1037 lines
59 KiB
JSON
1037 lines
59 KiB
JSON
{
|
|
"Definition": [
|
|
{
|
|
"ID": "oval:org.altlinux.errata:def:20151674",
|
|
"Version": "oval:org.altlinux.errata:def:20151674",
|
|
"Class": "patch",
|
|
"Metadata": {
|
|
"Title": "ALT-PU-2015-1674: package `adobe-flash-player` update to version 11-alt52",
|
|
"AffectedList": [
|
|
{
|
|
"Family": "unix",
|
|
"Platforms": [
|
|
"ALT Linux branch c9f2"
|
|
],
|
|
"Products": [
|
|
"ALT SPWorkstation",
|
|
"ALT SPServer"
|
|
]
|
|
}
|
|
],
|
|
"References": [
|
|
{
|
|
"RefID": "ALT-PU-2015-1674",
|
|
"RefURL": "https://errata.altlinux.org/ALT-PU-2015-1674",
|
|
"Source": "ALTPU"
|
|
},
|
|
{
|
|
"RefID": "BDU:2015-10349",
|
|
"RefURL": "https://bdu.fstec.ru/vul/2015-10349",
|
|
"Source": "BDU"
|
|
},
|
|
{
|
|
"RefID": "BDU:2015-10350",
|
|
"RefURL": "https://bdu.fstec.ru/vul/2015-10350",
|
|
"Source": "BDU"
|
|
},
|
|
{
|
|
"RefID": "BDU:2015-10351",
|
|
"RefURL": "https://bdu.fstec.ru/vul/2015-10351",
|
|
"Source": "BDU"
|
|
},
|
|
{
|
|
"RefID": "BDU:2015-10352",
|
|
"RefURL": "https://bdu.fstec.ru/vul/2015-10352",
|
|
"Source": "BDU"
|
|
},
|
|
{
|
|
"RefID": "BDU:2015-10802",
|
|
"RefURL": "https://bdu.fstec.ru/vul/2015-10802",
|
|
"Source": "BDU"
|
|
},
|
|
{
|
|
"RefID": "BDU:2015-10803",
|
|
"RefURL": "https://bdu.fstec.ru/vul/2015-10803",
|
|
"Source": "BDU"
|
|
},
|
|
{
|
|
"RefID": "BDU:2015-10804",
|
|
"RefURL": "https://bdu.fstec.ru/vul/2015-10804",
|
|
"Source": "BDU"
|
|
},
|
|
{
|
|
"RefID": "BDU:2015-11070",
|
|
"RefURL": "https://bdu.fstec.ru/vul/2015-11070",
|
|
"Source": "BDU"
|
|
},
|
|
{
|
|
"RefID": "BDU:2015-11071",
|
|
"RefURL": "https://bdu.fstec.ru/vul/2015-11071",
|
|
"Source": "BDU"
|
|
},
|
|
{
|
|
"RefID": "BDU:2015-11072",
|
|
"RefURL": "https://bdu.fstec.ru/vul/2015-11072",
|
|
"Source": "BDU"
|
|
},
|
|
{
|
|
"RefID": "BDU:2015-11073",
|
|
"RefURL": "https://bdu.fstec.ru/vul/2015-11073",
|
|
"Source": "BDU"
|
|
},
|
|
{
|
|
"RefID": "BDU:2015-11074",
|
|
"RefURL": "https://bdu.fstec.ru/vul/2015-11074",
|
|
"Source": "BDU"
|
|
},
|
|
{
|
|
"RefID": "BDU:2015-11075",
|
|
"RefURL": "https://bdu.fstec.ru/vul/2015-11075",
|
|
"Source": "BDU"
|
|
},
|
|
{
|
|
"RefID": "BDU:2015-11076",
|
|
"RefURL": "https://bdu.fstec.ru/vul/2015-11076",
|
|
"Source": "BDU"
|
|
},
|
|
{
|
|
"RefID": "BDU:2015-11077",
|
|
"RefURL": "https://bdu.fstec.ru/vul/2015-11077",
|
|
"Source": "BDU"
|
|
},
|
|
{
|
|
"RefID": "BDU:2015-11078",
|
|
"RefURL": "https://bdu.fstec.ru/vul/2015-11078",
|
|
"Source": "BDU"
|
|
},
|
|
{
|
|
"RefID": "BDU:2015-11079",
|
|
"RefURL": "https://bdu.fstec.ru/vul/2015-11079",
|
|
"Source": "BDU"
|
|
},
|
|
{
|
|
"RefID": "BDU:2015-11080",
|
|
"RefURL": "https://bdu.fstec.ru/vul/2015-11080",
|
|
"Source": "BDU"
|
|
},
|
|
{
|
|
"RefID": "BDU:2015-11081",
|
|
"RefURL": "https://bdu.fstec.ru/vul/2015-11081",
|
|
"Source": "BDU"
|
|
},
|
|
{
|
|
"RefID": "BDU:2015-11082",
|
|
"RefURL": "https://bdu.fstec.ru/vul/2015-11082",
|
|
"Source": "BDU"
|
|
},
|
|
{
|
|
"RefID": "BDU:2015-11083",
|
|
"RefURL": "https://bdu.fstec.ru/vul/2015-11083",
|
|
"Source": "BDU"
|
|
},
|
|
{
|
|
"RefID": "BDU:2015-11084",
|
|
"RefURL": "https://bdu.fstec.ru/vul/2015-11084",
|
|
"Source": "BDU"
|
|
},
|
|
{
|
|
"RefID": "BDU:2015-11085",
|
|
"RefURL": "https://bdu.fstec.ru/vul/2015-11085",
|
|
"Source": "BDU"
|
|
},
|
|
{
|
|
"RefID": "BDU:2015-11086",
|
|
"RefURL": "https://bdu.fstec.ru/vul/2015-11086",
|
|
"Source": "BDU"
|
|
},
|
|
{
|
|
"RefID": "BDU:2015-11087",
|
|
"RefURL": "https://bdu.fstec.ru/vul/2015-11087",
|
|
"Source": "BDU"
|
|
},
|
|
{
|
|
"RefID": "BDU:2015-11088",
|
|
"RefURL": "https://bdu.fstec.ru/vul/2015-11088",
|
|
"Source": "BDU"
|
|
},
|
|
{
|
|
"RefID": "BDU:2015-11089",
|
|
"RefURL": "https://bdu.fstec.ru/vul/2015-11089",
|
|
"Source": "BDU"
|
|
},
|
|
{
|
|
"RefID": "BDU:2015-11090",
|
|
"RefURL": "https://bdu.fstec.ru/vul/2015-11090",
|
|
"Source": "BDU"
|
|
},
|
|
{
|
|
"RefID": "BDU:2015-11091",
|
|
"RefURL": "https://bdu.fstec.ru/vul/2015-11091",
|
|
"Source": "BDU"
|
