VARIoT IoT vulnerabilities database

A Cross-site Scripting (XSS) vulnerability exists in FortiManager 5.2.1 and earlier and 5.0.10 and earlier via an unspecified parameter in the FortiWeb auto update service page. FortiManager Contains a cross-site scripting vulnerability.The information may be obtained and the information may be altered. FortiManager is prone to following security vulnerabilities: 1. A remote privilege-escalation vulnerability 2. An HTML-injection vulnerability 3. An SQL-injection vulnerability 4. A local privilege-escalation vulnerability 5. An arbitrary file-download vulnerability Exploiting these issues could allow an attacker to execute attacker-supplied HTML or script code in the browser of an unsuspecting user in the context of the affected site, steal cookie-based authentication credentials, compromise the application, access or modify data, exploit latent vulnerabilities in the underlying database, gain elevated privileges, or download arbitrary files from the web server and obtain potentially sensitive information. This may aid in other attacks. Fortinet FortiManager is a centralized network security management platform developed by Fortinet. The platform supports centralized management of any number of Fortinet devices, and can group devices into different management domains (ADOMs) to further simplify multi-device security deployment and management. The vulnerability stems from the lack of correct validation of client data in WEB applications. An attacker could exploit this vulnerability to execute client code

Cisco IOS XR 4.3.4 through 5.3.0 on ASR 9000 devices, when uRPF, PBR, QoS, or an ACL is configured, does not properly handle bridge-group virtual interface (BVI) traffic, which allows remote attackers to cause a denial of service (chip and card hangs and reloads) by triggering use of a BVI interface for IPv4 packets, aka Bug ID CSCur62957. Vendors have confirmed this vulnerability Bug ID CSCur62957 It is released as. Supplementary information : CWE Vulnerability type by CWE-19: Data Handling ( Data processing ) Has been identified. Cisco IOS is the interconnected network operating system used on most Cisco system routers and network switches. A denial of service vulnerability exists in Cisco IOS XR Software. Allows an attacker to exploit this vulnerability to initiate a denial of service attack. The vulnerability is caused by the incorrect handling of the bridge-group virtual interface (BVI )flow

Cross-site scripting (XSS) vulnerability in the login page in Cisco TC Software before 7.1.0 on Cisco TelePresence Collaboration Desk and Room Endpoints devices allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka Bug ID CSCuq94977. Vendors have confirmed this vulnerability Bug ID CSCuq94977 It is released as.By any third party Web Script or HTML May be inserted. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and launch other attacks. This issue being tracked by Cisco Bug ID CSCuq94977. Cisco TelePresence is a set of video conferencing solutions called "TelePresence" system of Cisco (Cisco)

SQL injection vulnerability in the Interactive Voice Response (IVR) component in Cisco Unified Communications Manager (UCM) 10.5(1.98991.13) allows remote attackers to execute arbitrary SQL commands via unspecified vectors, aka Bug ID CSCut21563. Vendors have confirmed this vulnerability Bug ID CSCut21563 It is released as.By any third party SQL The command may be executed. Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database. This issue being tracked by Cisco Bug ID CSCut21563. This component provides a scalable, distributed and highly available enterprise IP telephony call processing solution. Interactive Voice Response (IVR) is a component that provides an open, extensible, feature-rich foundation for creating and delivering IVR (Interactive Voice Response) applications. There is a SQL injection vulnerability in the IVR component of CUCM 10.5 (1.98991.13), which is caused by the fact that the program does not fully validate the input submitted by the user before constructing the SQL query statement

Open redirect vulnerability in the login page in Cisco TC Software before 6.3-26 and 7.x before 7.3.0 on Cisco TelePresence Collaboration Desk and Room Endpoints devices allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors, aka Bug ID CSCuq94980. Vendors have confirmed this vulnerability Bug ID CSCuq94980 It is released as. Supplementary information : CWE Vulnerability type by CWE-601: URL Redirection to Untrusted Site ( Open redirect ) Has been identified. http://cwe.mitre.org/data/definitions/601.htmlAny user by a third party Web You may be redirected to a site and run a phishing attack. An attacker can leverage this issue to conduct phishing attacks; other attacks are possible. Cisco TelePresence is a set of video conferencing solutions called "TelePresence" system of Cisco (Cisco)

Multiple cross-site scripting (XSS) vulnerabilities in filter search forms in admin web pages on Cisco Web Security Appliance (WSA) devices with software 8.5.0-497 allow remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCut39213. Vendors have confirmed this vulnerability Bug ID CSCut39213 It is released as.Skillfully crafted by a third party URL Through any Web Script or HTML May be inserted. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and launch other attacks. This issue being tracked by Cisco Bug ID CSCut39213. Cisco Web Security Appliance 8.5.0-497 is vulnerable; other versions may also be affected. The appliance provides SaaS-based access control, real-time network reporting and tracking, and security policy formulation. The vulnerability is caused by the program not adequately filtering user-submitted input

The default configuration of SGOS in Blue Coat ProxySG before 6.2.16.5, 6.5 before 6.5.7.1, and 6.6 before 6.6.2.1 forwards authentication challenges from upstream origin content servers (OCS) when used in an explicit proxy deployment, which makes it easier for remote attackers to obtain sensitive information via a 407 (aka Proxy Authentication Required) HTTP status code, as demonstrated when using NTLM authentication. Bluecoat ProxySG is prone to an authentication-bypass vulnerability. An attacker can exploit this issue to bypass the authentication mechanism and perform unauthorized actions. This may lead to further attacks. Blue Coat Systems ProxySG is a set of security Web gateway equipment of American Blue Coat Systems company. The appliance provides user authentication, web filtering, data loss protection, and more to control all web traffic. Remote attackers can use the 407 HTTP status code to exploit this vulnerability to obtain sensitive information. The following versions are affected: Blue Coat Systems ProxySG prior to 6.2.16.5, 6.5 prior to 6.5.7.1, and 6.6 prior to 6.6.2.1

Lenovo System Update (formerly ThinkVantage System Update) before 5.06.0034 uses predictable security tokens, which allows local users to gain privileges by sending a valid token with a command to the System Update service (SUService.exe) through an unspecified named pipe. Lenovo System Update is prone to a local privilege-escalation vulnerability. A local attacker can exploit this vulnerability to execute arbitrary commands with SYSTEM privileges. Lenovo System Update 5.6.0.27 and prior versions are vulnerable. Lenovo System Update (formerly known as ThinkVantage System Update) is a set of system automatic update tools provided by China Lenovo (Lenovo), which includes device driver updates, Windows system patch updates, etc

Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, as exploited in the wild in April 2015, a different vulnerability than CVE-2015-0347, CVE-2015-0350, CVE-2015-0352, CVE-2015-0353, CVE-2015-0354, CVE-2015-0355, CVE-2015-0360, CVE-2015-3038, CVE-2015-3041, and CVE-2015-3042. Attacks on this vulnerability 2015 Year 4 Observed on the moon. Failed exploit attempts will likely result in denial-of-service conditions. The product enables viewing of applications, content and video across screens and browsers. The following versions are affected: Adobe Flash Player 13.0.0.277 and earlier versions and 17.0.0.134 and earlier versions based on Windows and OS X platforms, Adobe Flash Player 11.2.202.451 and earlier versions based on Linux systems. (Widely exploited in April 2015). Background ========== The Adobe Flash Player is a renderer for the SWF file format, which is commonly used to provide interactive websites. Please review the CVE identifiers referenced below for details. Workaround ========== There is no known workaround at this time. Resolution ========== All Adobe Flash Player users should upgrade to the latest version: # emerge --sync # emerge --ask --oneshot -v ">=www-plugins/adobe-flash-11.2.202.457" References ========== [ 1 ] CVE-2015-0346 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-0346 [ 2 ] CVE-2015-0347 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-0347 [ 3 ] CVE-2015-0348 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-0348 [ 4 ] CVE-2015-0349 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-0349 [ 5 ] CVE-2015-0350 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-0350 [ 6 ] CVE-2015-0351 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-0351 [ 7 ] CVE-2015-0352 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-0352 [ 8 ] CVE-2015-0353 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-0353 [ 9 ] CVE-2015-0354 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-0354 [ 10 ] CVE-2015-0355 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-0355 [ 11 ] CVE-2015-0356 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-0356 [ 12 ] CVE-2015-0357 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-0357 [ 13 ] CVE-2015-0358 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-0358 [ 14 ] CVE-2015-0359 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-0359 [ 15 ] CVE-2015-0360 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-0360 [ 16 ] CVE-2015-3038 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-3038 [ 17 ] CVE-2015-3039 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-3039 [ 18 ] CVE-2015-3040 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-3040 [ 19 ] CVE-2015-3041 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-3041 [ 20 ] CVE-2015-3042 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-3042 [ 21 ] CVE-2015-3043 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-3043 [ 22 ] CVE-2015-3044 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-3044 Availability ============ This GLSA and any updates to it are available for viewing at the Gentoo Security Website: https://security.gentoo.org/glsa/201504-07 Concerns? ========= Security is a primary focus of Gentoo Linux and ensuring the confidentiality and security of our users' machines is of utmost importance to us. Any security concerns should be addressed to security@gentoo.org or alternatively, you may file a bug at https://bugs.gentoo.org. License ======= Copyright 2015 Gentoo Foundation, Inc; referenced text belongs to its owner(s). The contents of this document are licensed under the Creative Commons - Attribution / Share Alike license. http://creativecommons.org/licenses/by-sa/2.5 . -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ===================================================================== Red Hat Security Advisory Synopsis: Critical: flash-plugin security update Advisory ID: RHSA-2015:0813-01 Product: Red Hat Enterprise Linux Supplementary Advisory URL: https://rhn.redhat.com/errata/RHSA-2015-0813.html Issue date: 2015-04-15 CVE Names: CVE-2015-0346 CVE-2015-0347 CVE-2015-0348 CVE-2015-0349 CVE-2015-0350 CVE-2015-0351 CVE-2015-0352 CVE-2015-0353 CVE-2015-0354 CVE-2015-0355 CVE-2015-0356 CVE-2015-0357 CVE-2015-0358 CVE-2015-0359 CVE-2015-0360 CVE-2015-3038 CVE-2015-3039 CVE-2015-3040 CVE-2015-3041 CVE-2015-3042 CVE-2015-3043 CVE-2015-3044 ===================================================================== 1. Summary: An updated Adobe Flash Player package that fixes multiple security issues is now available for Red Hat Enterprise Linux 5 and 6 Supplementary. Red Hat Product Security has rated this update as having Critical security impact. Common Vulnerability Scoring System (CVSS) base scores, which give detailed severity ratings, are available for each vulnerability from the CVE links in the References section. 2. Relevant releases/architectures: Red Hat Enterprise Linux Desktop Supplementary (v. 5) - i386, x86_64 Red Hat Enterprise Linux Desktop Supplementary (v. 6) - i386, x86_64 Red Hat Enterprise Linux Server Supplementary (v. 5) - i386, x86_64 Red Hat Enterprise Linux Server Supplementary (v. 6) - i386, x86_64 Red Hat Enterprise Linux Workstation Supplementary (v. 6) - i386, x86_64 3. Description: The flash-plugin package contains a Mozilla Firefox compatible Adobe Flash Player web browser plug-in. These vulnerabilities are detailed in the Adobe Security Bulletin APSB15-06 listed in the References section. Multiple flaws were found in the way flash-plugin displayed certain SWF content. An attacker could use these flaws to create a specially crafted SWF file that would cause flash-plugin to crash or, potentially, execute arbitrary code when the victim loaded a page containing the malicious SWF content. (CVE-2015-0346, CVE-2015-0347, CVE-2015-0348, CVE-2015-0349, CVE-2015-0350, CVE-2015-0351, CVE-2015-0352, CVE-2015-0353, CVE-2015-0354, CVE-2015-0355, CVE-2015-0356, CVE-2015-0358, CVE-2015-0359, CVE-2015-0360, CVE-2015-3038, CVE-2015-3039, CVE-2015-3041, CVE-2015-3042, CVE-2015-3043) A security bypass flaw was found in flash-plugin that could lead to the disclosure of sensitive information. (CVE-2015-3044) Two memory information leak flaws were found in flash-plugin that could allow an attacker to potentially bypass ASLR (Address Space Layout Randomization) protection, and make it easier to exploit other flaws. 4. Solution: Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258 5. Bugs fixed (https://bugzilla.redhat.com/): 1211869 - flash-plugin: multiple code execution issues fixed in APSB15-06 1211894 - CVE-2015-3044 flash-plugin: security bypass leading to information disclosure (APSB15-06) 1211898 - CVE-2015-0357 CVE-2015-3040 flash-plugin: information leaks leading to ASLR bypass (APSB15-06) 6. Package List: Red Hat Enterprise Linux Desktop Supplementary (v. 5): i386: flash-plugin-11.2.202.457-1.el5.i386.rpm x86_64: flash-plugin-11.2.202.457-1.el5.i386.rpm Red Hat Enterprise Linux Server Supplementary (v. 5): i386: flash-plugin-11.2.202.457-1.el5.i386.rpm x86_64: flash-plugin-11.2.202.457-1.el5.i386.rpm Red Hat Enterprise Linux Desktop Supplementary (v. 6): i386: flash-plugin-11.2.202.457-1.el6_6.i686.rpm x86_64: flash-plugin-11.2.202.457-1.el6_6.i686.rpm Red Hat Enterprise Linux Server Supplementary (v. 6): i386: flash-plugin-11.2.202.457-1.el6_6.i686.rpm x86_64: flash-plugin-11.2.202.457-1.el6_6.i686.rpm Red Hat Enterprise Linux Workstation Supplementary (v. 6): i386: flash-plugin-11.2.202.457-1.el6_6.i686.rpm x86_64: flash-plugin-11.2.202.457-1.el6_6.i686.rpm These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from https://access.redhat.com/security/team/key/ 7. References: https://access.redhat.com/security/cve/CVE-2015-0346 https://access.redhat.com/security/cve/CVE-2015-0347 https://access.redhat.com/security/cve/CVE-2015-0348 https://access.redhat.com/security/cve/CVE-2015-0349 https://access.redhat.com/security/cve/CVE-2015-0350 https://access.redhat.com/security/cve/CVE-2015-0351 https://access.redhat.com/security/cve/CVE-2015-0352 https://access.redhat.com/security/cve/CVE-2015-0353 https://access.redhat.com/security/cve/CVE-2015-0354 https://access.redhat.com/security/cve/CVE-2015-0355 https://access.redhat.com/security/cve/CVE-2015-0356 https://access.redhat.com/security/cve/CVE-2015-0357 https://access.redhat.com/security/cve/CVE-2015-0358 https://access.redhat.com/security/cve/CVE-2015-0359 https://access.redhat.com/security/cve/CVE-2015-0360 https://access.redhat.com/security/cve/CVE-2015-3038 https://access.redhat.com/security/cve/CVE-2015-3039 https://access.redhat.com/security/cve/CVE-2015-3040 https://access.redhat.com/security/cve/CVE-2015-3041 https://access.redhat.com/security/cve/CVE-2015-3042 https://access.redhat.com/security/cve/CVE-2015-3043 https://access.redhat.com/security/cve/CVE-2015-3044 https://access.redhat.com/security/updates/classification/#critical https://helpx.adobe.com/security/products/flash-player/apsb15-06.html 8. Contact: The Red Hat security contact is <secalert@redhat.com>. More contact details at https://access.redhat.com/security/team/contact/ Copyright 2015 Red Hat, Inc. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iD8DBQFVLmOuXlSAg2UNWIIRAhCpAKCQYartNTxOyN7YneEoLHmonLVYxwCeJeZL 9gBkw1TFVgaSAtPj0Xh+ubg= =LVW2 -----END PGP SIGNATURE----- -- RHSA-announce mailing list RHSA-announce@redhat.com https://www.redhat.com/mailman/listinfo/rhsa-announce

Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-0347, CVE-2015-0350, CVE-2015-0352, CVE-2015-0353, CVE-2015-0354, CVE-2015-0355, CVE-2015-0360, CVE-2015-3038, CVE-2015-3041, and CVE-2015-3043. Failed exploit attempts will likely result in denial-of-service conditions. The product enables viewing of applications, content and video across screens and browsers. Background ========== The Adobe Flash Player is a renderer for the SWF file format, which is commonly used to provide interactive websites. Please review the CVE identifiers referenced below for details. Workaround ========== There is no known workaround at this time. Resolution ========== All Adobe Flash Player users should upgrade to the latest version: # emerge --sync # emerge --ask --oneshot -v ">=www-plugins/adobe-flash-11.2.202.457" References ========== [ 1 ] CVE-2015-0346 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-0346 [ 2 ] CVE-2015-0347 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-0347 [ 3 ] CVE-2015-0348 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-0348 [ 4 ] CVE-2015-0349 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-0349 [ 5 ] CVE-2015-0350 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-0350 [ 6 ] CVE-2015-0351 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-0351 [ 7 ] CVE-2015-0352 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-0352 [ 8 ] CVE-2015-0353 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-0353 [ 9 ] CVE-2015-0354 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-0354 [ 10 ] CVE-2015-0355 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-0355 [ 11 ] CVE-2015-0356 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-0356 [ 12 ] CVE-2015-0357 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-0357 [ 13 ] CVE-2015-0358 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-0358 [ 14 ] CVE-2015-0359 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-0359 [ 15 ] CVE-2015-0360 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-0360 [ 16 ] CVE-2015-3038 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-3038 [ 17 ] CVE-2015-3039 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-3039 [ 18 ] CVE-2015-3040 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-3040 [ 19 ] CVE-2015-3041 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-3041 [ 20 ] CVE-2015-3042 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-3042 [ 21 ] CVE-2015-3043 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-3043 [ 22 ] CVE-2015-3044 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-3044 Availability ============ This GLSA and any updates to it are available for viewing at the Gentoo Security Website: https://security.gentoo.org/glsa/201504-07 Concerns? ========= Security is a primary focus of Gentoo Linux and ensuring the confidentiality and security of our users' machines is of utmost importance to us. Any security concerns should be addressed to security@gentoo.org or alternatively, you may file a bug at https://bugs.gentoo.org. License ======= Copyright 2015 Gentoo Foundation, Inc; referenced text belongs to its owner(s). The contents of this document are licensed under the Creative Commons - Attribution / Share Alike license. http://creativecommons.org/licenses/by-sa/2.5 . -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ===================================================================== Red Hat Security Advisory Synopsis: Critical: flash-plugin security update Advisory ID: RHSA-2015:0813-01 Product: Red Hat Enterprise Linux Supplementary Advisory URL: https://rhn.redhat.com/errata/RHSA-2015-0813.html Issue date: 2015-04-15 CVE Names: CVE-2015-0346 CVE-2015-0347 CVE-2015-0348 CVE-2015-0349 CVE-2015-0350 CVE-2015-0351 CVE-2015-0352 CVE-2015-0353 CVE-2015-0354 CVE-2015-0355 CVE-2015-0356 CVE-2015-0357 CVE-2015-0358 CVE-2015-0359 CVE-2015-0360 CVE-2015-3038 CVE-2015-3039 CVE-2015-3040 CVE-2015-3041 CVE-2015-3042 CVE-2015-3043 CVE-2015-3044 ===================================================================== 1. Summary: An updated Adobe Flash Player package that fixes multiple security issues is now available for Red Hat Enterprise Linux 5 and 6 Supplementary. Red Hat Product Security has rated this update as having Critical security impact. Common Vulnerability Scoring System (CVSS) base scores, which give detailed severity ratings, are available for each vulnerability from the CVE links in the References section. 2. Relevant releases/architectures: Red Hat Enterprise Linux Desktop Supplementary (v. 5) - i386, x86_64 Red Hat Enterprise Linux Desktop Supplementary (v. 6) - i386, x86_64 Red Hat Enterprise Linux Server Supplementary (v. 5) - i386, x86_64 Red Hat Enterprise Linux Server Supplementary (v. 6) - i386, x86_64 Red Hat Enterprise Linux Workstation Supplementary (v. 6) - i386, x86_64 3. Description: The flash-plugin package contains a Mozilla Firefox compatible Adobe Flash Player web browser plug-in. These vulnerabilities are detailed in the Adobe Security Bulletin APSB15-06 listed in the References section. Multiple flaws were found in the way flash-plugin displayed certain SWF content. An attacker could use these flaws to create a specially crafted SWF file that would cause flash-plugin to crash or, potentially, execute arbitrary code when the victim loaded a page containing the malicious SWF content. (CVE-2015-0346, CVE-2015-0347, CVE-2015-0348, CVE-2015-0349, CVE-2015-0350, CVE-2015-0351, CVE-2015-0352, CVE-2015-0353, CVE-2015-0354, CVE-2015-0355, CVE-2015-0356, CVE-2015-0358, CVE-2015-0359, CVE-2015-0360, CVE-2015-3038, CVE-2015-3039, CVE-2015-3041, CVE-2015-3042, CVE-2015-3043) A security bypass flaw was found in flash-plugin that could lead to the disclosure of sensitive information. (CVE-2015-3044) Two memory information leak flaws were found in flash-plugin that could allow an attacker to potentially bypass ASLR (Address Space Layout Randomization) protection, and make it easier to exploit other flaws. 4. Solution: Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258 5. Bugs fixed (https://bugzilla.redhat.com/): 1211869 - flash-plugin: multiple code execution issues fixed in APSB15-06 1211894 - CVE-2015-3044 flash-plugin: security bypass leading to information disclosure (APSB15-06) 1211898 - CVE-2015-0357 CVE-2015-3040 flash-plugin: information leaks leading to ASLR bypass (APSB15-06) 6. Package List: Red Hat Enterprise Linux Desktop Supplementary (v. 5): i386: flash-plugin-11.2.202.457-1.el5.i386.rpm x86_64: flash-plugin-11.2.202.457-1.el5.i386.rpm Red Hat Enterprise Linux Server Supplementary (v. 5): i386: flash-plugin-11.2.202.457-1.el5.i386.rpm x86_64: flash-plugin-11.2.202.457-1.el5.i386.rpm Red Hat Enterprise Linux Desktop Supplementary (v. 6): i386: flash-plugin-11.2.202.457-1.el6_6.i686.rpm x86_64: flash-plugin-11.2.202.457-1.el6_6.i686.rpm Red Hat Enterprise Linux Server Supplementary (v. 6): i386: flash-plugin-11.2.202.457-1.el6_6.i686.rpm x86_64: flash-plugin-11.2.202.457-1.el6_6.i686.rpm Red Hat Enterprise Linux Workstation Supplementary (v. 6): i386: flash-plugin-11.2.202.457-1.el6_6.i686.rpm x86_64: flash-plugin-11.2.202.457-1.el6_6.i686.rpm These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from https://access.redhat.com/security/team/key/ 7. References: https://access.redhat.com/security/cve/CVE-2015-0346 https://access.redhat.com/security/cve/CVE-2015-0347 https://access.redhat.com/security/cve/CVE-2015-0348 https://access.redhat.com/security/cve/CVE-2015-0349 https://access.redhat.com/security/cve/CVE-2015-0350 https://access.redhat.com/security/cve/CVE-2015-0351 https://access.redhat.com/security/cve/CVE-2015-0352 https://access.redhat.com/security/cve/CVE-2015-0353 https://access.redhat.com/security/cve/CVE-2015-0354 https://access.redhat.com/security/cve/CVE-2015-0355 https://access.redhat.com/security/cve/CVE-2015-0356 https://access.redhat.com/security/cve/CVE-2015-0357 https://access.redhat.com/security/cve/CVE-2015-0358 https://access.redhat.com/security/cve/CVE-2015-0359 https://access.redhat.com/security/cve/CVE-2015-0360 https://access.redhat.com/security/cve/CVE-2015-3038 https://access.redhat.com/security/cve/CVE-2015-3039 https://access.redhat.com/security/cve/CVE-2015-3040 https://access.redhat.com/security/cve/CVE-2015-3041 https://access.redhat.com/security/cve/CVE-2015-3042 https://access.redhat.com/security/cve/CVE-2015-3043 https://access.redhat.com/security/cve/CVE-2015-3044 https://access.redhat.com/security/updates/classification/#critical https://helpx.adobe.com/security/products/flash-player/apsb15-06.html 8. Contact: The Red Hat security contact is <secalert@redhat.com>. More contact details at https://access.redhat.com/security/team/contact/ Copyright 2015 Red Hat, Inc. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iD8DBQFVLmOuXlSAg2UNWIIRAhCpAKCQYartNTxOyN7YneEoLHmonLVYxwCeJeZL 9gBkw1TFVgaSAtPj0Xh+ubg= =LVW2 -----END PGP SIGNATURE----- -- RHSA-announce mailing list RHSA-announce@redhat.com https://www.redhat.com/mailman/listinfo/rhsa-announce

Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-0347, CVE-2015-0350, CVE-2015-0352, CVE-2015-0353, CVE-2015-0354, CVE-2015-0355, CVE-2015-0360, CVE-2015-3038, CVE-2015-3042, and CVE-2015-3043. Failed exploit attempts will likely result in denial-of-service conditions. The product enables viewing of applications, content and video across screens and browsers. Background ========== The Adobe Flash Player is a renderer for the SWF file format, which is commonly used to provide interactive websites. Please review the CVE identifiers referenced below for details. Workaround ========== There is no known workaround at this time. Resolution ========== All Adobe Flash Player users should upgrade to the latest version: # emerge --sync # emerge --ask --oneshot -v ">=www-plugins/adobe-flash-11.2.202.457" References ========== [ 1 ] CVE-2015-0346 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-0346 [ 2 ] CVE-2015-0347 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-0347 [ 3 ] CVE-2015-0348 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-0348 [ 4 ] CVE-2015-0349 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-0349 [ 5 ] CVE-2015-0350 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-0350 [ 6 ] CVE-2015-0351 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-0351 [ 7 ] CVE-2015-0352 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-0352 [ 8 ] CVE-2015-0353 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-0353 [ 9 ] CVE-2015-0354 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-0354 [ 10 ] CVE-2015-0355 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-0355 [ 11 ] CVE-2015-0356 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-0356 [ 12 ] CVE-2015-0357 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-0357 [ 13 ] CVE-2015-0358 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-0358 [ 14 ] CVE-2015-0359 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-0359 [ 15 ] CVE-2015-0360 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-0360 [ 16 ] CVE-2015-3038 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-3038 [ 17 ] CVE-2015-3039 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-3039 [ 18 ] CVE-2015-3040 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-3040 [ 19 ] CVE-2015-3041 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-3041 [ 20 ] CVE-2015-3042 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-3042 [ 21 ] CVE-2015-3043 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-3043 [ 22 ] CVE-2015-3044 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-3044 Availability ============ This GLSA and any updates to it are available for viewing at the Gentoo Security Website: https://security.gentoo.org/glsa/201504-07 Concerns? ========= Security is a primary focus of Gentoo Linux and ensuring the confidentiality and security of our users' machines is of utmost importance to us. Any security concerns should be addressed to security@gentoo.org or alternatively, you may file a bug at https://bugs.gentoo.org. License ======= Copyright 2015 Gentoo Foundation, Inc; referenced text belongs to its owner(s). The contents of this document are licensed under the Creative Commons - Attribution / Share Alike license. http://creativecommons.org/licenses/by-sa/2.5 . -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ===================================================================== Red Hat Security Advisory Synopsis: Critical: flash-plugin security update Advisory ID: RHSA-2015:0813-01 Product: Red Hat Enterprise Linux Supplementary Advisory URL: https://rhn.redhat.com/errata/RHSA-2015-0813.html Issue date: 2015-04-15 CVE Names: CVE-2015-0346 CVE-2015-0347 CVE-2015-0348 CVE-2015-0349 CVE-2015-0350 CVE-2015-0351 CVE-2015-0352 CVE-2015-0353 CVE-2015-0354 CVE-2015-0355 CVE-2015-0356 CVE-2015-0357 CVE-2015-0358 CVE-2015-0359 CVE-2015-0360 CVE-2015-3038 CVE-2015-3039 CVE-2015-3040 CVE-2015-3041 CVE-2015-3042 CVE-2015-3043 CVE-2015-3044 ===================================================================== 1. Summary: An updated Adobe Flash Player package that fixes multiple security issues is now available for Red Hat Enterprise Linux 5 and 6 Supplementary. Red Hat Product Security has rated this update as having Critical security impact. Common Vulnerability Scoring System (CVSS) base scores, which give detailed severity ratings, are available for each vulnerability from the CVE links in the References section. 2. Relevant releases/architectures: Red Hat Enterprise Linux Desktop Supplementary (v. 5) - i386, x86_64 Red Hat Enterprise Linux Desktop Supplementary (v. 6) - i386, x86_64 Red Hat Enterprise Linux Server Supplementary (v. 5) - i386, x86_64 Red Hat Enterprise Linux Server Supplementary (v. 6) - i386, x86_64 Red Hat Enterprise Linux Workstation Supplementary (v. 6) - i386, x86_64 3. Description: The flash-plugin package contains a Mozilla Firefox compatible Adobe Flash Player web browser plug-in. These vulnerabilities are detailed in the Adobe Security Bulletin APSB15-06 listed in the References section. Multiple flaws were found in the way flash-plugin displayed certain SWF content. An attacker could use these flaws to create a specially crafted SWF file that would cause flash-plugin to crash or, potentially, execute arbitrary code when the victim loaded a page containing the malicious SWF content. (CVE-2015-0346, CVE-2015-0347, CVE-2015-0348, CVE-2015-0349, CVE-2015-0350, CVE-2015-0351, CVE-2015-0352, CVE-2015-0353, CVE-2015-0354, CVE-2015-0355, CVE-2015-0356, CVE-2015-0358, CVE-2015-0359, CVE-2015-0360, CVE-2015-3038, CVE-2015-3039, CVE-2015-3041, CVE-2015-3042, CVE-2015-3043) A security bypass flaw was found in flash-plugin that could lead to the disclosure of sensitive information. (CVE-2015-3044) Two memory information leak flaws were found in flash-plugin that could allow an attacker to potentially bypass ASLR (Address Space Layout Randomization) protection, and make it easier to exploit other flaws. 4. Solution: Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258 5. Bugs fixed (https://bugzilla.redhat.com/): 1211869 - flash-plugin: multiple code execution issues fixed in APSB15-06 1211894 - CVE-2015-3044 flash-plugin: security bypass leading to information disclosure (APSB15-06) 1211898 - CVE-2015-0357 CVE-2015-3040 flash-plugin: information leaks leading to ASLR bypass (APSB15-06) 6. Package List: Red Hat Enterprise Linux Desktop Supplementary (v. 5): i386: flash-plugin-11.2.202.457-1.el5.i386.rpm x86_64: flash-plugin-11.2.202.457-1.el5.i386.rpm Red Hat Enterprise Linux Server Supplementary (v. 5): i386: flash-plugin-11.2.202.457-1.el5.i386.rpm x86_64: flash-plugin-11.2.202.457-1.el5.i386.rpm Red Hat Enterprise Linux Desktop Supplementary (v. 6): i386: flash-plugin-11.2.202.457-1.el6_6.i686.rpm x86_64: flash-plugin-11.2.202.457-1.el6_6.i686.rpm Red Hat Enterprise Linux Server Supplementary (v. 6): i386: flash-plugin-11.2.202.457-1.el6_6.i686.rpm x86_64: flash-plugin-11.2.202.457-1.el6_6.i686.rpm Red Hat Enterprise Linux Workstation Supplementary (v. 6): i386: flash-plugin-11.2.202.457-1.el6_6.i686.rpm x86_64: flash-plugin-11.2.202.457-1.el6_6.i686.rpm These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from https://access.redhat.com/security/team/key/ 7. References: https://access.redhat.com/security/cve/CVE-2015-0346 https://access.redhat.com/security/cve/CVE-2015-0347 https://access.redhat.com/security/cve/CVE-2015-0348 https://access.redhat.com/security/cve/CVE-2015-0349 https://access.redhat.com/security/cve/CVE-2015-0350 https://access.redhat.com/security/cve/CVE-2015-0351 https://access.redhat.com/security/cve/CVE-2015-0352 https://access.redhat.com/security/cve/CVE-2015-0353 https://access.redhat.com/security/cve/CVE-2015-0354 https://access.redhat.com/security/cve/CVE-2015-0355 https://access.redhat.com/security/cve/CVE-2015-0356 https://access.redhat.com/security/cve/CVE-2015-0357 https://access.redhat.com/security/cve/CVE-2015-0358 https://access.redhat.com/security/cve/CVE-2015-0359 https://access.redhat.com/security/cve/CVE-2015-0360 https://access.redhat.com/security/cve/CVE-2015-3038 https://access.redhat.com/security/cve/CVE-2015-3039 https://access.redhat.com/security/cve/CVE-2015-3040 https://access.redhat.com/security/cve/CVE-2015-3041 https://access.redhat.com/security/cve/CVE-2015-3042 https://access.redhat.com/security/cve/CVE-2015-3043 https://access.redhat.com/security/cve/CVE-2015-3044 https://access.redhat.com/security/updates/classification/#critical https://helpx.adobe.com/security/products/flash-player/apsb15-06.html 8. Contact: The Red Hat security contact is <secalert@redhat.com>. More contact details at https://access.redhat.com/security/team/contact/ Copyright 2015 Red Hat, Inc. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iD8DBQFVLmOuXlSAg2UNWIIRAhCpAKCQYartNTxOyN7YneEoLHmonLVYxwCeJeZL 9gBkw1TFVgaSAtPj0Xh+ubg= =LVW2 -----END PGP SIGNATURE----- -- RHSA-announce mailing list RHSA-announce@redhat.com https://www.redhat.com/mailman/listinfo/rhsa-announce

Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to bypass intended access restrictions and obtain sensitive information via unspecified vectors. Adobe Flash Player is prone to an unspecified security-bypass vulnerability. Attackers can exploit this issue to bypass certain security restrictions and perform unauthorized actions; this may aid in launching further attacks. The product enables viewing of applications, content and video across screens and browsers. Background ========== The Adobe Flash Player is a renderer for the SWF file format, which is commonly used to provide interactive websites. Please review the CVE identifiers referenced below for details. Impact ====== A remote attacker could possibly execute arbitrary code with the privileges of the process or cause a Denial of Service condition. Workaround ========== There is no known workaround at this time. Resolution ========== All Adobe Flash Player users should upgrade to the latest version: # emerge --sync # emerge --ask --oneshot -v ">=www-plugins/adobe-flash-11.2.202.457" References ========== [ 1 ] CVE-2015-0346 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-0346 [ 2 ] CVE-2015-0347 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-0347 [ 3 ] CVE-2015-0348 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-0348 [ 4 ] CVE-2015-0349 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-0349 [ 5 ] CVE-2015-0350 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-0350 [ 6 ] CVE-2015-0351 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-0351 [ 7 ] CVE-2015-0352 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-0352 [ 8 ] CVE-2015-0353 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-0353 [ 9 ] CVE-2015-0354 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-0354 [ 10 ] CVE-2015-0355 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-0355 [ 11 ] CVE-2015-0356 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-0356 [ 12 ] CVE-2015-0357 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-0357 [ 13 ] CVE-2015-0358 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-0358 [ 14 ] CVE-2015-0359 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-0359 [ 15 ] CVE-2015-0360 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-0360 [ 16 ] CVE-2015-3038 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-3038 [ 17 ] CVE-2015-3039 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-3039 [ 18 ] CVE-2015-3040 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-3040 [ 19 ] CVE-2015-3041 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-3041 [ 20 ] CVE-2015-3042 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-3042 [ 21 ] CVE-2015-3043 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-3043 [ 22 ] CVE-2015-3044 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-3044 Availability ============ This GLSA and any updates to it are available for viewing at the Gentoo Security Website: https://security.gentoo.org/glsa/201504-07 Concerns? ========= Security is a primary focus of Gentoo Linux and ensuring the confidentiality and security of our users' machines is of utmost importance to us. Any security concerns should be addressed to security@gentoo.org or alternatively, you may file a bug at https://bugs.gentoo.org. License ======= Copyright 2015 Gentoo Foundation, Inc; referenced text belongs to its owner(s). The contents of this document are licensed under the Creative Commons - Attribution / Share Alike license. http://creativecommons.org/licenses/by-sa/2.5 . -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ===================================================================== Red Hat Security Advisory Synopsis: Critical: flash-plugin security update Advisory ID: RHSA-2015:0813-01 Product: Red Hat Enterprise Linux Supplementary Advisory URL: https://rhn.redhat.com/errata/RHSA-2015-0813.html Issue date: 2015-04-15 CVE Names: CVE-2015-0346 CVE-2015-0347 CVE-2015-0348 CVE-2015-0349 CVE-2015-0350 CVE-2015-0351 CVE-2015-0352 CVE-2015-0353 CVE-2015-0354 CVE-2015-0355 CVE-2015-0356 CVE-2015-0357 CVE-2015-0358 CVE-2015-0359 CVE-2015-0360 CVE-2015-3038 CVE-2015-3039 CVE-2015-3040 CVE-2015-3041 CVE-2015-3042 CVE-2015-3043 CVE-2015-3044 ===================================================================== 1. Summary: An updated Adobe Flash Player package that fixes multiple security issues is now available for Red Hat Enterprise Linux 5 and 6 Supplementary. Red Hat Product Security has rated this update as having Critical security impact. Common Vulnerability Scoring System (CVSS) base scores, which give detailed severity ratings, are available for each vulnerability from the CVE links in the References section. 2. Relevant releases/architectures: Red Hat Enterprise Linux Desktop Supplementary (v. 5) - i386, x86_64 Red Hat Enterprise Linux Desktop Supplementary (v. 6) - i386, x86_64 Red Hat Enterprise Linux Server Supplementary (v. 5) - i386, x86_64 Red Hat Enterprise Linux Server Supplementary (v. 6) - i386, x86_64 Red Hat Enterprise Linux Workstation Supplementary (v. 6) - i386, x86_64 3. Description: The flash-plugin package contains a Mozilla Firefox compatible Adobe Flash Player web browser plug-in. These vulnerabilities are detailed in the Adobe Security Bulletin APSB15-06 listed in the References section. Multiple flaws were found in the way flash-plugin displayed certain SWF content. An attacker could use these flaws to create a specially crafted SWF file that would cause flash-plugin to crash or, potentially, execute arbitrary code when the victim loaded a page containing the malicious SWF content. (CVE-2015-0346, CVE-2015-0347, CVE-2015-0348, CVE-2015-0349, CVE-2015-0350, CVE-2015-0351, CVE-2015-0352, CVE-2015-0353, CVE-2015-0354, CVE-2015-0355, CVE-2015-0356, CVE-2015-0358, CVE-2015-0359, CVE-2015-0360, CVE-2015-3038, CVE-2015-3039, CVE-2015-3041, CVE-2015-3042, CVE-2015-3043) A security bypass flaw was found in flash-plugin that could lead to the disclosure of sensitive information. (CVE-2015-3044) Two memory information leak flaws were found in flash-plugin that could allow an attacker to potentially bypass ASLR (Address Space Layout Randomization) protection, and make it easier to exploit other flaws. 4. Solution: Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258 5. Bugs fixed (https://bugzilla.redhat.com/): 1211869 - flash-plugin: multiple code execution issues fixed in APSB15-06 1211894 - CVE-2015-3044 flash-plugin: security bypass leading to information disclosure (APSB15-06) 1211898 - CVE-2015-0357 CVE-2015-3040 flash-plugin: information leaks leading to ASLR bypass (APSB15-06) 6. Package List: Red Hat Enterprise Linux Desktop Supplementary (v. 5): i386: flash-plugin-11.2.202.457-1.el5.i386.rpm x86_64: flash-plugin-11.2.202.457-1.el5.i386.rpm Red Hat Enterprise Linux Server Supplementary (v. 5): i386: flash-plugin-11.2.202.457-1.el5.i386.rpm x86_64: flash-plugin-11.2.202.457-1.el5.i386.rpm Red Hat Enterprise Linux Desktop Supplementary (v. 6): i386: flash-plugin-11.2.202.457-1.el6_6.i686.rpm x86_64: flash-plugin-11.2.202.457-1.el6_6.i686.rpm Red Hat Enterprise Linux Server Supplementary (v. 6): i386: flash-plugin-11.2.202.457-1.el6_6.i686.rpm x86_64: flash-plugin-11.2.202.457-1.el6_6.i686.rpm Red Hat Enterprise Linux Workstation Supplementary (v. 6): i386: flash-plugin-11.2.202.457-1.el6_6.i686.rpm x86_64: flash-plugin-11.2.202.457-1.el6_6.i686.rpm These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from https://access.redhat.com/security/team/key/ 7. References: https://access.redhat.com/security/cve/CVE-2015-0346 https://access.redhat.com/security/cve/CVE-2015-0347 https://access.redhat.com/security/cve/CVE-2015-0348 https://access.redhat.com/security/cve/CVE-2015-0349 https://access.redhat.com/security/cve/CVE-2015-0350 https://access.redhat.com/security/cve/CVE-2015-0351 https://access.redhat.com/security/cve/CVE-2015-0352 https://access.redhat.com/security/cve/CVE-2015-0353 https://access.redhat.com/security/cve/CVE-2015-0354 https://access.redhat.com/security/cve/CVE-2015-0355 https://access.redhat.com/security/cve/CVE-2015-0356 https://access.redhat.com/security/cve/CVE-2015-0357 https://access.redhat.com/security/cve/CVE-2015-0358 https://access.redhat.com/security/cve/CVE-2015-0359 https://access.redhat.com/security/cve/CVE-2015-0360 https://access.redhat.com/security/cve/CVE-2015-3038 https://access.redhat.com/security/cve/CVE-2015-3039 https://access.redhat.com/security/cve/CVE-2015-3040 https://access.redhat.com/security/cve/CVE-2015-3041 https://access.redhat.com/security/cve/CVE-2015-3042 https://access.redhat.com/security/cve/CVE-2015-3043 https://access.redhat.com/security/cve/CVE-2015-3044 https://access.redhat.com/security/updates/classification/#critical https://helpx.adobe.com/security/products/flash-player/apsb15-06.html 8. Contact: The Red Hat security contact is <secalert@redhat.com>. More contact details at https://access.redhat.com/security/team/contact/ Copyright 2015 Red Hat, Inc. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iD8DBQFVLmOuXlSAg2UNWIIRAhCpAKCQYartNTxOyN7YneEoLHmonLVYxwCeJeZL 9gBkw1TFVgaSAtPj0Xh+ubg= =LVW2 -----END PGP SIGNATURE----- -- RHSA-announce mailing list RHSA-announce@redhat.com https://www.redhat.com/mailman/listinfo/rhsa-announce

Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-0347, CVE-2015-0350, CVE-2015-0352, CVE-2015-0353, CVE-2015-0354, CVE-2015-0355, CVE-2015-0360, CVE-2015-3041, CVE-2015-3042, and CVE-2015-3043. Failed exploit attempts will likely result in denial-of-service conditions. The product enables viewing of applications, content and video across screens and browsers. Background ========== The Adobe Flash Player is a renderer for the SWF file format, which is commonly used to provide interactive websites. Please review the CVE identifiers referenced below for details. Workaround ========== There is no known workaround at this time. Resolution ========== All Adobe Flash Player users should upgrade to the latest version: # emerge --sync # emerge --ask --oneshot -v ">=www-plugins/adobe-flash-11.2.202.457" References ========== [ 1 ] CVE-2015-0346 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-0346 [ 2 ] CVE-2015-0347 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-0347 [ 3 ] CVE-2015-0348 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-0348 [ 4 ] CVE-2015-0349 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-0349 [ 5 ] CVE-2015-0350 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-0350 [ 6 ] CVE-2015-0351 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-0351 [ 7 ] CVE-2015-0352 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-0352 [ 8 ] CVE-2015-0353 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-0353 [ 9 ] CVE-2015-0354 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-0354 [ 10 ] CVE-2015-0355 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-0355 [ 11 ] CVE-2015-0356 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-0356 [ 12 ] CVE-2015-0357 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-0357 [ 13 ] CVE-2015-0358 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-0358 [ 14 ] CVE-2015-0359 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-0359 [ 15 ] CVE-2015-0360 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-0360 [ 16 ] CVE-2015-3038 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-3038 [ 17 ] CVE-2015-3039 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-3039 [ 18 ] CVE-2015-3040 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-3040 [ 19 ] CVE-2015-3041 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-3041 [ 20 ] CVE-2015-3042 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-3042 [ 21 ] CVE-2015-3043 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-3043 [ 22 ] CVE-2015-3044 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-3044 Availability ============ This GLSA and any updates to it are available for viewing at the Gentoo Security Website: https://security.gentoo.org/glsa/201504-07 Concerns? ========= Security is a primary focus of Gentoo Linux and ensuring the confidentiality and security of our users' machines is of utmost importance to us. Any security concerns should be addressed to security@gentoo.org or alternatively, you may file a bug at https://bugs.gentoo.org. License ======= Copyright 2015 Gentoo Foundation, Inc; referenced text belongs to its owner(s). The contents of this document are licensed under the Creative Commons - Attribution / Share Alike license. http://creativecommons.org/licenses/by-sa/2.5 . -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ===================================================================== Red Hat Security Advisory Synopsis: Critical: flash-plugin security update Advisory ID: RHSA-2015:0813-01 Product: Red Hat Enterprise Linux Supplementary Advisory URL: https://rhn.redhat.com/errata/RHSA-2015-0813.html Issue date: 2015-04-15 CVE Names: CVE-2015-0346 CVE-2015-0347 CVE-2015-0348 CVE-2015-0349 CVE-2015-0350 CVE-2015-0351 CVE-2015-0352 CVE-2015-0353 CVE-2015-0354 CVE-2015-0355 CVE-2015-0356 CVE-2015-0357 CVE-2015-0358 CVE-2015-0359 CVE-2015-0360 CVE-2015-3038 CVE-2015-3039 CVE-2015-3040 CVE-2015-3041 CVE-2015-3042 CVE-2015-3043 CVE-2015-3044 ===================================================================== 1. Summary: An updated Adobe Flash Player package that fixes multiple security issues is now available for Red Hat Enterprise Linux 5 and 6 Supplementary. Red Hat Product Security has rated this update as having Critical security impact. Common Vulnerability Scoring System (CVSS) base scores, which give detailed severity ratings, are available for each vulnerability from the CVE links in the References section. 2. Relevant releases/architectures: Red Hat Enterprise Linux Desktop Supplementary (v. 5) - i386, x86_64 Red Hat Enterprise Linux Desktop Supplementary (v. 6) - i386, x86_64 Red Hat Enterprise Linux Server Supplementary (v. 5) - i386, x86_64 Red Hat Enterprise Linux Server Supplementary (v. 6) - i386, x86_64 Red Hat Enterprise Linux Workstation Supplementary (v. 6) - i386, x86_64 3. Description: The flash-plugin package contains a Mozilla Firefox compatible Adobe Flash Player web browser plug-in. These vulnerabilities are detailed in the Adobe Security Bulletin APSB15-06 listed in the References section. Multiple flaws were found in the way flash-plugin displayed certain SWF content. An attacker could use these flaws to create a specially crafted SWF file that would cause flash-plugin to crash or, potentially, execute arbitrary code when the victim loaded a page containing the malicious SWF content. (CVE-2015-0346, CVE-2015-0347, CVE-2015-0348, CVE-2015-0349, CVE-2015-0350, CVE-2015-0351, CVE-2015-0352, CVE-2015-0353, CVE-2015-0354, CVE-2015-0355, CVE-2015-0356, CVE-2015-0358, CVE-2015-0359, CVE-2015-0360, CVE-2015-3038, CVE-2015-3039, CVE-2015-3041, CVE-2015-3042, CVE-2015-3043) A security bypass flaw was found in flash-plugin that could lead to the disclosure of sensitive information. (CVE-2015-3044) Two memory information leak flaws were found in flash-plugin that could allow an attacker to potentially bypass ASLR (Address Space Layout Randomization) protection, and make it easier to exploit other flaws. 4. Solution: Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258 5. Bugs fixed (https://bugzilla.redhat.com/): 1211869 - flash-plugin: multiple code execution issues fixed in APSB15-06 1211894 - CVE-2015-3044 flash-plugin: security bypass leading to information disclosure (APSB15-06) 1211898 - CVE-2015-0357 CVE-2015-3040 flash-plugin: information leaks leading to ASLR bypass (APSB15-06) 6. Package List: Red Hat Enterprise Linux Desktop Supplementary (v. 5): i386: flash-plugin-11.2.202.457-1.el5.i386.rpm x86_64: flash-plugin-11.2.202.457-1.el5.i386.rpm Red Hat Enterprise Linux Server Supplementary (v. 5): i386: flash-plugin-11.2.202.457-1.el5.i386.rpm x86_64: flash-plugin-11.2.202.457-1.el5.i386.rpm Red Hat Enterprise Linux Desktop Supplementary (v. 6): i386: flash-plugin-11.2.202.457-1.el6_6.i686.rpm x86_64: flash-plugin-11.2.202.457-1.el6_6.i686.rpm Red Hat Enterprise Linux Server Supplementary (v. 6): i386: flash-plugin-11.2.202.457-1.el6_6.i686.rpm x86_64: flash-plugin-11.2.202.457-1.el6_6.i686.rpm Red Hat Enterprise Linux Workstation Supplementary (v. 6): i386: flash-plugin-11.2.202.457-1.el6_6.i686.rpm x86_64: flash-plugin-11.2.202.457-1.el6_6.i686.rpm These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from https://access.redhat.com/security/team/key/ 7. References: https://access.redhat.com/security/cve/CVE-2015-0346 https://access.redhat.com/security/cve/CVE-2015-0347 https://access.redhat.com/security/cve/CVE-2015-0348 https://access.redhat.com/security/cve/CVE-2015-0349 https://access.redhat.com/security/cve/CVE-2015-0350 https://access.redhat.com/security/cve/CVE-2015-0351 https://access.redhat.com/security/cve/CVE-2015-0352 https://access.redhat.com/security/cve/CVE-2015-0353 https://access.redhat.com/security/cve/CVE-2015-0354 https://access.redhat.com/security/cve/CVE-2015-0355 https://access.redhat.com/security/cve/CVE-2015-0356 https://access.redhat.com/security/cve/CVE-2015-0357 https://access.redhat.com/security/cve/CVE-2015-0358 https://access.redhat.com/security/cve/CVE-2015-0359 https://access.redhat.com/security/cve/CVE-2015-0360 https://access.redhat.com/security/cve/CVE-2015-3038 https://access.redhat.com/security/cve/CVE-2015-3039 https://access.redhat.com/security/cve/CVE-2015-3040 https://access.redhat.com/security/cve/CVE-2015-3041 https://access.redhat.com/security/cve/CVE-2015-3042 https://access.redhat.com/security/cve/CVE-2015-3043 https://access.redhat.com/security/cve/CVE-2015-3044 https://access.redhat.com/security/updates/classification/#critical https://helpx.adobe.com/security/products/flash-player/apsb15-06.html 8. Contact: The Red Hat security contact is <secalert@redhat.com>. More contact details at https://access.redhat.com/security/team/contact/ Copyright 2015 Red Hat, Inc. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iD8DBQFVLmOuXlSAg2UNWIIRAhCpAKCQYartNTxOyN7YneEoLHmonLVYxwCeJeZL 9gBkw1TFVgaSAtPj0Xh+ubg= =LVW2 -----END PGP SIGNATURE----- -- RHSA-announce mailing list RHSA-announce@redhat.com https://www.redhat.com/mailman/listinfo/rhsa-announce

Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux does not properly restrict discovery of memory addresses, which allows attackers to bypass the ASLR protection mechanism via unspecified vectors, a different vulnerability than CVE-2015-0357. This vulnerability CVE-2015-0357 Is a different vulnerability.By the attacker, ASLR Protection mechanisms may be bypassed. Adobe Flash Player is prone to multiple unspecified memory-corruption vulnerabilities. An attacker can leverage these issues to bypass certain security restrictions and execute arbitrary code in context of the affected application. The product enables viewing of applications, content and video across screens and browsers. Background ========== The Adobe Flash Player is a renderer for the SWF file format, which is commonly used to provide interactive websites. Please review the CVE identifiers referenced below for details. Workaround ========== There is no known workaround at this time. Resolution ========== All Adobe Flash Player users should upgrade to the latest version: # emerge --sync # emerge --ask --oneshot -v ">=www-plugins/adobe-flash-11.2.202.457" References ========== [ 1 ] CVE-2015-0346 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-0346 [ 2 ] CVE-2015-0347 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-0347 [ 3 ] CVE-2015-0348 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-0348 [ 4 ] CVE-2015-0349 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-0349 [ 5 ] CVE-2015-0350 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-0350 [ 6 ] CVE-2015-0351 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-0351 [ 7 ] CVE-2015-0352 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-0352 [ 8 ] CVE-2015-0353 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-0353 [ 9 ] CVE-2015-0354 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-0354 [ 10 ] CVE-2015-0355 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-0355 [ 11 ] CVE-2015-0356 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-0356 [ 12 ] CVE-2015-0357 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-0357 [ 13 ] CVE-2015-0358 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-0358 [ 14 ] CVE-2015-0359 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-0359 [ 15 ] CVE-2015-0360 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-0360 [ 16 ] CVE-2015-3038 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-3038 [ 17 ] CVE-2015-3039 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-3039 [ 18 ] CVE-2015-3040 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-3040 [ 19 ] CVE-2015-3041 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-3041 [ 20 ] CVE-2015-3042 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-3042 [ 21 ] CVE-2015-3043 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-3043 [ 22 ] CVE-2015-3044 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-3044 Availability ============ This GLSA and any updates to it are available for viewing at the Gentoo Security Website: https://security.gentoo.org/glsa/201504-07 Concerns? ========= Security is a primary focus of Gentoo Linux and ensuring the confidentiality and security of our users' machines is of utmost importance to us. Any security concerns should be addressed to security@gentoo.org or alternatively, you may file a bug at https://bugs.gentoo.org. License ======= Copyright 2015 Gentoo Foundation, Inc; referenced text belongs to its owner(s). The contents of this document are licensed under the Creative Commons - Attribution / Share Alike license. http://creativecommons.org/licenses/by-sa/2.5 . -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ===================================================================== Red Hat Security Advisory Synopsis: Critical: flash-plugin security update Advisory ID: RHSA-2015:0813-01 Product: Red Hat Enterprise Linux Supplementary Advisory URL: https://rhn.redhat.com/errata/RHSA-2015-0813.html Issue date: 2015-04-15 CVE Names: CVE-2015-0346 CVE-2015-0347 CVE-2015-0348 CVE-2015-0349 CVE-2015-0350 CVE-2015-0351 CVE-2015-0352 CVE-2015-0353 CVE-2015-0354 CVE-2015-0355 CVE-2015-0356 CVE-2015-0357 CVE-2015-0358 CVE-2015-0359 CVE-2015-0360 CVE-2015-3038 CVE-2015-3039 CVE-2015-3040 CVE-2015-3041 CVE-2015-3042 CVE-2015-3043 CVE-2015-3044 ===================================================================== 1. Summary: An updated Adobe Flash Player package that fixes multiple security issues is now available for Red Hat Enterprise Linux 5 and 6 Supplementary. Red Hat Product Security has rated this update as having Critical security impact. Common Vulnerability Scoring System (CVSS) base scores, which give detailed severity ratings, are available for each vulnerability from the CVE links in the References section. 2. Relevant releases/architectures: Red Hat Enterprise Linux Desktop Supplementary (v. 5) - i386, x86_64 Red Hat Enterprise Linux Desktop Supplementary (v. 6) - i386, x86_64 Red Hat Enterprise Linux Server Supplementary (v. 5) - i386, x86_64 Red Hat Enterprise Linux Server Supplementary (v. 6) - i386, x86_64 Red Hat Enterprise Linux Workstation Supplementary (v. 6) - i386, x86_64 3. Description: The flash-plugin package contains a Mozilla Firefox compatible Adobe Flash Player web browser plug-in. These vulnerabilities are detailed in the Adobe Security Bulletin APSB15-06 listed in the References section. Multiple flaws were found in the way flash-plugin displayed certain SWF content. An attacker could use these flaws to create a specially crafted SWF file that would cause flash-plugin to crash or, potentially, execute arbitrary code when the victim loaded a page containing the malicious SWF content. (CVE-2015-0346, CVE-2015-0347, CVE-2015-0348, CVE-2015-0349, CVE-2015-0350, CVE-2015-0351, CVE-2015-0352, CVE-2015-0353, CVE-2015-0354, CVE-2015-0355, CVE-2015-0356, CVE-2015-0358, CVE-2015-0359, CVE-2015-0360, CVE-2015-3038, CVE-2015-3039, CVE-2015-3041, CVE-2015-3042, CVE-2015-3043) A security bypass flaw was found in flash-plugin that could lead to the disclosure of sensitive information. (CVE-2015-3044) Two memory information leak flaws were found in flash-plugin that could allow an attacker to potentially bypass ASLR (Address Space Layout Randomization) protection, and make it easier to exploit other flaws. 4. Solution: Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258 5. Package List: Red Hat Enterprise Linux Desktop Supplementary (v. 5): i386: flash-plugin-11.2.202.457-1.el5.i386.rpm x86_64: flash-plugin-11.2.202.457-1.el5.i386.rpm Red Hat Enterprise Linux Server Supplementary (v. 5): i386: flash-plugin-11.2.202.457-1.el5.i386.rpm x86_64: flash-plugin-11.2.202.457-1.el5.i386.rpm Red Hat Enterprise Linux Desktop Supplementary (v. 6): i386: flash-plugin-11.2.202.457-1.el6_6.i686.rpm x86_64: flash-plugin-11.2.202.457-1.el6_6.i686.rpm Red Hat Enterprise Linux Server Supplementary (v. 6): i386: flash-plugin-11.2.202.457-1.el6_6.i686.rpm x86_64: flash-plugin-11.2.202.457-1.el6_6.i686.rpm Red Hat Enterprise Linux Workstation Supplementary (v. 6): i386: flash-plugin-11.2.202.457-1.el6_6.i686.rpm x86_64: flash-plugin-11.2.202.457-1.el6_6.i686.rpm These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from https://access.redhat.com/security/team/key/ 7. References: https://access.redhat.com/security/cve/CVE-2015-0346 https://access.redhat.com/security/cve/CVE-2015-0347 https://access.redhat.com/security/cve/CVE-2015-0348 https://access.redhat.com/security/cve/CVE-2015-0349 https://access.redhat.com/security/cve/CVE-2015-0350 https://access.redhat.com/security/cve/CVE-2015-0351 https://access.redhat.com/security/cve/CVE-2015-0352 https://access.redhat.com/security/cve/CVE-2015-0353 https://access.redhat.com/security/cve/CVE-2015-0354 https://access.redhat.com/security/cve/CVE-2015-0355 https://access.redhat.com/security/cve/CVE-2015-0356 https://access.redhat.com/security/cve/CVE-2015-0357 https://access.redhat.com/security/cve/CVE-2015-0358 https://access.redhat.com/security/cve/CVE-2015-0359 https://access.redhat.com/security/cve/CVE-2015-0360 https://access.redhat.com/security/cve/CVE-2015-3038 https://access.redhat.com/security/cve/CVE-2015-3039 https://access.redhat.com/security/cve/CVE-2015-3040 https://access.redhat.com/security/cve/CVE-2015-3041 https://access.redhat.com/security/cve/CVE-2015-3042 https://access.redhat.com/security/cve/CVE-2015-3043 https://access.redhat.com/security/cve/CVE-2015-3044 https://access.redhat.com/security/updates/classification/#critical https://helpx.adobe.com/security/products/flash-player/apsb15-06.html 8. Contact: The Red Hat security contact is <secalert@redhat.com>. More contact details at https://access.redhat.com/security/team/contact/ Copyright 2015 Red Hat, Inc. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iD8DBQFVLmOuXlSAg2UNWIIRAhCpAKCQYartNTxOyN7YneEoLHmonLVYxwCeJeZL 9gBkw1TFVgaSAtPj0Xh+ubg= =LVW2 -----END PGP SIGNATURE----- -- RHSA-announce mailing list RHSA-announce@redhat.com https://www.redhat.com/mailman/listinfo/rhsa-announce

FortiMail 5.0.3 through 5.2.3 allows remote administrators to obtain credentials via the "diag debug application httpd" command. Fortinet FortiMail is an email information security device from Fortinet, which provides information filtering engine, anti-spam and threat defense functions. A security vulnerability exists in Fortinet FortiMail versions 5.0.3 to 5.2.3

Use-after-free vulnerability in Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-0349, CVE-2015-0351, and CVE-2015-0358. This vulnerability CVE-2015-0349 , CVE-2015-0351 ,and CVE-2015-0358 Is a different vulnerability. Supplementary information : CWE Vulnerability type by CWE-416: Use-after-free ( Use of freed memory ) Has been identified. http://cwe.mitre.org/data/definitions/416.htmlAn attacker could execute arbitrary code. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.The specific flaw exists within the processing of AS2 ConvolutionFilter objects. By manipulating the matrix property of a ConvolutionFilter object, an attacker can force a dangling pointer to be reused after it has been freed. Failed attempts will likely cause a denial-of-service condition. The product enables viewing of applications, content and video across screens and browsers. Background ========== The Adobe Flash Player is a renderer for the SWF file format, which is commonly used to provide interactive websites. Please review the CVE identifiers referenced below for details. Workaround ========== There is no known workaround at this time. Resolution ========== All Adobe Flash Player users should upgrade to the latest version: # emerge --sync # emerge --ask --oneshot -v ">=www-plugins/adobe-flash-11.2.202.457" References ========== [ 1 ] CVE-2015-0346 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-0346 [ 2 ] CVE-2015-0347 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-0347 [ 3 ] CVE-2015-0348 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-0348 [ 4 ] CVE-2015-0349 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-0349 [ 5 ] CVE-2015-0350 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-0350 [ 6 ] CVE-2015-0351 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-0351 [ 7 ] CVE-2015-0352 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-0352 [ 8 ] CVE-2015-0353 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-0353 [ 9 ] CVE-2015-0354 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-0354 [ 10 ] CVE-2015-0355 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-0355 [ 11 ] CVE-2015-0356 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-0356 [ 12 ] CVE-2015-0357 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-0357 [ 13 ] CVE-2015-0358 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-0358 [ 14 ] CVE-2015-0359 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-0359 [ 15 ] CVE-2015-0360 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-0360 [ 16 ] CVE-2015-3038 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-3038 [ 17 ] CVE-2015-3039 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-3039 [ 18 ] CVE-2015-3040 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-3040 [ 19 ] CVE-2015-3041 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-3041 [ 20 ] CVE-2015-3042 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-3042 [ 21 ] CVE-2015-3043 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-3043 [ 22 ] CVE-2015-3044 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-3044 Availability ============ This GLSA and any updates to it are available for viewing at the Gentoo Security Website: https://security.gentoo.org/glsa/201504-07 Concerns? ========= Security is a primary focus of Gentoo Linux and ensuring the confidentiality and security of our users' machines is of utmost importance to us. Any security concerns should be addressed to security@gentoo.org or alternatively, you may file a bug at https://bugs.gentoo.org. License ======= Copyright 2015 Gentoo Foundation, Inc; referenced text belongs to its owner(s). The contents of this document are licensed under the Creative Commons - Attribution / Share Alike license. http://creativecommons.org/licenses/by-sa/2.5 . -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ===================================================================== Red Hat Security Advisory Synopsis: Critical: flash-plugin security update Advisory ID: RHSA-2015:0813-01 Product: Red Hat Enterprise Linux Supplementary Advisory URL: https://rhn.redhat.com/errata/RHSA-2015-0813.html Issue date: 2015-04-15 CVE Names: CVE-2015-0346 CVE-2015-0347 CVE-2015-0348 CVE-2015-0349 CVE-2015-0350 CVE-2015-0351 CVE-2015-0352 CVE-2015-0353 CVE-2015-0354 CVE-2015-0355 CVE-2015-0356 CVE-2015-0357 CVE-2015-0358 CVE-2015-0359 CVE-2015-0360 CVE-2015-3038 CVE-2015-3039 CVE-2015-3040 CVE-2015-3041 CVE-2015-3042 CVE-2015-3043 CVE-2015-3044 ===================================================================== 1. Summary: An updated Adobe Flash Player package that fixes multiple security issues is now available for Red Hat Enterprise Linux 5 and 6 Supplementary. Red Hat Product Security has rated this update as having Critical security impact. Common Vulnerability Scoring System (CVSS) base scores, which give detailed severity ratings, are available for each vulnerability from the CVE links in the References section. 2. Relevant releases/architectures: Red Hat Enterprise Linux Desktop Supplementary (v. 5) - i386, x86_64 Red Hat Enterprise Linux Desktop Supplementary (v. 6) - i386, x86_64 Red Hat Enterprise Linux Server Supplementary (v. 5) - i386, x86_64 Red Hat Enterprise Linux Server Supplementary (v. 6) - i386, x86_64 Red Hat Enterprise Linux Workstation Supplementary (v. 6) - i386, x86_64 3. Description: The flash-plugin package contains a Mozilla Firefox compatible Adobe Flash Player web browser plug-in. These vulnerabilities are detailed in the Adobe Security Bulletin APSB15-06 listed in the References section. Multiple flaws were found in the way flash-plugin displayed certain SWF content. An attacker could use these flaws to create a specially crafted SWF file that would cause flash-plugin to crash or, potentially, execute arbitrary code when the victim loaded a page containing the malicious SWF content. (CVE-2015-0346, CVE-2015-0347, CVE-2015-0348, CVE-2015-0349, CVE-2015-0350, CVE-2015-0351, CVE-2015-0352, CVE-2015-0353, CVE-2015-0354, CVE-2015-0355, CVE-2015-0356, CVE-2015-0358, CVE-2015-0359, CVE-2015-0360, CVE-2015-3038, CVE-2015-3039, CVE-2015-3041, CVE-2015-3042, CVE-2015-3043) A security bypass flaw was found in flash-plugin that could lead to the disclosure of sensitive information. (CVE-2015-3044) Two memory information leak flaws were found in flash-plugin that could allow an attacker to potentially bypass ASLR (Address Space Layout Randomization) protection, and make it easier to exploit other flaws. 4. Solution: Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258 5. Bugs fixed (https://bugzilla.redhat.com/): 1211869 - flash-plugin: multiple code execution issues fixed in APSB15-06 1211894 - CVE-2015-3044 flash-plugin: security bypass leading to information disclosure (APSB15-06) 1211898 - CVE-2015-0357 CVE-2015-3040 flash-plugin: information leaks leading to ASLR bypass (APSB15-06) 6. Package List: Red Hat Enterprise Linux Desktop Supplementary (v. 5): i386: flash-plugin-11.2.202.457-1.el5.i386.rpm x86_64: flash-plugin-11.2.202.457-1.el5.i386.rpm Red Hat Enterprise Linux Server Supplementary (v. 5): i386: flash-plugin-11.2.202.457-1.el5.i386.rpm x86_64: flash-plugin-11.2.202.457-1.el5.i386.rpm Red Hat Enterprise Linux Desktop Supplementary (v. 6): i386: flash-plugin-11.2.202.457-1.el6_6.i686.rpm x86_64: flash-plugin-11.2.202.457-1.el6_6.i686.rpm Red Hat Enterprise Linux Server Supplementary (v. 6): i386: flash-plugin-11.2.202.457-1.el6_6.i686.rpm x86_64: flash-plugin-11.2.202.457-1.el6_6.i686.rpm Red Hat Enterprise Linux Workstation Supplementary (v. 6): i386: flash-plugin-11.2.202.457-1.el6_6.i686.rpm x86_64: flash-plugin-11.2.202.457-1.el6_6.i686.rpm These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from https://access.redhat.com/security/team/key/ 7. References: https://access.redhat.com/security/cve/CVE-2015-0346 https://access.redhat.com/security/cve/CVE-2015-0347 https://access.redhat.com/security/cve/CVE-2015-0348 https://access.redhat.com/security/cve/CVE-2015-0349 https://access.redhat.com/security/cve/CVE-2015-0350 https://access.redhat.com/security/cve/CVE-2015-0351 https://access.redhat.com/security/cve/CVE-2015-0352 https://access.redhat.com/security/cve/CVE-2015-0353 https://access.redhat.com/security/cve/CVE-2015-0354 https://access.redhat.com/security/cve/CVE-2015-0355 https://access.redhat.com/security/cve/CVE-2015-0356 https://access.redhat.com/security/cve/CVE-2015-0357 https://access.redhat.com/security/cve/CVE-2015-0358 https://access.redhat.com/security/cve/CVE-2015-0359 https://access.redhat.com/security/cve/CVE-2015-0360 https://access.redhat.com/security/cve/CVE-2015-3038 https://access.redhat.com/security/cve/CVE-2015-3039 https://access.redhat.com/security/cve/CVE-2015-3040 https://access.redhat.com/security/cve/CVE-2015-3041 https://access.redhat.com/security/cve/CVE-2015-3042 https://access.redhat.com/security/cve/CVE-2015-3043 https://access.redhat.com/security/cve/CVE-2015-3044 https://access.redhat.com/security/updates/classification/#critical https://helpx.adobe.com/security/products/flash-player/apsb15-06.html 8. Contact: The Red Hat security contact is <secalert@redhat.com>. More contact details at https://access.redhat.com/security/team/contact/ Copyright 2015 Red Hat, Inc. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iD8DBQFVLmOuXlSAg2UNWIIRAhCpAKCQYartNTxOyN7YneEoLHmonLVYxwCeJeZL 9gBkw1TFVgaSAtPj0Xh+ubg= =LVW2 -----END PGP SIGNATURE----- -- RHSA-announce mailing list RHSA-announce@redhat.com https://www.redhat.com/mailman/listinfo/rhsa-announce

