Skip to main content

Adobe Flash Player Multiple Vulnerabilities

Last Update Date: 16 Mar 2015 10:50 Release Date: 16 Mar 2015 3759 Views

RISK: High Risk

TYPE: Clients - Audio & Video

TYPE: Audio & Video

Multiple vulnerabilities have been identified in Adobe Flash Player, which can be exploited by remote attacker to cause remote code execution and bypass security restrictions.

  • A remote user can bypass same-origin domain policy.
  • A remote user can bypass file upload restrictions.
  • A remote user can create a specially crafted Flash content that, when loaded by the target user, will execute arbitrary code on the target system. The code will run with the privileges of the target user.
  • Some memory corruption errors may occur.
  • Some type confusion errors may occur.
  • An integer overflow may occur.
  • Some use-after-free memory errors may occur.

Impact

  • Remote Code Execution
  • Security Restriction Bypass

System / Technologies affected

  • Adobe Flash Player 13.0.0.269 and earlier 13.x versions
  • Adobe Flash Player 16.0.0.305 and earlier versions
  • Adobe Flash Player 11.2.202.442 and earlier 11.x versions

Solutions

Before installation of the software, please visit the software manufacturer web-site for more details.

  • Update to Version 17.0.0.134, ESR 13.0.0.277, 11.2.202.451 for Linux

Vulnerability Identifier


Source


Related Link