|
},
|
|
{
|
|
"RefID": "BDU:2015-11092",
|
|
"RefURL": "https://bdu.fstec.ru/vul/2015-11092",
|
|
"Source": "BDU"
|
|
},
|
|
{
|
|
"RefID": "BDU:2015-11093",
|
|
"RefURL": "https://bdu.fstec.ru/vul/2015-11093",
|
|
"Source": "BDU"
|
|
},
|
|
{
|
|
"RefID": "BDU:2015-11094",
|
|
"RefURL": "https://bdu.fstec.ru/vul/2015-11094",
|
|
"Source": "BDU"
|
|
},
|
|
{
|
|
"RefID": "BDU:2015-11095",
|
|
"RefURL": "https://bdu.fstec.ru/vul/2015-11095",
|
|
"Source": "BDU"
|
|
},
|
|
{
|
|
"RefID": "BDU:2015-11096",
|
|
"RefURL": "https://bdu.fstec.ru/vul/2015-11096",
|
|
"Source": "BDU"
|
|
},
|
|
{
|
|
"RefID": "BDU:2015-11097",
|
|
"RefURL": "https://bdu.fstec.ru/vul/2015-11097",
|
|
"Source": "BDU"
|
|
},
|
|
{
|
|
"RefID": "BDU:2015-11098",
|
|
"RefURL": "https://bdu.fstec.ru/vul/2015-11098",
|
|
"Source": "BDU"
|
|
},
|
|
{
|
|
"RefID": "BDU:2015-11099",
|
|
"RefURL": "https://bdu.fstec.ru/vul/2015-11099",
|
|
"Source": "BDU"
|
|
},
|
|
{
|
|
"RefID": "BDU:2015-11100",
|
|
"RefURL": "https://bdu.fstec.ru/vul/2015-11100",
|
|
"Source": "BDU"
|
|
},
|
|
{
|
|
"RefID": "BDU:2015-11101",
|
|
"RefURL": "https://bdu.fstec.ru/vul/2015-11101",
|
|
"Source": "BDU"
|
|
},
|
|
{
|
|
"RefID": "CVE-2015-3107",
|
|
"RefURL": "https://nvd.nist.gov/vuln/detail/CVE-2015-3107",
|
|
"Source": "CVE"
|
|
},
|
|
{
|
|
"RefID": "CVE-2015-5124",
|
|
"RefURL": "https://nvd.nist.gov/vuln/detail/CVE-2015-5124",
|
|
"Source": "CVE"
|
|
},
|
|
{
|
|
"RefID": "CVE-2015-5125",
|
|
"RefURL": "https://nvd.nist.gov/vuln/detail/CVE-2015-5125",
|
|
"Source": "CVE"
|
|
},
|
|
{
|
|
"RefID": "CVE-2015-5127",
|
|
"RefURL": "https://nvd.nist.gov/vuln/detail/CVE-2015-5127",
|
|
"Source": "CVE"
|
|
},
|
|
{
|
|
"RefID": "CVE-2015-5128",
|
|
"RefURL": "https://nvd.nist.gov/vuln/detail/CVE-2015-5128",
|
|
"Source": "CVE"
|
|
},
|
|
{
|
|
"RefID": "CVE-2015-5129",
|
|
"RefURL": "https://nvd.nist.gov/vuln/detail/CVE-2015-5129",
|
|
"Source": "CVE"
|
|
},
|
|
{
|
|
"RefID": "CVE-2015-5130",
|
|
"RefURL": "https://nvd.nist.gov/vuln/detail/CVE-2015-5130",
|
|
"Source": "CVE"
|
|
},
|
|
{
|
|
"RefID": "CVE-2015-5131",
|
|
"RefURL": "https://nvd.nist.gov/vuln/detail/CVE-2015-5131",
|
|
"Source": "CVE"
|
|
},
|
|
{
|
|
"RefID": "CVE-2015-5132",
|
|
"RefURL": "https://nvd.nist.gov/vuln/detail/CVE-2015-5132",
|
|
"Source": "CVE"
|
|
},
|
|
{
|
|
"RefID": "CVE-2015-5133",
|
|
"RefURL": "https://nvd.nist.gov/vuln/detail/CVE-2015-5133",
|
|
"Source": "CVE"
|
|
},
|
|
{
|
|
"RefID": "CVE-2015-5134",
|
|
"RefURL": "https://nvd.nist.gov/vuln/detail/CVE-2015-5134",
|
|
"Source": "CVE"
|
|
},
|
|
{
|
|
"RefID": "CVE-2015-5539",
|
|
"RefURL": "https://nvd.nist.gov/vuln/detail/CVE-2015-5539",
|
|
"Source": "CVE"
|
|
},
|
|
{
|
|
"RefID": "CVE-2015-5540",
|
|
"RefURL": "https://nvd.nist.gov/vuln/detail/CVE-2015-5540",
|
|
"Source": "CVE"
|
|
},
|
|
{
|
|
"RefID": "CVE-2015-5541",
|
|
"RefURL": "https://nvd.nist.gov/vuln/detail/CVE-2015-5541",
|
|
"Source": "CVE"
|
|
},
|
|
{
|
|
"RefID": "CVE-2015-5544",
|
|
"RefURL": "https://nvd.nist.gov/vuln/detail/CVE-2015-5544",
|
|
"Source": "CVE"
|
|
},
|
|
{
|
|
"RefID": "CVE-2015-5545",
|
|
"RefURL": "https://nvd.nist.gov/vuln/detail/CVE-2015-5545",
|
|
"Source": "CVE"
|
|
},
|
|
{
|
|
"RefID": "CVE-2015-5546",
|
|
"RefURL": "https://nvd.nist.gov/vuln/detail/CVE-2015-5546",
|
|
"Source": "CVE"
|
|
},
|
|
{
|
|
"RefID": "CVE-2015-5547",
|
|
"RefURL": "https://nvd.nist.gov/vuln/detail/CVE-2015-5547",
|
|
"Source": "CVE"
|
|
},
|
|
{
|
|
"RefID": "CVE-2015-5548",
|
|
"RefURL": "https://nvd.nist.gov/vuln/detail/CVE-2015-5548",
|
|
"Source": "CVE"
|
|
},
|
|
{
|
|
"RefID": "CVE-2015-5549",
|
|
"RefURL": "https://nvd.nist.gov/vuln/detail/CVE-2015-5549",
|
|
"Source": "CVE"
|
|
},
|
|
{
|
|
"RefID": "CVE-2015-5550",
|
|
"RefURL": "https://nvd.nist.gov/vuln/detail/CVE-2015-5550",
|
|
"Source": "CVE"
|
|
},
|
|
{
|
|
"RefID": "CVE-2015-5551",
|
|
"RefURL": "https://nvd.nist.gov/vuln/detail/CVE-2015-5551",
|
|
"Source": "CVE"
|
|
},
|
|
{
|
|
"RefID": "CVE-2015-5552",
|
|