Buffer overflow in Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code via unspecified vectors. Adobe Flash Player is prone to an unspecified remote buffer-overflow vulnerability because it fails to adequately bounds-check user-supplied data before copying it into an insufficiently sized buffer. Attackers can exploit this issue to execute arbitrary code in the context of the user running the affected applications. Failed exploit attempts will likely cause a denial-of-service condition. The product enables viewing of applications, content and video across screens and browsers. Background ========== The Adobe Flash Player is a renderer for the SWF file format, which is commonly used to provide interactive websites. Please review the CVE identifiers referenced below for details. Workaround ========== There is no known workaround at this time. Resolution ========== All Adobe Flash Player users should upgrade to the latest version: # emerge --sync # emerge --ask --oneshot -v ">=www-plugins/adobe-flash-11.2.202.457" References ========== [ 1 ] CVE-2015-0346 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-0346 [ 2 ] CVE-2015-0347 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-0347 [ 3 ] CVE-2015-0348 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-0348 [ 4 ] CVE-2015-0349 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-0349 [ 5 ] CVE-2015-0350 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-0350 [ 6 ] CVE-2015-0351 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-0351 [ 7 ] CVE-2015-0352 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-0352 [ 8 ] CVE-2015-0353 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-0353 [ 9 ] CVE-2015-0354 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-0354 [ 10 ] CVE-2015-0355 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-0355 [ 11 ] CVE-2015-0356 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-0356 [ 12 ] CVE-2015-0357 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-0357 [ 13 ] CVE-2015-0358 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-0358 [ 14 ] CVE-2015-0359 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-0359 [ 15 ] CVE-2015-0360 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-0360 [ 16 ] CVE-2015-3038 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-3038 [ 17 ] CVE-2015-3039 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-3039 [ 18 ] CVE-2015-3040 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-3040 [ 19 ] CVE-2015-3041 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-3041 [ 20 ] CVE-2015-3042 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-3042 [ 21 ] CVE-2015-3043 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-3043 [ 22 ] CVE-2015-3044 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-3044 Availability ============ This GLSA and any updates to it are available for viewing at the Gentoo Security Website: https://security.gentoo.org/glsa/201504-07 Concerns? ========= Security is a primary focus of Gentoo Linux and ensuring the confidentiality and security of our users' machines is of utmost importance to us. Any security concerns should be addressed to security@gentoo.org or alternatively, you may file a bug at https://bugs.gentoo.org. License ======= Copyright 2015 Gentoo Foundation, Inc; referenced text belongs to its owner(s). The contents of this document are licensed under the Creative Commons - Attribution / Share Alike license. http://creativecommons.org/licenses/by-sa/2.5 . -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ===================================================================== Red Hat Security Advisory Synopsis: Critical: flash-plugin security update Advisory ID: RHSA-2015:0813-01 Product: Red Hat Enterprise Linux Supplementary Advisory URL: https://rhn.redhat.com/errata/RHSA-2015-0813.html Issue date: 2015-04-15 CVE Names: CVE-2015-0346 CVE-2015-0347 CVE-2015-0348 CVE-2015-0349 CVE-2015-0350 CVE-2015-0351 CVE-2015-0352 CVE-2015-0353 CVE-2015-0354 CVE-2015-0355 CVE-2015-0356 CVE-2015-0357 CVE-2015-0358 CVE-2015-0359 CVE-2015-0360 CVE-2015-3038 CVE-2015-3039 CVE-2015-3040 CVE-2015-3041 CVE-2015-3042 CVE-2015-3043 CVE-2015-3044 ===================================================================== 1. Summary: An updated Adobe Flash Player package that fixes multiple security issues is now available for Red Hat Enterprise Linux 5 and 6 Supplementary. Red Hat Product Security has rated this update as having Critical security impact. Common Vulnerability Scoring System (CVSS) base scores, which give detailed severity ratings, are available for each vulnerability from the CVE links in the References section. 2. Relevant releases/architectures: Red Hat Enterprise Linux Desktop Supplementary (v. 5) - i386, x86_64 Red Hat Enterprise Linux Desktop Supplementary (v. 6) - i386, x86_64 Red Hat Enterprise Linux Server Supplementary (v. 5) - i386, x86_64 Red Hat Enterprise Linux Server Supplementary (v. 6) - i386, x86_64 Red Hat Enterprise Linux Workstation Supplementary (v. 6) - i386, x86_64 3. Description: The flash-plugin package contains a Mozilla Firefox compatible Adobe Flash Player web browser plug-in. These vulnerabilities are detailed in the Adobe Security Bulletin APSB15-06 listed in the References section. Multiple flaws were found in the way flash-plugin displayed certain SWF content. An attacker could use these flaws to create a specially crafted SWF file that would cause flash-plugin to crash or, potentially, execute arbitrary code when the victim loaded a page containing the malicious SWF content. (CVE-2015-0346, CVE-2015-0347, CVE-2015-0348, CVE-2015-0349, CVE-2015-0350, CVE-2015-0351, CVE-2015-0352, CVE-2015-0353, CVE-2015-0354, CVE-2015-0355, CVE-2015-0356, CVE-2015-0358, CVE-2015-0359, CVE-2015-0360, CVE-2015-3038, CVE-2015-3039, CVE-2015-3041, CVE-2015-3042, CVE-2015-3043) A security bypass flaw was found in flash-plugin that could lead to the disclosure of sensitive information. (CVE-2015-3044) Two memory information leak flaws were found in flash-plugin that could allow an attacker to potentially bypass ASLR (Address Space Layout Randomization) protection, and make it easier to exploit other flaws. (CVE-2015-0357, CVE-2015-3040) All users of Adobe Flash Player should install this updated package, which upgrades Flash Player to version 11.2.202.457. 4. Solution: Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258 5. Bugs fixed (https://bugzilla.redhat.com/): 1211869 - flash-plugin: multiple code execution issues fixed in APSB15-06 1211894 - CVE-2015-3044 flash-plugin: security bypass leading to information disclosure (APSB15-06) 1211898 - CVE-2015-0357 CVE-2015-3040 flash-plugin: information leaks leading to ASLR bypass (APSB15-06) 6. Package List: Red Hat Enterprise Linux Desktop Supplementary (v. 5): i386: flash-plugin-11.2.202.457-1.el5.i386.rpm x86_64: flash-plugin-11.2.202.457-1.el5.i386.rpm Red Hat Enterprise Linux Server Supplementary (v. 5): i386: flash-plugin-11.2.202.457-1.el5.i386.rpm x86_64: flash-plugin-11.2.202.457-1.el5.i386.rpm Red Hat Enterprise Linux Desktop Supplementary (v. 6): i386: flash-plugin-11.2.202.457-1.el6_6.i686.rpm x86_64: flash-plugin-11.2.202.457-1.el6_6.i686.rpm Red Hat Enterprise Linux Server Supplementary (v. 6): i386: flash-plugin-11.2.202.457-1.el6_6.i686.rpm x86_64: flash-plugin-11.2.202.457-1.el6_6.i686.rpm Red Hat Enterprise Linux Workstation Supplementary (v. 6): i386: flash-plugin-11.2.202.457-1.el6_6.i686.rpm x86_64: flash-plugin-11.2.202.457-1.el6_6.i686.rpm These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from https://access.redhat.com/security/team/key/ 7. References: https://access.redhat.com/security/cve/CVE-2015-0346 https://access.redhat.com/security/cve/CVE-2015-0347 https://access.redhat.com/security/cve/CVE-2015-0348 https://access.redhat.com/security/cve/CVE-2015-0349 https://access.redhat.com/security/cve/CVE-2015-0350 https://access.redhat.com/security/cve/CVE-2015-0351 https://access.redhat.com/security/cve/CVE-2015-0352 https://access.redhat.com/security/cve/CVE-2015-0353 https://access.redhat.com/security/cve/CVE-2015-0354 https://access.redhat.com/security/cve/CVE-2015-0355 https://access.redhat.com/security/cve/CVE-2015-0356 https://access.redhat.com/security/cve/CVE-2015-0357 https://access.redhat.com/security/cve/CVE-2015-0358 https://access.redhat.com/security/cve/CVE-2015-0359 https://access.redhat.com/security/cve/CVE-2015-0360 https://access.redhat.com/security/cve/CVE-2015-3038 https://access.redhat.com/security/cve/CVE-2015-3039 https://access.redhat.com/security/cve/CVE-2015-3040 https://access.redhat.com/security/cve/CVE-2015-3041 https://access.redhat.com/security/cve/CVE-2015-3042 https://access.redhat.com/security/cve/CVE-2015-3043 https://access.redhat.com/security/cve/CVE-2015-3044 https://access.redhat.com/security/updates/classification/#critical https://helpx.adobe.com/security/products/flash-player/apsb15-06.html 8. Contact: The Red Hat security contact is <secalert@redhat.com>. More contact details at https://access.redhat.com/security/team/contact/ Copyright 2015 Red Hat, Inc. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iD8DBQFVLmOuXlSAg2UNWIIRAhCpAKCQYartNTxOyN7YneEoLHmonLVYxwCeJeZL 9gBkw1TFVgaSAtPj0Xh+ubg= =LVW2 -----END PGP SIGNATURE----- -- RHSA-announce mailing list RHSA-announce@redhat.com https://www.redhat.com/mailman/listinfo/rhsa-announce

Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-0347, CVE-2015-0352, CVE-2015-0353, CVE-2015-0354, CVE-2015-0355, CVE-2015-0360, CVE-2015-3038, CVE-2015-3041, CVE-2015-3042, and CVE-2015-3043. Adobe Flash Player is prone to multiple unspecified memory-corruption vulnerabilities. An attacker can exploit these issues to execute arbitrary code in the context of the user running the affected application. Failed exploit attempts will likely result in denial-of-service conditions. The product enables viewing of applications, content and video across screens and browsers. Background ========== The Adobe Flash Player is a renderer for the SWF file format, which is commonly used to provide interactive websites. Please review the CVE identifiers referenced below for details. Workaround ========== There is no known workaround at this time. Resolution ========== All Adobe Flash Player users should upgrade to the latest version: # emerge --sync # emerge --ask --oneshot -v ">=www-plugins/adobe-flash-11.2.202.457" References ========== [ 1 ] CVE-2015-0346 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-0346 [ 2 ] CVE-2015-0347 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-0347 [ 3 ] CVE-2015-0348 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-0348 [ 4 ] CVE-2015-0349 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-0349 [ 5 ] CVE-2015-0350 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-0350 [ 6 ] CVE-2015-0351 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-0351 [ 7 ] CVE-2015-0352 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-0352 [ 8 ] CVE-2015-0353 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-0353 [ 9 ] CVE-2015-0354 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-0354 [ 10 ] CVE-2015-0355 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-0355 [ 11 ] CVE-2015-0356 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-0356 [ 12 ] CVE-2015-0357 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-0357 [ 13 ] CVE-2015-0358 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-0358 [ 14 ] CVE-2015-0359 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-0359 [ 15 ] CVE-2015-0360 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-0360 [ 16 ] CVE-2015-3038 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-3038 [ 17 ] CVE-2015-3039 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-3039 [ 18 ] CVE-2015-3040 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-3040 [ 19 ] CVE-2015-3041 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-3041 [ 20 ] CVE-2015-3042 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-3042 [ 21 ] CVE-2015-3043 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-3043 [ 22 ] CVE-2015-3044 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-3044 Availability ============ This GLSA and any updates to it are available for viewing at the Gentoo Security Website: https://security.gentoo.org/glsa/201504-07 Concerns? ========= Security is a primary focus of Gentoo Linux and ensuring the confidentiality and security of our users' machines is of utmost importance to us. Any security concerns should be addressed to security@gentoo.org or alternatively, you may file a bug at https://bugs.gentoo.org. License ======= Copyright 2015 Gentoo Foundation, Inc; referenced text belongs to its owner(s). The contents of this document are licensed under the Creative Commons - Attribution / Share Alike license. http://creativecommons.org/licenses/by-sa/2.5 . -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ===================================================================== Red Hat Security Advisory Synopsis: Critical: flash-plugin security update Advisory ID: RHSA-2015:0813-01 Product: Red Hat Enterprise Linux Supplementary Advisory URL: https://rhn.redhat.com/errata/RHSA-2015-0813.html Issue date: 2015-04-15 CVE Names: CVE-2015-0346 CVE-2015-0347 CVE-2015-0348 CVE-2015-0349 CVE-2015-0350 CVE-2015-0351 CVE-2015-0352 CVE-2015-0353 CVE-2015-0354 CVE-2015-0355 CVE-2015-0356 CVE-2015-0357 CVE-2015-0358 CVE-2015-0359 CVE-2015-0360 CVE-2015-3038 CVE-2015-3039 CVE-2015-3040 CVE-2015-3041 CVE-2015-3042 CVE-2015-3043 CVE-2015-3044 ===================================================================== 1. Summary: An updated Adobe Flash Player package that fixes multiple security issues is now available for Red Hat Enterprise Linux 5 and 6 Supplementary. Red Hat Product Security has rated this update as having Critical security impact. Common Vulnerability Scoring System (CVSS) base scores, which give detailed severity ratings, are available for each vulnerability from the CVE links in the References section. 2. Relevant releases/architectures: Red Hat Enterprise Linux Desktop Supplementary (v. 5) - i386, x86_64 Red Hat Enterprise Linux Desktop Supplementary (v. 6) - i386, x86_64 Red Hat Enterprise Linux Server Supplementary (v. 5) - i386, x86_64 Red Hat Enterprise Linux Server Supplementary (v. 6) - i386, x86_64 Red Hat Enterprise Linux Workstation Supplementary (v. 6) - i386, x86_64 3. Description: The flash-plugin package contains a Mozilla Firefox compatible Adobe Flash Player web browser plug-in. These vulnerabilities are detailed in the Adobe Security Bulletin APSB15-06 listed in the References section. Multiple flaws were found in the way flash-plugin displayed certain SWF content. An attacker could use these flaws to create a specially crafted SWF file that would cause flash-plugin to crash or, potentially, execute arbitrary code when the victim loaded a page containing the malicious SWF content. (CVE-2015-0346, CVE-2015-0347, CVE-2015-0348, CVE-2015-0349, CVE-2015-0350, CVE-2015-0351, CVE-2015-0352, CVE-2015-0353, CVE-2015-0354, CVE-2015-0355, CVE-2015-0356, CVE-2015-0358, CVE-2015-0359, CVE-2015-0360, CVE-2015-3038, CVE-2015-3039, CVE-2015-3041, CVE-2015-3042, CVE-2015-3043) A security bypass flaw was found in flash-plugin that could lead to the disclosure of sensitive information. (CVE-2015-3044) Two memory information leak flaws were found in flash-plugin that could allow an attacker to potentially bypass ASLR (Address Space Layout Randomization) protection, and make it easier to exploit other flaws. 4. Solution: Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258 5. Bugs fixed (https://bugzilla.redhat.com/): 1211869 - flash-plugin: multiple code execution issues fixed in APSB15-06 1211894 - CVE-2015-3044 flash-plugin: security bypass leading to information disclosure (APSB15-06) 1211898 - CVE-2015-0357 CVE-2015-3040 flash-plugin: information leaks leading to ASLR bypass (APSB15-06) 6. Package List: Red Hat Enterprise Linux Desktop Supplementary (v. 5): i386: flash-plugin-11.2.202.457-1.el5.i386.rpm x86_64: flash-plugin-11.2.202.457-1.el5.i386.rpm Red Hat Enterprise Linux Server Supplementary (v. 5): i386: flash-plugin-11.2.202.457-1.el5.i386.rpm x86_64: flash-plugin-11.2.202.457-1.el5.i386.rpm Red Hat Enterprise Linux Desktop Supplementary (v. 6): i386: flash-plugin-11.2.202.457-1.el6_6.i686.rpm x86_64: flash-plugin-11.2.202.457-1.el6_6.i686.rpm Red Hat Enterprise Linux Server Supplementary (v. 6): i386: flash-plugin-11.2.202.457-1.el6_6.i686.rpm x86_64: flash-plugin-11.2.202.457-1.el6_6.i686.rpm Red Hat Enterprise Linux Workstation Supplementary (v. 6): i386: flash-plugin-11.2.202.457-1.el6_6.i686.rpm x86_64: flash-plugin-11.2.202.457-1.el6_6.i686.rpm These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from https://access.redhat.com/security/team/key/ 7. References: https://access.redhat.com/security/cve/CVE-2015-0346 https://access.redhat.com/security/cve/CVE-2015-0347 https://access.redhat.com/security/cve/CVE-2015-0348 https://access.redhat.com/security/cve/CVE-2015-0349 https://access.redhat.com/security/cve/CVE-2015-0350 https://access.redhat.com/security/cve/CVE-2015-0351 https://access.redhat.com/security/cve/CVE-2015-0352 https://access.redhat.com/security/cve/CVE-2015-0353 https://access.redhat.com/security/cve/CVE-2015-0354 https://access.redhat.com/security/cve/CVE-2015-0355 https://access.redhat.com/security/cve/CVE-2015-0356 https://access.redhat.com/security/cve/CVE-2015-0357 https://access.redhat.com/security/cve/CVE-2015-0358 https://access.redhat.com/security/cve/CVE-2015-0359 https://access.redhat.com/security/cve/CVE-2015-0360 https://access.redhat.com/security/cve/CVE-2015-3038 https://access.redhat.com/security/cve/CVE-2015-3039 https://access.redhat.com/security/cve/CVE-2015-3040 https://access.redhat.com/security/cve/CVE-2015-3041 https://access.redhat.com/security/cve/CVE-2015-3042 https://access.redhat.com/security/cve/CVE-2015-3043 https://access.redhat.com/security/cve/CVE-2015-3044 https://access.redhat.com/security/updates/classification/#critical https://helpx.adobe.com/security/products/flash-player/apsb15-06.html 8. Contact: The Red Hat security contact is <secalert@redhat.com>. More contact details at https://access.redhat.com/security/team/contact/ Copyright 2015 Red Hat, Inc. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iD8DBQFVLmOuXlSAg2UNWIIRAhCpAKCQYartNTxOyN7YneEoLHmonLVYxwCeJeZL 9gBkw1TFVgaSAtPj0Xh+ubg= =LVW2 -----END PGP SIGNATURE----- -- RHSA-announce mailing list RHSA-announce@redhat.com https://www.redhat.com/mailman/listinfo/rhsa-announce

Use-after-free vulnerability in Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-0349, CVE-2015-0358, and CVE-2015-3039. This vulnerability CVE-2015-0349 , CVE-2015-0358 ,and CVE-2015-3039 Is a different vulnerability. Supplementary information : CWE Vulnerability type by CWE-416: Use-after-free ( Use of freed memory ) Has been identified. http://cwe.mitre.org/data/definitions/416.htmlAn attacker could execute arbitrary code. Failed attempts will likely cause a denial-of-service condition. The product enables viewing of applications, content and video across screens and browsers. Background ========== The Adobe Flash Player is a renderer for the SWF file format, which is commonly used to provide interactive websites. Please review the CVE identifiers referenced below for details. Workaround ========== There is no known workaround at this time. Resolution ========== All Adobe Flash Player users should upgrade to the latest version: # emerge --sync # emerge --ask --oneshot -v ">=www-plugins/adobe-flash-11.2.202.457" References ========== [ 1 ] CVE-2015-0346 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-0346 [ 2 ] CVE-2015-0347 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-0347 [ 3 ] CVE-2015-0348 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-0348 [ 4 ] CVE-2015-0349 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-0349 [ 5 ] CVE-2015-0350 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-0350 [ 6 ] CVE-2015-0351 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-0351 [ 7 ] CVE-2015-0352 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-0352 [ 8 ] CVE-2015-0353 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-0353 [ 9 ] CVE-2015-0354 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-0354 [ 10 ] CVE-2015-0355 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-0355 [ 11 ] CVE-2015-0356 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-0356 [ 12 ] CVE-2015-0357 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-0357 [ 13 ] CVE-2015-0358 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-0358 [ 14 ] CVE-2015-0359 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-0359 [ 15 ] CVE-2015-0360 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-0360 [ 16 ] CVE-2015-3038 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-3038 [ 17 ] CVE-2015-3039 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-3039 [ 18 ] CVE-2015-3040 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-3040 [ 19 ] CVE-2015-3041 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-3041 [ 20 ] CVE-2015-3042 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-3042 [ 21 ] CVE-2015-3043 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-3043 [ 22 ] CVE-2015-3044 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-3044 Availability ============ This GLSA and any updates to it are available for viewing at the Gentoo Security Website: https://security.gentoo.org/glsa/201504-07 Concerns? ========= Security is a primary focus of Gentoo Linux and ensuring the confidentiality and security of our users' machines is of utmost importance to us. Any security concerns should be addressed to security@gentoo.org or alternatively, you may file a bug at https://bugs.gentoo.org. License ======= Copyright 2015 Gentoo Foundation, Inc; referenced text belongs to its owner(s). The contents of this document are licensed under the Creative Commons - Attribution / Share Alike license. http://creativecommons.org/licenses/by-sa/2.5 . -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ===================================================================== Red Hat Security Advisory Synopsis: Critical: flash-plugin security update Advisory ID: RHSA-2015:0813-01 Product: Red Hat Enterprise Linux Supplementary Advisory URL: https://rhn.redhat.com/errata/RHSA-2015-0813.html Issue date: 2015-04-15 CVE Names: CVE-2015-0346 CVE-2015-0347 CVE-2015-0348 CVE-2015-0349 CVE-2015-0350 CVE-2015-0351 CVE-2015-0352 CVE-2015-0353 CVE-2015-0354 CVE-2015-0355 CVE-2015-0356 CVE-2015-0357 CVE-2015-0358 CVE-2015-0359 CVE-2015-0360 CVE-2015-3038 CVE-2015-3039 CVE-2015-3040 CVE-2015-3041 CVE-2015-3042 CVE-2015-3043 CVE-2015-3044 ===================================================================== 1. Summary: An updated Adobe Flash Player package that fixes multiple security issues is now available for Red Hat Enterprise Linux 5 and 6 Supplementary. Red Hat Product Security has rated this update as having Critical security impact. Common Vulnerability Scoring System (CVSS) base scores, which give detailed severity ratings, are available for each vulnerability from the CVE links in the References section. 2. Relevant releases/architectures: Red Hat Enterprise Linux Desktop Supplementary (v. 5) - i386, x86_64 Red Hat Enterprise Linux Desktop Supplementary (v. 6) - i386, x86_64 Red Hat Enterprise Linux Server Supplementary (v. 5) - i386, x86_64 Red Hat Enterprise Linux Server Supplementary (v. 6) - i386, x86_64 Red Hat Enterprise Linux Workstation Supplementary (v. 6) - i386, x86_64 3. Description: The flash-plugin package contains a Mozilla Firefox compatible Adobe Flash Player web browser plug-in. These vulnerabilities are detailed in the Adobe Security Bulletin APSB15-06 listed in the References section. Multiple flaws were found in the way flash-plugin displayed certain SWF content. An attacker could use these flaws to create a specially crafted SWF file that would cause flash-plugin to crash or, potentially, execute arbitrary code when the victim loaded a page containing the malicious SWF content. (CVE-2015-0346, CVE-2015-0347, CVE-2015-0348, CVE-2015-0349, CVE-2015-0350, CVE-2015-0351, CVE-2015-0352, CVE-2015-0353, CVE-2015-0354, CVE-2015-0355, CVE-2015-0356, CVE-2015-0358, CVE-2015-0359, CVE-2015-0360, CVE-2015-3038, CVE-2015-3039, CVE-2015-3041, CVE-2015-3042, CVE-2015-3043) A security bypass flaw was found in flash-plugin that could lead to the disclosure of sensitive information. (CVE-2015-3044) Two memory information leak flaws were found in flash-plugin that could allow an attacker to potentially bypass ASLR (Address Space Layout Randomization) protection, and make it easier to exploit other flaws. 4. Solution: Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258 5. Bugs fixed (https://bugzilla.redhat.com/): 1211869 - flash-plugin: multiple code execution issues fixed in APSB15-06 1211894 - CVE-2015-3044 flash-plugin: security bypass leading to information disclosure (APSB15-06) 1211898 - CVE-2015-0357 CVE-2015-3040 flash-plugin: information leaks leading to ASLR bypass (APSB15-06) 6. Package List: Red Hat Enterprise Linux Desktop Supplementary (v. 5): i386: flash-plugin-11.2.202.457-1.el5.i386.rpm x86_64: flash-plugin-11.2.202.457-1.el5.i386.rpm Red Hat Enterprise Linux Server Supplementary (v. 5): i386: flash-plugin-11.2.202.457-1.el5.i386.rpm x86_64: flash-plugin-11.2.202.457-1.el5.i386.rpm Red Hat Enterprise Linux Desktop Supplementary (v. 6): i386: flash-plugin-11.2.202.457-1.el6_6.i686.rpm x86_64: flash-plugin-11.2.202.457-1.el6_6.i686.rpm Red Hat Enterprise Linux Server Supplementary (v. 6): i386: flash-plugin-11.2.202.457-1.el6_6.i686.rpm x86_64: flash-plugin-11.2.202.457-1.el6_6.i686.rpm Red Hat Enterprise Linux Workstation Supplementary (v. 6): i386: flash-plugin-11.2.202.457-1.el6_6.i686.rpm x86_64: flash-plugin-11.2.202.457-1.el6_6.i686.rpm These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from https://access.redhat.com/security/team/key/ 7. References: https://access.redhat.com/security/cve/CVE-2015-0346 https://access.redhat.com/security/cve/CVE-2015-0347 https://access.redhat.com/security/cve/CVE-2015-0348 https://access.redhat.com/security/cve/CVE-2015-0349 https://access.redhat.com/security/cve/CVE-2015-0350 https://access.redhat.com/security/cve/CVE-2015-0351 https://access.redhat.com/security/cve/CVE-2015-0352 https://access.redhat.com/security/cve/CVE-2015-0353 https://access.redhat.com/security/cve/CVE-2015-0354 https://access.redhat.com/security/cve/CVE-2015-0355 https://access.redhat.com/security/cve/CVE-2015-0356 https://access.redhat.com/security/cve/CVE-2015-0357 https://access.redhat.com/security/cve/CVE-2015-0358 https://access.redhat.com/security/cve/CVE-2015-0359 https://access.redhat.com/security/cve/CVE-2015-0360 https://access.redhat.com/security/cve/CVE-2015-3038 https://access.redhat.com/security/cve/CVE-2015-3039 https://access.redhat.com/security/cve/CVE-2015-3040 https://access.redhat.com/security/cve/CVE-2015-3041 https://access.redhat.com/security/cve/CVE-2015-3042 https://access.redhat.com/security/cve/CVE-2015-3043 https://access.redhat.com/security/cve/CVE-2015-3044 https://access.redhat.com/security/updates/classification/#critical https://helpx.adobe.com/security/products/flash-player/apsb15-06.html 8. Contact: The Red Hat security contact is <secalert@redhat.com>. More contact details at https://access.redhat.com/security/team/contact/ Copyright 2015 Red Hat, Inc. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iD8DBQFVLmOuXlSAg2UNWIIRAhCpAKCQYartNTxOyN7YneEoLHmonLVYxwCeJeZL 9gBkw1TFVgaSAtPj0Xh+ubg= =LVW2 -----END PGP SIGNATURE----- -- RHSA-announce mailing list RHSA-announce@redhat.com https://www.redhat.com/mailman/listinfo/rhsa-announce

