
- http://rhn.redhat.com/errata/RHSA-2017-0275.html
- http://www.securityfocus.com/bid/96190
- http://www.securitytracker.com/id/1037815
- https://helpx.adobe.com/security/products/flash-player/apsb17-04.html
- https://security.gentoo.org/glsa/201702-20
- http://rhn.redhat.com/errata/RHSA-2017-0275.html
- http://www.securityfocus.com/bid/96190
- http://www.securitytracker.com/id/1037815
- https://helpx.adobe.com/security/products/flash-player/apsb17-04.html
- https://security.gentoo.org/glsa/201702-20
HIGH8.8
Adobe Flash Player versions 24.0.0.194 and earlier have an exploitable heap overflow vulnerability when parsing an MP4 header. Successful exploitation could lead to arbitrary code execution.
CVSS 2.0CRITICAL 9.3
CVSS:2.0/AV:N/AC:M/Au:N/C:C/I:C/A:CCVSS 3.xHIGH 8.8
CVSS:3.x/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:HReferences
- http://rhn.redhat.com/errata/RHSA-2017-0275.html
- http://www.securityfocus.com/bid/96193
- http://www.securitytracker.com/id/1037815
- https://helpx.adobe.com/security/products/flash-player/apsb17-04.html
- https://security.gentoo.org/glsa/201702-20
- https://www.exploit-db.com/exploits/41420/
- http://rhn.redhat.com/errata/RHSA-2017-0275.html
- http://www.securityfocus.com/bid/96193
- http://www.securitytracker.com/id/1037815
- https://helpx.adobe.com/security/products/flash-player/apsb17-04.html
- https://security.gentoo.org/glsa/201702-20
- https://www.exploit-db.com/exploits/41420/
HIGH8.8
Adobe Flash Player versions 24.0.0.194 and earlier have an exploitable use after free vulnerability related to event handlers. Successful exploitation could lead to arbitrary code execution.
CVSS 2.0CRITICAL 9.3
CVSS:2.0/AV:N/AC:M/Au:N/C:C/I:C/A:CCVSS 3.xHIGH 8.8
CVSS:3.x/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:HReferences
- http://rhn.redhat.com/errata/RHSA-2017-0275.html
- http://www.securityfocus.com/bid/96199
- http://www.securitytracker.com/id/1037815
- https://helpx.adobe.com/security/products/flash-player/apsb17-04.html
- https://security.gentoo.org/glsa/201702-20
- http://rhn.redhat.com/errata/RHSA-2017-0275.html
- http://www.securityfocus.com/bid/96199
- http://www.securitytracker.com/id/1037815
- https://helpx.adobe.com/security/products/flash-player/apsb17-04.html
- https://security.gentoo.org/glsa/201702-20
HIGH8.8
Adobe Flash Player versions 24.0.0.194 and earlier have an exploitable use after free vulnerability in Primetime SDK event dispatch. Successful exploitation could lead to arbitrary code execution.
CVSS 2.0CRITICAL 9.3
CVSS:2.0/AV:N/AC:M/Au:N/C:C/I:C/A:CCVSS 3.xHIGH 8.8
CVSS:3.x/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:HReferences
- http://rhn.redhat.com/errata/RHSA-2017-0526.html
- http://www.securityfocus.com/bid/96199
- http://www.securitytracker.com/id/1037815
- https://helpx.adobe.com/security/products/flash-player/apsb17-04.html
- https://security.gentoo.org/glsa/201702-20
- http://rhn.redhat.com/errata/RHSA-2017-0526.html
- http://www.securityfocus.com/bid/96199
- http://www.securitytracker.com/id/1037815
- https://helpx.adobe.com/security/products/flash-player/apsb17-04.html
- https://security.gentoo.org/glsa/201702-20
HIGH8.8
Adobe Flash Player versions 24.0.0.194 and earlier have an exploitable type confusion vulnerability related to the MessageChannel class. Successful exploitation could lead to arbitrary code execution.
CVSS 2.0CRITICAL 9.3
CVSS:2.0/AV:N/AC:M/Au:N/C:C/I:C/A:CCVSS 3.xHIGH 8.8
CVSS:3.x/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:HReferences
- http://rhn.redhat.com/errata/RHSA-2017-0275.html
- http://www.securityfocus.com/bid/96191
- http://www.securitytracker.com/id/1037815
- https://helpx.adobe.com/security/products/flash-player/apsb17-04.html
- https://security.gentoo.org/glsa/201702-20
- http://rhn.redhat.com/errata/RHSA-2017-0275.html
- http://www.securityfocus.com/bid/96191
- http://www.securitytracker.com/id/1037815
- https://helpx.adobe.com/security/products/flash-player/apsb17-04.html
- https://security.gentoo.org/glsa/201702-20
HIGH8.8
Adobe Flash Player versions 24.0.0.194 and earlier have an exploitable memory corruption vulnerability in Primetime SDK. Successful exploitation could lead to arbitrary code execution.
CVSS 2.0CRITICAL 9.3
CVSS:2.0/AV:N/AC:M/Au:N/C:C/I:C/A:CCVSS 3.xHIGH 8.8
CVSS:3.x/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:HReferences
- http://rhn.redhat.com/errata/RHSA-2017-0275.html
- http://www.securityfocus.com/bid/96190
- http://www.securitytracker.com/id/1037815
- https://helpx.adobe.com/security/products/flash-player/apsb17-04.html
- https://security.gentoo.org/glsa/201702-20
- http://rhn.redhat.com/errata/RHSA-2017-0275.html
- http://www.securityfocus.com/bid/96190
- http://www.securitytracker.com/id/1037815
- https://helpx.adobe.com/security/products/flash-player/apsb17-04.html
- https://security.gentoo.org/glsa/201702-20