"RefURL": "https://nvd.nist.gov/vuln/detail/CVE-2015-5552",
|
|
"Source": "CVE"
|
|
},
|
|
{
|
|
"RefID": "CVE-2015-5553",
|
|
"RefURL": "https://nvd.nist.gov/vuln/detail/CVE-2015-5553",
|
|
"Source": "CVE"
|
|
},
|
|
{
|
|
"RefID": "CVE-2015-5554",
|
|
"RefURL": "https://nvd.nist.gov/vuln/detail/CVE-2015-5554",
|
|
"Source": "CVE"
|
|
},
|
|
{
|
|
"RefID": "CVE-2015-5555",
|
|
"RefURL": "https://nvd.nist.gov/vuln/detail/CVE-2015-5555",
|
|
"Source": "CVE"
|
|
},
|
|
{
|
|
"RefID": "CVE-2015-5556",
|
|
"RefURL": "https://nvd.nist.gov/vuln/detail/CVE-2015-5556",
|
|
"Source": "CVE"
|
|
},
|
|
{
|
|
"RefID": "CVE-2015-5557",
|
|
"RefURL": "https://nvd.nist.gov/vuln/detail/CVE-2015-5557",
|
|
"Source": "CVE"
|
|
},
|
|
{
|
|
"RefID": "CVE-2015-5558",
|
|
"RefURL": "https://nvd.nist.gov/vuln/detail/CVE-2015-5558",
|
|
"Source": "CVE"
|
|
},
|
|
{
|
|
"RefID": "CVE-2015-5559",
|
|
"RefURL": "https://nvd.nist.gov/vuln/detail/CVE-2015-5559",
|
|
"Source": "CVE"
|
|
},
|
|
{
|
|
"RefID": "CVE-2015-5560",
|
|
"RefURL": "https://nvd.nist.gov/vuln/detail/CVE-2015-5560",
|
|
"Source": "CVE"
|
|
},
|
|
{
|
|
"RefID": "CVE-2015-5561",
|
|
"RefURL": "https://nvd.nist.gov/vuln/detail/CVE-2015-5561",
|
|
"Source": "CVE"
|
|
},
|
|
{
|
|
"RefID": "CVE-2015-5562",
|
|
"RefURL": "https://nvd.nist.gov/vuln/detail/CVE-2015-5562",
|
|
"Source": "CVE"
|
|
},
|
|
{
|
|
"RefID": "CVE-2015-5563",
|
|
"RefURL": "https://nvd.nist.gov/vuln/detail/CVE-2015-5563",
|
|
"Source": "CVE"
|
|
},
|
|
{
|
|
"RefID": "CVE-2015-5564",
|
|
"RefURL": "https://nvd.nist.gov/vuln/detail/CVE-2015-5564",
|
|
"Source": "CVE"
|
|
}
|
|
],
|
|
"Description": "This update upgrades adobe-flash-player to version 11-alt52. \nSecurity Fix(es):\n\n * BDU:2015-10349: Уязвимость программной платформы Adobe AIR, позволяющая нарушителю выполнить произвольный код\n\n * BDU:2015-10350: Уязвимость программной платформы Adobe AIR, позволяющая нарушителю выполнить произвольный код\n\n * BDU:2015-10351: Уязвимость программной платформы Flash Player, позволяющая нарушителю выполнить произвольный код\n\n * BDU:2015-10352: Уязвимость программной платформы Flash Player, позволяющая нарушителю выполнить произвольный код\n\n * BDU:2015-10802: Уязвимость программной платформы Adobe AIR, позволяющая нарушителю выполнить произвольный код или вызвать отказ в обслуживании\n\n * BDU:2015-10803: Уязвимость программной платформы Flash Player, позволяющая нарушителю выполнить произвольный код или вызвать отказ в обслуживании\n\n * BDU:2015-10804: Уязвимость программной платформы Flash Player, позволяющая нарушителю выполнить произвольный код или вызвать отказ в обслуживании\n\n * BDU:2015-11070: Уязвимость программных платформ Adobe Integrated Runtime и Flash Player, позволяющая нарушителю вызвать отказ в обслуживании\n\n * BDU:2015-11071: Уязвимость программных платформ Adobe Integrated Runtime и Flash Player, позволяющая нарушителю выполнить произвольный код \n\n * BDU:2015-11072: Уязвимость программных платформ Adobe Integrated Runtime и Flash Player, позволяющая нарушителю выполнить произвольный код\n\n * BDU:2015-11073: Уязвимость программных платформ Adobe Integrated Runtime и Flash Player, позволяющая нарушителю выполнить произвольный код\n\n * BDU:2015-11074: Уязвимость программных платформ Adobe Integrated Runtime и Flash Player, позволяющая нарушителю выполнить произвольный код\n\n * BDU:2015-11075: Уязвимость программных платформ Adobe Integrated Runtime и Flash Player, позволяющая нарушителю выполнить произвольный код\n\n * BDU:2015-11076: Уязвимость программных платформ Adobe Integrated Runtime и Flash Player, позволяющая нарушителю выполнить произвольный код\n\n * BDU:2015-11077: Уязвимость программных платформ Adobe Integrated Runtime и Flash Player, позволяющая нарушителю выполнить произвольный код\n\n * BDU:2015-11078: Уязвимость программных платформ Adobe Integrated Runtime и Flash Player, позволяющая нарушителю выполнить произвольный код\n\n * BDU:2015-11079: Уязвимость программных платформ Adobe Integrated Runtime и Flash Player, позволяющая