Page 100 of 894 results (0.009 seconds)

CVSS: 10.0EPSS: 90%CPEs: 5EXPL: 1

CVE-2015-7647 – Adobe Flash - Type Confusion in IExternalizable.readExternal When Performing Local Serialization

https://notcve.org/view.php?id=CVE-2015-7647

Adobe Flash Player before 18.0.0.255 and 19.x before 19.0.0.226 on Windows and OS X and before 11.2.202.540 on Linux allows attackers to execute arbitrary code by leveraging an unspecified "type confusion," a different vulnerability than CVE-2015-7648. Adobe Flash Player en versiones anteriores a 18.0.0.255 y 19.x en versiones anteriores a 19.0.0.226 en Windows y OS X y en versiones anteriores a 11.2.202.540 en Linux permite a atacantes ejecutar código arbitrario aprovechando una 'confusión de tipos' no especificada, una vulnerabilidad diferente a CVE-2015-7648. If IExternalizable.readExternal is overridden with a value that is not a function, Flash assumes it is a function even though it is not one. This leads to execution of a 'method' outside of the ActionScript object's ActionScript vtable, leading to memory corruption. • https://www.exploit-db.com/exploits/38969 http://rhn.redhat.com/errata/RHSA-2015-1913.html http://rhn.redhat.com/errata/RHSA-2015-2024.html http://www.securityfocus.com/bid/77115 http://www.securitytracker.com/id/1033850 https://helpx.adobe.com/security/products/flash-player/apsb15-27.html https://security.gentoo.org/glsa/201511-02 https://access.redhat.com/security/cve/CVE-2015-7647 https://bugzilla.redhat.com/show_bug.cgi?id=1271966 •

CVSS: 10.0EPSS: 90%CPEs: 5EXPL: 1

CVE-2015-7648 – Adobe Flash - Type Confusion in Serialization with ObjectEncoder.dynamicPropertyWriter

https://notcve.org/view.php?id=CVE-2015-7648

Adobe Flash Player before 18.0.0.255 and 19.x before 19.0.0.226 on Windows and OS X and before 11.2.202.540 on Linux allows attackers to execute arbitrary code by leveraging an unspecified "type confusion," a different vulnerability than CVE-2015-7647. Adobe Flash Player en versiones anteriores a 18.0.0.255 y 19.x en versiones anteriores a 19.0.0.226 en Windows y OS X y en versiones anteriores a 11.2.202.540 en Linux permite a atacantes ejecutar código arbitrario aprovechando una 'confusión de tipos' no especificada, una vulnerabilidad diferente a CVE-2015-7647. There is a type confusion issue during serialization if ObjectEncoder.dynamicPropertyWriter is overridden with a value that is not a function. • https://www.exploit-db.com/exploits/38970 http://rhn.redhat.com/errata/RHSA-2015-1913.html http://rhn.redhat.com/errata/RHSA-2015-2024.html http://www.securityfocus.com/bid/77116 http://www.securitytracker.com/id/1033850 https://helpx.adobe.com/security/products/flash-player/apsb15-27.html https://security.gentoo.org/glsa/201511-02 https://access.redhat.com/security/cve/CVE-2015-7648 https://bugzilla.redhat.com/show_bug.cgi?id=1271966 •

CVSS: 10.0EPSS: 1%CPEs: 12EXPL: 0

CVE-2015-7639 – flash-plugin: multiple code execution issues fixed in APSB15-25

https://notcve.org/view.php?id=CVE-2015-7639

Use-after-free vulnerability in Adobe Flash Player before 18.0.0.252 and 19.x before 19.0.0.207 on Windows and OS X and before 11.2.202.535 on Linux, Adobe AIR before 19.0.0.213, Adobe AIR SDK before 19.0.0.213, and Adobe AIR SDK & Compiler before 19.0.0.213 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-7629, CVE-2015-7631, CVE-2015-7635, CVE-2015-7636, CVE-2015-7637, CVE-2015-7638, CVE-2015-7640, CVE-2015-7641, CVE-2015-7642, CVE-2015-7643, and CVE-2015-7644. Vulnerabilidad de uso después de la liberación de la memoria en Adobe Flash Player en versiones anteriores a 18.0.0.252 y 19.x en versiones anteriores a 19.0.0.207 en Windows y OS X y en versiones anteriores a 11.2.202.535 en Linux, Adobe AIR en versiones anteriores a 19.0.0.213, Adobe AIR SDK en versiones anteriores a 19.0.0.213 y Adobe AIR SDK & Compiler en versiones anteriores a 19.0.0.213 permite a atacantes ejecutar código arbitrario a través de vectores no especificados, una vulnerabilidad diferente a CVE-2015-7629, CVE-2015-7631, CVE-2015-7635, CVE-2015-7636, CVE-2015-7637, CVE-2015-7638, CVE-2015-7640, CVE-2015-7641, CVE-2015-7642, CVE-2015-7643 y CVE-2015-7644. • http://rhn.redhat.com/errata/RHSA-2015-1893.html http://rhn.redhat.com/errata/RHSA-2015-2024.html http://www.securityfocus.com/bid/77061 https://helpx.adobe.com/security/products/flash-player/apsb15-25.html https://access.redhat.com/security/cve/CVE-2015-7639 https://bugzilla.redhat.com/show_bug.cgi?id=1271383 •

