crítica
CVE-2015-0311
flash-plugin: multiple critical vulnerabilities (APSA15-01)(APSB15-03)
En la Trivy database desde, como mínimo, el 24 oct 2026, 07:11 UTCNo consta cuándo entró antes de ese build.
Severidad por fuente
NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Red Hat6.8AV:N/AC:M/Au:N/C:P/I:P/A:P
La etiqueta propia de Trivy es CRITICAL. Crítica según NVD, Red Hat. Más baja según Ubuntu (media).
Descripción
Unspecified vulnerability in Adobe Flash Player through 13.0.0.262 and 14.x, 15.x, and 16.x through 16.0.0.287 on Windows and OS X and through 11.2.202.438 on Linux allows remote attackers to execute arbitrary code via unknown vectors, as exploited in the wild in January 2015.
Paquetes afectados y versiones corregidas
| Fuente | Paquete | Corregido en |
|---|---|---|
| ubuntu 12.04 | adobe-flashplugin, flashplugin-nonfree | 11.2.202.429-0precise1 y 1 más |
| ubuntu 14.04 | adobe-flashplugin, flashplugin-nonfree | 11.2.202.429-0trusty1 y 1 más |
| ubuntu 14.10 | adobe-flashplugin, flashplugin-nonfree | 11.2.202.429-0utopic1 y 1 más |
Mostrar las 6 entradas de 3 fuentes
| Fuente | Paquete | Corregido en |
|---|---|---|
| ubuntu 12.04 | adobe-flashplugin | 11.2.202.429-0precise1 |
| ubuntu 12.04 | flashplugin-nonfree | 11.2.202.429ubuntu0.12.04.1 |
| ubuntu 14.04 | adobe-flashplugin | 11.2.202.429-0trusty1 |
| ubuntu 14.04 | flashplugin-nonfree | 11.2.202.429ubuntu0.14.04.1 |
| ubuntu 14.10 | adobe-flashplugin | 11.2.202.429-0utopic1 |
| ubuntu 14.10 | flashplugin-nonfree | 11.2.202.429ubuntu0.14.10.1 |
Referencias
- http://helpx.adobe.com/security/products/flash-player/apsa15-01.html
- http://helpx.adobe.com/security/products/flash-player/apsb15-03.html
- http://lists.opensuse.org/opensuse-security-announce/2015-01/msg00027.html
- http://lists.opensuse.org/opensuse-security-announce/2015-01/msg00031.html
- http://malware.dontneedcoffee.com/2015/01/unpatched-vulnerability-0day-in-flash.html
- http://secunia.com/advisories/62432
- http://secunia.com/advisories/62543
- http://secunia.com/advisories/62650
Las 22 referencias
- http://secunia.com/advisories/62660
- http://secunia.com/advisories/62740
- http://security.gentoo.org/glsa/glsa-201502-02.xml
- http://www.securityfocus.com/bid/72283
- http://www.securitytracker.com/id/1031597
- https://access.redhat.com/security/cve/CVE-2015-0311
- https://github.com/cisagov/vulnrichment/issues/196
- https://helpx.adobe.com/security/products/flash-player/apsa15-01.html
- https://helpx.adobe.com/security/products/flash-player/apsb15-03.html
- https://nvd.nist.gov/vuln/detail/CVE-2015-0311
- https://technet.microsoft.com/library/security/2755801
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2015-0311
- https://www.cve.org/CVERecord?id=CVE-2015-0311