нарушителю выполнить произвольный код\n\n * BDU:2015-11080: Уязвимость программных платформ Adobe Integrated Runtime и Flash Player, позволяющая нарушителю выполнить произвольный код\n\n * BDU:2015-11081: Уязвимость программных платформ Adobe Integrated Runtime и Flash Player, позволяющая нарушителю выполнить произвольный код или вызвать отказ в обслуживании\n\n * BDU:2015-11082: Уязвимость программных платформ Adobe Integrated Runtime и Flash Player, позволяющая нарушителю выполнить произвольный код или вызвать отказ в обслуживании\n\n * BDU:2015-11083: Уязвимость программных платформ Adobe Integrated Runtime и Flash Player, позволяющая нарушителю выполнить произвольный код или вызвать отказ в обслуживании\n\n * BDU:2015-11084: Уязвимость программных платформ Adobe Integrated Runtime и Flash Player, позволяющая нарушителю выполнить произвольный код или вызвать отказ в обслуживании\n\n * BDU:2015-11085: Уязвимость программных платформ Adobe Integrated Runtime и Flash Player, позволяющая нарушителю выполнить произвольный код или вызвать отказ в обслуживании\n\n * BDU:2015-11086: Уязвимость программных платформ Adobe Integrated Runtime и Flash Player, позволяющая нарушителю выполнить произвольный код или вызвать отказ в обслуживании\n\n * BDU:2015-11087: Уязвимость программных платформ Adobe Integrated Runtime и Flash Player, позволяющая нарушителю выполнить произвольный код\n\n * BDU:2015-11088: Уязвимость программных платформ Adobe Integrated Runtime и Flash Player, позволяющая нарушителю выполнить произвольный код\n\n * BDU:2015-11089: Уязвимость программных платформ Adobe Integrated Runtime и Flash Player, позволяющая нарушителю выполнить произвольный код или вызвать отказ в обслуживании\n\n * BDU:2015-11090: Уязвимость программных платформ Adobe Integrated Runtime и Flash Player, позволяющая нарушителю выполнить произвольный код или вызвать отказ в обслуживании\n\n * BDU:2015-11091: Уязвимость программных платформ Adobe Integrated Runtime и Flash Player, позволяющая нарушителю выполнить произвольный код\n\n * BDU:2015-11092: Уязвимость программных платформ Adobe Integrated Runtime и Flash Player, позволяющая нарушителю выполнить произвольный код\n\n * BDU:2015-11093: Уязвимость программных платформ Adobe Integrated Runtime и Flash Player, позволяющая нарушителю выполнить произвольный код\n\n * BDU:2015-11094: Уязвимость программных платформ Adobe Integrated Runtime и Flash Player, позволяющая нарушителю выполнить произвольный код\n\n * BDU:2015-11095: Уязвимость программных платформ Adobe Integrated Runtime и Flash Player, позволяющая нарушителю выполнить произвольный код\n\n * BDU:2015-11096: Уязвимость программных платформ Adobe Integrated Runtime и Flash Player, позволяющая нарушителю выполнить произвольный код\n\n * BDU:2015-11097: Уязвимость программных платформ Adobe Integrated Runtime и Flash Player, позволяющая нарушителю выполнить произвольный код\n\n * BDU:2015-11098: Уязвимость программных платформ Adobe Integrated Runtime и Flash Player, позволяющая нарушителю выполнить произвольный код\n\n * BDU:2015-11099: Уязвимость программных платформ Adobe Integrated Runtime и Flash Player, позволяющая нарушителю выполнить произвольный код\n\n * BDU:2015-11100: Уязвимость программных платформ Adobe Integrated Runtime и Flash Player, позволяющая нарушителю выполнить произвольный код\n\n * BDU:2015-11101: Уязвимость программных платформ Adobe Integrated Runtime и Flash Player, позволяющая нарушителю выполнить произвольный код\n\n * CVE-2015-3107: Use-after-free vulnerability in Adobe Flash Player before 13.0.0.292 and 14.x through 18.x before 18.0.0.160 on Windows and OS X and before 11.2.202.466 on Linux, Adobe AIR before 18.0.0.144 on Windows and before 18.0.0.143 on OS X and Android, Adobe AIR SDK before 18.0.0.144 on Windows and before 18.0.0.143 on OS X, and Adobe AIR SDK \u0026 Compiler before 18.0.0.144 on Windows and before 18.0.0.143 on OS X allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-3103 and CVE-2015-3106.