Use-after-free vulnerability in Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-0351, CVE-2015-0358, and CVE-2015-3039. This vulnerability CVE-2015-0351 , CVE-2015-0358 ,and CVE-2015-3039 Is a different vulnerability. Supplementary information : CWE Vulnerability type by CWE-416: Use-after-free ( Use of freed memory ) Has been identified. http://cwe.mitre.org/data/definitions/416.htmlAn attacker could execute arbitrary code. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.The specific flaw exists within the processing of AS3 ConvolutionFilter objects. By manipulating the matrix property of a ConvolutionFilter object, an attacker can force a dangling pointer to be reused after it has been freed. Failed attempts will likely cause a denial-of-service condition. The product enables viewing of applications, content and video across screens and browsers. Background ========== The Adobe Flash Player is a renderer for the SWF file format, which is commonly used to provide interactive websites. Please review the CVE identifiers referenced below for details. Workaround ========== There is no known workaround at this time. Resolution ========== All Adobe Flash Player users should upgrade to the latest version: # emerge --sync # emerge --ask --oneshot -v ">=www-plugins/adobe-flash-11.2.202.457" References ========== [ 1 ] CVE-2015-0346 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-0346 [ 2 ] CVE-2015-0347 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-0347 [ 3 ] CVE-2015-0348 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-0348 [ 4 ] CVE-2015-0349 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-0349 [ 5 ] CVE-2015-0350 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-0350 [ 6 ] CVE-2015-0351 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-0351 [ 7 ] CVE-2015-0352 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-0352 [ 8 ] CVE-2015-0353 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-0353 [ 9 ] CVE-2015-0354 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-0354 [ 10 ] CVE-2015-0355 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-0355 [ 11 ] CVE-2015-0356 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-0356 [ 12 ] CVE-2015-0357 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-0357 [ 13 ] CVE-2015-0358 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-0358 [ 14 ] CVE-2015-0359 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-0359 [ 15 ] CVE-2015-0360 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-0360 [ 16 ] CVE-2015-3038 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-3038 [ 17 ] CVE-2015-3039 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-3039 [ 18 ] CVE-2015-3040 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-3040 [ 19 ] CVE-2015-3041 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-3041 [ 20 ] CVE-2015-3042 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-3042 [ 21 ] CVE-2015-3043 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-3043 [ 22 ] CVE-2015-3044 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-3044 Availability ============ This GLSA and any updates to it are available for viewing at the Gentoo Security Website: https://security.gentoo.org/glsa/201504-07 Concerns? ========= Security is a primary focus of Gentoo Linux and ensuring the confidentiality and security of our users' machines is of utmost importance to us. Any security concerns should be addressed to security@gentoo.org or alternatively, you may file a bug at https://bugs.gentoo.org. License ======= Copyright 2015 Gentoo Foundation, Inc; referenced text belongs to its owner(s). The contents of this document are licensed under the Creative Commons - Attribution / Share Alike license. http://creativecommons.org/licenses/by-sa/2.5 . -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ===================================================================== Red Hat Security Advisory Synopsis: Critical: flash-plugin security update Advisory ID: RHSA-2015:0813-01 Product: Red Hat Enterprise Linux Supplementary Advisory URL: https://rhn.redhat.com/errata/RHSA-2015-0813.html Issue date: 2015-04-15 CVE Names: CVE-2015-0346 CVE-2015-0347 CVE-2015-0348 CVE-2015-0349 CVE-2015-0350 CVE-2015-0351 CVE-2015-0352 CVE-2015-0353 CVE-2015-0354 CVE-2015-0355 CVE-2015-0356 CVE-2015-0357 CVE-2015-0358 CVE-2015-0359 CVE-2015-0360 CVE-2015-3038 CVE-2015-3039 CVE-2015-3040 CVE-2015-3041 CVE-2015-3042 CVE-2015-3043 CVE-2015-3044 ===================================================================== 1. Summary: An updated Adobe Flash Player package that fixes multiple security issues is now available for Red Hat Enterprise Linux 5 and 6 Supplementary. Red Hat Product Security has rated this update as having Critical security impact. Common Vulnerability Scoring System (CVSS) base scores, which give detailed severity ratings, are available for each vulnerability from the CVE links in the References section. 2. Relevant releases/architectures: Red Hat Enterprise Linux Desktop Supplementary (v. 5) - i386, x86_64 Red Hat Enterprise Linux Desktop Supplementary (v. 6) - i386, x86_64 Red Hat Enterprise Linux Server Supplementary (v. 5) - i386, x86_64 Red Hat Enterprise Linux Server Supplementary (v. 6) - i386, x86_64 Red Hat Enterprise Linux Workstation Supplementary (v. 6) - i386, x86_64 3. Description: The flash-plugin package contains a Mozilla Firefox compatible Adobe Flash Player web browser plug-in. These vulnerabilities are detailed in the Adobe Security Bulletin APSB15-06 listed in the References section. Multiple flaws were found in the way flash-plugin displayed certain SWF content. An attacker could use these flaws to create a specially crafted SWF file that would cause flash-plugin to crash or, potentially, execute arbitrary code when the victim loaded a page containing the malicious SWF content. (CVE-2015-0346, CVE-2015-0347, CVE-2015-0348, CVE-2015-0349, CVE-2015-0350, CVE-2015-0351, CVE-2015-0352, CVE-2015-0353, CVE-2015-0354, CVE-2015-0355, CVE-2015-0356, CVE-2015-0358, CVE-2015-0359, CVE-2015-0360, CVE-2015-3038, CVE-2015-3039, CVE-2015-3041, CVE-2015-3042, CVE-2015-3043) A security bypass flaw was found in flash-plugin that could lead to the disclosure of sensitive information. (CVE-2015-3044) Two memory information leak flaws were found in flash-plugin that could allow an attacker to potentially bypass ASLR (Address Space Layout Randomization) protection, and make it easier to exploit other flaws. 4. Solution: Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258 5. Bugs fixed (https://bugzilla.redhat.com/): 1211869 - flash-plugin: multiple code execution issues fixed in APSB15-06 1211894 - CVE-2015-3044 flash-plugin: security bypass leading to information disclosure (APSB15-06) 1211898 - CVE-2015-0357 CVE-2015-3040 flash-plugin: information leaks leading to ASLR bypass (APSB15-06) 6. Package List: Red Hat Enterprise Linux Desktop Supplementary (v. 5): i386: flash-plugin-11.2.202.457-1.el5.i386.rpm x86_64: flash-plugin-11.2.202.457-1.el5.i386.rpm Red Hat Enterprise Linux Server Supplementary (v. 5): i386: flash-plugin-11.2.202.457-1.el5.i386.rpm x86_64: flash-plugin-11.2.202.457-1.el5.i386.rpm Red Hat Enterprise Linux Desktop Supplementary (v. 6): i386: flash-plugin-11.2.202.457-1.el6_6.i686.rpm x86_64: flash-plugin-11.2.202.457-1.el6_6.i686.rpm Red Hat Enterprise Linux Server Supplementary (v. 6): i386: flash-plugin-11.2.202.457-1.el6_6.i686.rpm x86_64: flash-plugin-11.2.202.457-1.el6_6.i686.rpm Red Hat Enterprise Linux Workstation Supplementary (v. 6): i386: flash-plugin-11.2.202.457-1.el6_6.i686.rpm x86_64: flash-plugin-11.2.202.457-1.el6_6.i686.rpm These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from https://access.redhat.com/security/team/key/ 7. References: https://access.redhat.com/security/cve/CVE-2015-0346 https://access.redhat.com/security/cve/CVE-2015-0347 https://access.redhat.com/security/cve/CVE-2015-0348 https://access.redhat.com/security/cve/CVE-2015-0349 https://access.redhat.com/security/cve/CVE-2015-0350 https://access.redhat.com/security/cve/CVE-2015-0351 https://access.redhat.com/security/cve/CVE-2015-0352 https://access.redhat.com/security/cve/CVE-2015-0353 https://access.redhat.com/security/cve/CVE-2015-0354 https://access.redhat.com/security/cve/CVE-2015-0355 https://access.redhat.com/security/cve/CVE-2015-0356 https://access.redhat.com/security/cve/CVE-2015-0357 https://access.redhat.com/security/cve/CVE-2015-0358 https://access.redhat.com/security/cve/CVE-2015-0359 https://access.redhat.com/security/cve/CVE-2015-0360 https://access.redhat.com/security/cve/CVE-2015-3038 https://access.redhat.com/security/cve/CVE-2015-3039 https://access.redhat.com/security/cve/CVE-2015-3040 https://access.redhat.com/security/cve/CVE-2015-3041 https://access.redhat.com/security/cve/CVE-2015-3042 https://access.redhat.com/security/cve/CVE-2015-3043 https://access.redhat.com/security/cve/CVE-2015-3044 https://access.redhat.com/security/updates/classification/#critical https://helpx.adobe.com/security/products/flash-player/apsb15-06.html 8. Contact: The Red Hat security contact is <secalert@redhat.com>. More contact details at https://access.redhat.com/security/team/contact/ Copyright 2015 Red Hat, Inc. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iD8DBQFVLmOuXlSAg2UNWIIRAhCpAKCQYartNTxOyN7YneEoLHmonLVYxwCeJeZL 9gBkw1TFVgaSAtPj0Xh+ubg= =LVW2 -----END PGP SIGNATURE----- -- RHSA-announce mailing list RHSA-announce@redhat.com https://www.redhat.com/mailman/listinfo/rhsa-announce