CVE-2015-0311
flash-plugin: multiple critical vulnerabilities (APSA15-01)(APSB15-03)
Severity by source
Trivy's own label is CRITICAL. Rated critical by NVD, Red Hat. Rated lower by Ubuntu (medium).
Description
Unspecified vulnerability in Adobe Flash Player through 13.0.0.262 and 14.x, 15.x, and 16.x through 16.0.0.287 on Windows and OS X and through 11.2.202.438 on Linux allows remote attackers to execute arbitrary code via unknown vectors, as exploited in the wild in January 2015.
Affected packages and fixed versions
| Source | Package | Fixed in |
|---|---|---|
| ubuntu 12.04 | adobe-flashplugin, flashplugin-nonfree | 11.2.202.429-0precise1 and 1 more |
| ubuntu 14.04 | adobe-flashplugin, flashplugin-nonfree | 11.2.202.429-0trusty1 and 1 more |
| ubuntu 14.10 | adobe-flashplugin, flashplugin-nonfree | 11.2.202.429-0utopic1 and 1 more |
Show all 6 entries from 3 sources
| Source | Package | Fixed in |
|---|---|---|
| ubuntu 12.04 | adobe-flashplugin | 11.2.202.429-0precise1 |
| ubuntu 12.04 | flashplugin-nonfree | 11.2.202.429ubuntu0.12.04.1 |
| ubuntu 14.04 | adobe-flashplugin | 11.2.202.429-0trusty1 |
| ubuntu 14.04 | flashplugin-nonfree | 11.2.202.429ubuntu0.14.04.1 |
| ubuntu 14.10 | adobe-flashplugin | 11.2.202.429-0utopic1 |
| ubuntu 14.10 | flashplugin-nonfree | 11.2.202.429ubuntu0.14.10.1 |
References
- http://helpx.adobe.com/security/products/flash-player/apsa15-01.html
- http://helpx.adobe.com/security/products/flash-player/apsb15-03.html
- http://lists.opensuse.org/opensuse-security-announce/2015-01/msg00027.html
- http://lists.opensuse.org/opensuse-security-announce/2015-01/msg00031.html
- http://malware.dontneedcoffee.com/2015/01/unpatched-vulnerability-0day-in-flash.html
- http://secunia.com/advisories/62432
- http://secunia.com/advisories/62543
- http://secunia.com/advisories/62650
All 22 references
- http://secunia.com/advisories/62660
- http://secunia.com/advisories/62740
- http://security.gentoo.org/glsa/glsa-201502-02.xml
- http://www.securityfocus.com/bid/72283
- http://www.securitytracker.com/id/1031597
- https://access.redhat.com/security/cve/CVE-2015-0311
- https://github.com/cisagov/vulnrichment/issues/196
- https://helpx.adobe.com/security/products/flash-player/apsa15-01.html
- https://helpx.adobe.com/security/products/flash-player/apsb15-03.html
- https://nvd.nist.gov/vuln/detail/CVE-2015-0311
- https://technet.microsoft.com/library/security/2755801
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2015-0311
- https://www.cve.org/CVERecord?id=CVE-2015-0311