\n\n * CVE-2015-5124: Adobe Flash Player before 13.0.0.302 and 14.x through 18.x before 18.0.0.203 on Windows and OS X and before 11.2.202.481 on Linux, Adobe AIR before 18.0.0.180, Adobe AIR SDK before 18.0.0.180, and Adobe AIR SDK \u0026 Compiler before 18.0.0.180 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-3117, CVE-2015-3123, CVE-2015-3130, CVE-2015-3133, CVE-2015-3134, and CVE-2015-4431.\n\n * CVE-2015-5125: Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before 18.0.0.199, and Adobe AIR SDK \u0026 Compiler before 18.0.0.199 allow attackers to cause a denial of service (vector-length corruption) or possibly have unspecified other impact via unknown vectors.\n\n * CVE-2015-5127: Use-after-free vulnerability in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before 18.0.0.199, and Adobe AIR SDK \u0026 Compiler before 18.0.0.199 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-5130, CVE-2015-5134, CVE-2015-5539, CVE-2015-5540, CVE-2015-5550, CVE-2015-5551, CVE-2015-5556, CVE-2015-5557, CVE-2015-5559, CVE-2015-5561, CVE-2015-5563, CVE-2015-5564, and CVE-2015-5565.\n\n * CVE-2015-5128: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none\n\n * CVE-2015-5129: Heap-based buffer overflow in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before 18.0.0.199, and Adobe AIR SDK \u0026 Compiler before 18.0.0.199 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-5541.\n\n * CVE-2015-5130: Use-after-free vulnerability in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before 18.0.0.199, and Adobe AIR SDK \u0026 Compiler before 18.0.0.199 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-5127, CVE-2015-5134, CVE-2015-5539, CVE-2015-5540, CVE-2015-5550, CVE-2015-5551, CVE-2015-5556, CVE-2015-5557, CVE-2015-5559, CVE-2015-5561, CVE-2015-5563, CVE-2015-5564, and CVE-2015-5565.\n\n * CVE-2015-5131: Buffer overflow in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before 18.0.0.199, and Adobe AIR SDK \u0026 Compiler before 18.0.0.199 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-5132 and CVE-2015-5133.\n\n * CVE-2015-5132: Buffer overflow in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before 18.0.0.199, and Adobe AIR SDK \u0026 Compiler before 18.0.0.199 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-5131 and CVE-2015-5133.\n\n * CVE-2015-5133: Buffer overflow in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before 18.0.0.199, and Adobe AIR SDK \u0026 Compiler before 18.0.0.199 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-5131 and CVE-2015-5132.\n\n * CVE-2015-5134: Use-after-free vulnerability in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before 18.0.0.199, and Adobe AIR SDK \u0026 Compiler before 18.0.0.199 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-5127, CVE-2015-5130, CVE-2015-5539, CVE-2015-5540, CVE-2015-5550, CVE-2015-5551, CVE-2015-5556, CVE-2015-5557, CVE-2015-5559, CVE-2015-5561, CVE-2015-5563, CVE-2015-5564, and CVE-2015-5565.\n\n * CVE-2015-5539: Use-after-free vulnerability in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before 18.0.0.199, and Adobe AIR SDK \u0026 Compiler before 18.0.0.199 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-5127, CVE-2015-5130, CVE-2015-5134, CVE-2015-5540, CVE-2015-5550, CVE-2015-5551, CVE-2015-5556, CVE-2015-5557, CVE-2015-5559, CVE-2015-5561, CVE-2015-5563, CVE-2015-5564, and CVE-2015-5565.\n\n * CVE-2015-5540: Use-after-free vulnerability in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before 18.0.0.199, and Adobe AIR SDK \u0026 Compiler before 18.0.0.199 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-5127, CVE-2015-5130, CVE-2015-5134, CVE-2015-5539, CVE-2015-5550, CVE-2015-5551, CVE-2015-5556, CVE-2015-5557, CVE-2015-5559, CVE-2015-5561, CVE-2015-5563, CVE-2015-5564, and CVE-2015-5565.\n\n * CVE-2015-5541: Heap-based buffer overflow in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before 18.0.0.199, and Adobe AIR SDK \u0026 Compiler before 18.0.0.199 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-5129.