crítica
CVE-2015-3043
flash-plugin: multiple code execution issues fixed in APSB15-06
En la Trivy database desde, como mínimo, el 24 oct 2026, 07:11 UTCNo consta cuándo entró antes de ese build.
Severidad por fuente
NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Red Hat6.8AV:N/AC:M/Au:N/C:P/I:P/A:P
La etiqueta propia de Trivy es CRITICAL. Crítica según NVD, Red Hat. Más baja según Ubuntu (media).
Descripción
Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, as exploited in the wild in April 2015, a different vulnerability than CVE-2015-0347, CVE-2015-0350, CVE-2015-0352, CVE-2015-0353, CVE-2015-0354, CVE-2015-0355, CVE-2015-0360, CVE-2015-3038, CVE-2015-3041, and CVE-2015-3042.
Paquetes afectados y versiones corregidas
| Fuente | Paquete | Corregido en |
|---|---|---|
| ubuntu 12.04 | adobe-flashplugin, flashplugin-nonfree | 1:20150414.1-0precise1 y 1 más |
| ubuntu 14.04 | adobe-flashplugin, flashplugin-nonfree | 1:20150414.1-0trusty1 y 1 más |
| ubuntu 14.10 | adobe-flashplugin, flashplugin-nonfree | 1:20150414.1-0utopic1 y 1 más |
Mostrar las 6 entradas de 3 fuentes
| Fuente | Paquete | Corregido en |
|---|---|---|
| ubuntu 12.04 | adobe-flashplugin | 1:20150414.1-0precise1 |
| ubuntu 12.04 | flashplugin-nonfree | 11.2.202.457ubuntu0.12.04.1 |
| ubuntu 14.04 | adobe-flashplugin | 1:20150414.1-0trusty1 |
| ubuntu 14.04 | flashplugin-nonfree | 11.2.202.457ubuntu0.14.04.1 |
| ubuntu 14.10 | adobe-flashplugin | 1:20150414.1-0utopic1 |
| ubuntu 14.10 | flashplugin-nonfree | 11.2.202.457ubuntu0.14.10.1 |
Referencias
- http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00010.html
- http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00011.html
- http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00012.html
- http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00013.html
- http://rhn.redhat.com/errata/RHSA-2015-0813.html
- http://www.securityfocus.com/bid/74062
- http://www.securitytracker.com/id/1032105
- https://access.redhat.com/security/cve/CVE-2015-3043
Las 16 referencias
- https://github.com/cisagov/vulnrichment/issues/196
- https://helpx.adobe.com/security/products/flash-player/apsb15-06.html
- https://nvd.nist.gov/vuln/detail/CVE-2015-3043
- https://security.gentoo.org/glsa/201504-07
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2015-3043
- https://www.cve.org/CVERecord?id=CVE-2015-3043
- https://www.exploit-db.com/exploits/37536/