PT-2015-1581 · Adobe+3 · Flash Player+4

Published 2015-06-09 · Updated 2016-12-31 · CVE-2015-3102

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Adobe AIR (affected versions not specified) Flash Player (affected versions not specified) ALT Linux (affected versions not specified)

Description The issue is related to a lack of protection for internal data. Exploitation of this issue may allow a remote attacker to bypass access restrictions.

Recommendations For Adobe AIR, at the moment, there is no information about a newer version that contains a fix for this vulnerability. For Flash Player, at the moment, there is no information about a newer version that contains a fix for this vulnerability. For ALT Linux, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

ALT-PU-2015-1526

BDU:2015-10895

BDU:2015-10896

BDU:2015-10901

BDU:2015-10902

CVE-2015-3102

MGASA-2015-0248

OPENSUSE-SU-2015_1047-1

RHSA-2015:1086

RHSA-2015_1086

SUSE-SU-2015:1043-1

Affected Products

Alt Linux

Air

Flash Player

Red Hat

Suse

References · 124

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/browser/adobe_flash_shader_drawing_fill.rb · Exploit
• https://bdu.fstec.ru/vul/2015-10348 · Security Note
• https://bdu.fstec.ru/vul/2015-10904 · Security Note
• https://bdu.fstec.ru/vul/2015-10331 · Security Note
• https://helpx.adobe.com/security/products/flash-player/apsb15-11.html · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-10345 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3097 · Security Note
• https://bdu.fstec.ru/vul/2015-10898 · Security Note
• https://bdu.fstec.ru/vul/2015-10346 · Security Note
• http://rhn.redhat.com/errata/RHSA-2015-1086.html · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3098 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3103 · Security Note
• https://bdu.fstec.ru/vul/2015-10917 · Security Note
• https://bdu.fstec.ru/vul/2015-10335 · Security Note
• https://errata.altlinux.org/ALT-PU-2015-1526 · Vendor Advisory