\n\n * CVE-2015-5544: Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before 18.0.0.199, and Adobe AIR SDK \u0026 Compiler before 18.0.0.199 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-5545, CVE-2015-5546, CVE-2015-5547, CVE-2015-5548, CVE-2015-5549, CVE-2015-5552, and CVE-2015-5553.\n\n * CVE-2015-5545: Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before 18.0.0.199, and Adobe AIR SDK \u0026 Compiler before 18.0.0.199 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-5544, CVE-2015-5546, CVE-2015-5547, CVE-2015-5548, CVE-2015-5549, CVE-2015-5552, and CVE-2015-5553.\n\n * CVE-2015-5546: Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before 18.0.0.199, and Adobe AIR SDK \u0026 Compiler before 18.0.0.199 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-5544, CVE-2015-5545, CVE-2015-5547, CVE-2015-5548, CVE-2015-5549, CVE-2015-5552, and CVE-2015-5553.\n\n * CVE-2015-5547: Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before 18.0.0.199, and Adobe AIR SDK \u0026 Compiler before 18.0.0.199 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-5544, CVE-2015-5545, CVE-2015-5546, CVE-2015-5548, CVE-2015-5549, CVE-2015-5552, and CVE-2015-5553.\n\n * CVE-2015-5548: Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before 18.0.0.199, and Adobe AIR SDK \u0026 Compiler before 18.0.0.199 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-5544, CVE-2015-5545, CVE-2015-5546, CVE-2015-5547, CVE-2015-5549, CVE-2015-5552, and CVE-2015-5553.\n\n * CVE-2015-5549: Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before 18.0.0.199, and Adobe AIR SDK \u0026 Compiler before 18.0.0.199 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-5544, CVE-2015-5545, CVE-2015-5546, CVE-2015-5547, CVE-2015-5548, CVE-2015-5552, and CVE-2015-5553.\n\n * CVE-2015-5550: Use-after-free vulnerability in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before 18.0.0.199, and Adobe AIR SDK \u0026 Compiler before 18.0.0.199 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-5127, CVE-2015-5130, CVE-2015-5134, CVE-2015-5539, CVE-2015-5540, CVE-2015-5551, CVE-2015-5556, CVE-2015-5557, CVE-2015-5559, CVE-2015-5561, CVE-2015-5563, CVE-2015-5564, and CVE-2015-5565.\n\n * CVE-2015-5551: Use-after-free vulnerability in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before 18.0.0.199, and Adobe AIR SDK \u0026 Compiler before 18.0.0.199 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-5127, CVE-2015-5130, CVE-2015-5134, CVE-2015-5539, CVE-2015-5540, CVE-2015-5550, CVE-2015-5556, CVE-2015-5557, CVE-2015-5559, CVE-2015-5561, CVE-2015-5563, CVE-2015-5564, and CVE-2015-5565.\n\n * CVE-2015-5552: Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before 18.0.0.199, and Adobe AIR SDK \u0026 Compiler before 18.0.0.199 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-5544, CVE-2015-5545, CVE-2015-5546, CVE-2015-5547, CVE-2015-5548, CVE-2015-5549, and CVE-2015-5553.\n\n * CVE-2015-5553: Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before 18.0.0.199, and Adobe AIR SDK \u0026 Compiler before 18.0.0.199 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-5544, CVE-2015-5545, CVE-2015-5546, CVE-2015-5547, CVE-2015-5548, CVE-2015-5549, and CVE-2015-5552.\n\n * CVE-2015-5554: Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before 18.0.0.199, and Adobe AIR SDK \u0026 Compiler before 18.0.0.199 allow attackers to execute arbitrary code by leveraging an unspecified \"type confusion,\" a different vulnerability than CVE-2015-5555, CVE-2015-5558, and CVE-2015-5562.\n\n * CVE-2015-5555: Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before 18.0.0.199, and Adobe AIR SDK \u0026 Compiler before 18.0.0.199 allow attackers to execute arbitrary code by leveraging an unspecified \"type confusion,\" a different vulnerability than CVE-2015-5554, CVE-2015-5558, and CVE-2015-5562.