CVSS: 10.0EPSS: 1%CPEs: 12EXPL: 0

CVE-2015-7640 – flash-plugin: multiple code execution issues fixed in APSB15-25

https://notcve.org/view.php?id=CVE-2015-7640

Use-after-free vulnerability in Adobe Flash Player before 18.0.0.252 and 19.x before 19.0.0.207 on Windows and OS X and before 11.2.202.535 on Linux, Adobe AIR before 19.0.0.213, Adobe AIR SDK before 19.0.0.213, and Adobe AIR SDK & Compiler before 19.0.0.213 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-7629, CVE-2015-7631, CVE-2015-7635, CVE-2015-7636, CVE-2015-7637, CVE-2015-7638, CVE-2015-7639, CVE-2015-7641, CVE-2015-7642, CVE-2015-7643, and CVE-2015-7644. Vulnerabilidad de uso después de la liberación de la memoria en Adobe Flash Player en versiones anteriores a 18.0.0.252 y 19.x en versiones anteriores a 19.0.0.207 en Windows y OS X y en versiones anteriores a 11.2.202.535 en Linux, Adobe AIR en versiones anteriores a 19.0.0.213, Adobe AIR SDK en versiones anteriores a 19.0.0.213 y Adobe AIR SDK & Compiler en versiones anteriores a 19.0.0.213 permite a atacantes ejecutar código arbitrario a través de vectores no especificados, una vulnerabilidad diferente a CVE-2015-7629, CVE-2015-7631, CVE-2015-7635, CVE-2015-7636, CVE-2015-7637, CVE-2015-7638, CVE-2015-7639, CVE-2015-7641, CVE-2015-7642, CVE-2015-7643 y CVE-2015-7644. • http://rhn.redhat.com/errata/RHSA-2015-1893.html http://rhn.redhat.com/errata/RHSA-2015-2024.html http://www.securityfocus.com/bid/77061 https://helpx.adobe.com/security/products/flash-player/apsb15-25.html https://access.redhat.com/security/cve/CVE-2015-7640 https://bugzilla.redhat.com/show_bug.cgi?id=1271383 •

CVSS: 10.0EPSS: 1%CPEs: 12EXPL: 0

CVE-2015-7641 – flash-plugin: multiple code execution issues fixed in APSB15-25

https://notcve.org/view.php?id=CVE-2015-7641

Use-after-free vulnerability in Adobe Flash Player before 18.0.0.252 and 19.x before 19.0.0.207 on Windows and OS X and before 11.2.202.535 on Linux, Adobe AIR before 19.0.0.213, Adobe AIR SDK before 19.0.0.213, and Adobe AIR SDK & Compiler before 19.0.0.213 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-7629, CVE-2015-7631, CVE-2015-7635, CVE-2015-7636, CVE-2015-7637, CVE-2015-7638, CVE-2015-7639, CVE-2015-7640, CVE-2015-7642, CVE-2015-7643, and CVE-2015-7644. Vulnerabilidad de uso después de la liberación de la memoria en Adobe Flash Player en versiones anteriores a 18.0.0.252 y 19.x en versiones anteriores a 19.0.0.207 en Windows y OS X y en versiones anteriores a 11.2.202.535 en Linux, Adobe AIR en versiones anteriores a 19.0.0.213, Adobe AIR SDK en versiones anteriores a 19.0.0.213 y Adobe AIR SDK & Compiler en versiones anteriores a 19.0.0.213 permite a atacantes ejecutar código arbitrario a través de vectores no especificados, una vulnerabilidad diferente a CVE-2015-7629, CVE-2015-7631, CVE-2015-7635, CVE-2015-7636, CVE-2015-7637, CVE-2015-7638, CVE-2015-7639, CVE-2015-7640, CVE-2015-7642, CVE-2015-7643 y CVE-2015-7644. • http://rhn.redhat.com/errata/RHSA-2015-1893.html http://rhn.redhat.com/errata/RHSA-2015-2024.html http://www.securityfocus.com/bid/77061 https://helpx.adobe.com/security/products/flash-player/apsb15-25.html https://access.redhat.com/security/cve/CVE-2015-7641 https://bugzilla.redhat.com/show_bug.cgi?id=1271383 •