\n\n * CVE-2015-5556: Use-after-free vulnerability in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before 18.0.0.199, and Adobe AIR SDK \u0026 Compiler before 18.0.0.199 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-5127, CVE-2015-5130, CVE-2015-5134, CVE-2015-5539, CVE-2015-5540, CVE-2015-5550, CVE-2015-5551, CVE-2015-5557, CVE-2015-5559, CVE-2015-5561, CVE-2015-5563, CVE-2015-5564, and CVE-2015-5565.\n\n * CVE-2015-5557: Use-after-free vulnerability in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before 18.0.0.199, and Adobe AIR SDK \u0026 Compiler before 18.0.0.199 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-5127, CVE-2015-5130, CVE-2015-5134, CVE-2015-5539, CVE-2015-5540, CVE-2015-5550, CVE-2015-5551, CVE-2015-5556, CVE-2015-5559, CVE-2015-5561, CVE-2015-5563, CVE-2015-5564, and CVE-2015-5565.\n\n * CVE-2015-5558: Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before 18.0.0.199, and Adobe AIR SDK \u0026 Compiler before 18.0.0.199 allow attackers to execute arbitrary code by leveraging an unspecified \"type confusion,\" a different vulnerability than CVE-2015-5554, CVE-2015-5555, and CVE-2015-5562.\n\n * CVE-2015-5559: Use-after-free vulnerability in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before 18.0.0.199, and Adobe AIR SDK \u0026 Compiler before 18.0.0.199 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-5127, CVE-2015-5130, CVE-2015-5134, CVE-2015-5539, CVE-2015-5540, CVE-2015-5550, CVE-2015-5551, CVE-2015-5556, CVE-2015-5557, CVE-2015-5561, CVE-2015-5563, CVE-2015-5564, and CVE-2015-5565.\n\n * CVE-2015-5560: Integer overflow in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before 18.0.0.199, and Adobe AIR SDK \u0026 Compiler before 18.0.0.199 allows attackers to execute arbitrary code via unspecified vectors.\n\n * CVE-2015-5561: Use-after-free vulnerability in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before 18.0.0.199, and Adobe AIR SDK \u0026 Compiler before 18.0.0.199 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-5127, CVE-2015-5130, CVE-2015-5134, CVE-2015-5539, CVE-2015-5540, CVE-2015-5550, CVE-2015-5551, CVE-2015-5556, CVE-2015-5557, CVE-2015-5559, CVE-2015-5563, CVE-2015-5564, and CVE-2015-5565.\n\n * CVE-2015-5562: Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before 18.0.0.199, and Adobe AIR SDK \u0026 Compiler before 18.0.0.199 allow attackers to execute arbitrary code by leveraging an unspecified \"type confusion,\" a different vulnerability than CVE-2015-5554, CVE-2015-5555, and CVE-2015-5558.\n\n * CVE-2015-5563: Use-after-free vulnerability in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before 18.0.0.199, and Adobe AIR SDK \u0026 Compiler before 18.0.0.199 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-5127, CVE-2015-5130, CVE-2015-5134, CVE-2015-5539, CVE-2015-5540, CVE-2015-5550, CVE-2015-5551, CVE-2015-5556, CVE-2015-5557, CVE-2015-5559, CVE-2015-5561, CVE-2015-5564, and CVE-2015-5565.\n\n * CVE-2015-5564: Use-after-free vulnerability in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before 18.0.0.199, and Adobe AIR SDK \u0026 Compiler before 18.0.0.199 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-5127, CVE-2015-5130, CVE-2015-5134, CVE-2015-5539, CVE-2015-5540, CVE-2015-5550, CVE-2015-5551, CVE-2015-5556, CVE-2015-5557, CVE-2015-5559, CVE-2015-5561, CVE-2015-5563, and CVE-2015-5565.",
|
|
"Advisory": {
|
|
"From": "errata.altlinux.org",
|
|
"Severity": "Critical",
|
|
"Rights": "Copyright 2024 BaseALT Ltd.",
|
|
"Issued": {
|
|
"Date": "2015-08-12"
|
|
},
|
|
"Updated": {
|
|
"Date": "2015-08-12"
|
|
},
|
|
"BDUs": [
|
|
{
|
|
"ID": "BDU:2015-10349",
|
|
"CVSS": "AV:N/AC:L/Au:N/C:C/I:C/A:C",
|
|
"CWE": "CWE-416",
|
|
"Href": "https://bdu.fstec.ru/vul/2015-10349",
|
|
"Impact": "Critical",
|
|
"Public": "20150609"
|
|
},
|
|
{
|
|
"ID": "BDU:2015-10350",
|
|
"CVSS": "AV:N/AC:L/Au:N/C:C/I:C/A:C",
|
|
"CWE": "CWE-416",
|
|
"Href": "https://bdu.fstec.ru/vul/2015-10350",
|
|
"Impact": "Critical",
|
|
"Public": "20150609"
|
|
},
|
|
{
|
|
"ID": "BDU:2015-10351",
|
|
"CVSS": "AV:N/AC:L/Au:N/C:C/I:C/A:C",
|
|
"CWE": "CWE-416",
|
|
"Href": "https://bdu.fstec.ru/vul/2015-10351",
|
|
"Impact": "Critical",
|
|
"Public": "20150609"
|
|
},
|
|
{
|
|
"ID": "BDU:2015-10352",
|
|
"CVSS": "AV:N/AC:L/Au:N/C:C/I:C/A:C",
|
|
"CWE": "CWE-416",
|
|
"Href": "https://bdu.fstec.ru/vul/2015-10352",
|
|
"Impact": "Critical",
|
|
"Public": "20150609"
|
|
},
|
|
{
|
|
"ID": "BDU:2015-10802",
|
|
"CVSS": "AV:N/AC:L/Au:N/C:C/I:C/A:C",
|
|
"CWE": "CWE-119",
|
|
"Href": "https://bdu.fstec.ru/vul/2015-10802",
|
|
"Impact": "Critical",
|
|
"Public": "20150720"
|
|
},
|
|
{
|
|
"ID": "BDU:2015-10803",
|
|
"CVSS": "AV:N/AC:L/Au:N/C:C/I:C/A:C",
|
|
"CWE": "CWE-119",
|
|
"Href": "https://bdu.fstec.ru/vul/2015-10803",
|
|
"Impact": "Critical",
|
|
"Public": "20150720"
|
|
},
|
|
{
|
|
"ID": "BDU:2015-10804",
|
|
"CVSS": "AV:N/AC:L/Au:N/C:C/I:C/A:C",
|
|
"CWE": "CWE-119",
|
|
"Href": "https://bdu.fstec.ru/vul/2015-10804",
|
|
"Impact": "Critical",
|
|
"Public": "20150720"
|
|
},
|
|
{
|
|
"ID": "BDU:2015-11070",
|
|
"CVSS": "AV:N/AC:L/Au:N/C:C/I:C/A:C",
|
|
"CWE": "CWE-119",
|
|
"Href": "https://bdu.fstec.ru/vul/2015-11070",
|
|
"Impact": "Critical",
|
|
"Public": "20150813"
|
|
},
|
|
{
|
|
"ID": "BDU:2015-11071",
|
|
"CVSS": "AV:N/AC:L/Au:N/C:C/I:C/A:C",
|
|
"CWE": "CWE-416",
|
|
"Href": "https://bdu.fstec.ru/vul/2015-11071",
|
|
"Impact": "Critical",
|
|
"Public": "20150813"
|
|
},
|
|
{
|
|
"ID": "BDU:2015-11072",
|
|
"CVSS": "AV:N/AC:L/Au:N/C:C/I:C/A:C",
|
|
"CWE": "CWE-119",
|
|
"Href": "https://bdu.fstec.ru/vul/2015-11072",
|
|
"Impact": "Critical",
|
|
"Public": "20150813"
|
|
},
|
|
{
|
|
"ID": "BDU:2015-11073",
|
|
"CVSS": "AV:N/AC:L/Au:N/C:C/I:C/A:C",
|
|
"CWE": "CWE-416",
|
|
"Href": "https://bdu.fstec.ru/vul/2015-11073",
|
|
"Impact": "Critical",
|
|
"Public": "20150813"
|
|
},
|
|
{
|
|
"ID": "BDU:2015-11074",
|
|
"CVSS": "AV:N/AC:L/Au:N/C:C/I:C/A:C",
|
|
"CWE": "CWE-119",
|
|
"Href": "https://bdu.fstec.ru/vul/2015-11074",
|
|
"Impact": "Critical",
|
|
"Public": "20150813"
|
|
},
|
|
{
|
|
"ID": "BDU:2015-11075",
|
|
"CVSS": "AV:N/AC:L/Au:N/C:C/I:C/A:C",
|
|
"CWE": "CWE-119",
|
|
"Href": "https://bdu.fstec.ru/vul/2015-11075",
|
|
"Impact": "Critical",
|
|
"Public": "20150813"
|
|
},
|
|
{
|
|
"ID": "BDU:2015-11076",
|
|
"CVSS": "AV:N/AC:L/Au:N/C:C/I:C/A:C",
|
|
"CWE": "CWE-119",
|
|
"Href": "https://bdu.fstec.ru/vul/2015-11076",
|
|
"Impact": "Critical",
|
|
"Public": "20150813"
|
|
},
|
|
{
|
|
"ID": "BDU:2015-11077",
|
|
"CVSS": "AV:N/AC:L/Au:N/C:C/I:C/A:C",
|
|
"CWE": "CWE-416",
|
|
"Href": "https://bdu.fstec.ru/vul/2015-11077",
|
|
"Impact": "Critical",
|
|
"Public": "20150813"
|
|
},
|
|
{
|
|
"ID": "BDU:2015-11078",
|
|
"CVSS": "AV:N/AC:L/Au:N/C:C/I:C/A:C",
|
|
"CWE": "CWE-416",
|
|
"Href": "https://bdu.fstec.ru/vul/2015-11078",
|
|
"Impact": "Critical",
|
|
"Public": "20150813"
|
|
},
|
|
{
|
|
"ID": "BDU:2015-11079",
|
|
"CVSS": "AV:N/AC:L/Au:N/C:C/I:C/A:C",
|
|
"CWE": "CWE-416",
|
|
"Href": "https://bdu.fstec.ru/vul/2015-11079",
|
|
"Impact": "Critical",
|
|
"Public": "20150813"
|
|
},
|
|
{
|
|
"ID": "BDU:2015-11080",
|
|
"CVSS": "AV:N/AC:L/Au:N/C:C/I:C/A:C",
|
|
"CWE": "CWE-119",
|
|
"Href": "https://bdu.fstec.ru/vul/2015-11080",
|
|
"Impact": "Critical",
|
|
"Public": "20150813"
|
|
},
|
|
{
|
|
"ID": "BDU:2015-11081",
|
|
"CVSS": "AV:N/AC:L/Au:N/C:C/I:C/A:C",
|
|
"CWE": "CWE-119",
|
|
"Href": "https://bdu.fstec.ru/vul/2015-11081",
|
|
"Impact": "Critical",
|
|
"Public": "20150813"
|
|
},
|
|
{
|
|
"ID": "BDU:2015-11082",
|
|
"CVSS": "AV:N/AC:L/Au:N/C:C/I:C/A:C",
|
|
"CWE": "CWE-119",
|
|
"Href": "https://bdu.fstec.ru/vul/2015-11082",
|
|
"Impact": "Critical",
|
|
"Public": "20150813"
|
|
},
|
|
{
|
|
"ID": "BDU:2015-11083",
|
|
"CVSS": "AV:N/AC:L/Au:N/C:C/I:C/A:C",
|
|
"CWE": "CWE-119",
|
|
"Href": "https://bdu.fstec.ru/vul/2015-11083",
|
|
"Impact": "Critical",
|
|
"Public": "20150813"
|
|
},
|
|
{
|
|
"ID": "BDU:2015-11084",
|
|
"CVSS": "AV:N/AC:L/Au:N/C:C/I:C/A:C",
|
|
"CWE": "CWE-119",
|
|
"Href": "https://bdu.fstec.ru/vul/2015-11084",
|
|
"Impact": "Critical",
|
|
"Public": "20150813"
|
|
},
|
|
{
|
|
"ID": "BDU:2015-11085",
|
|
"CVSS": "AV:N/AC:L/Au:N/C:C/I:C/A:C",
|
|
"CWE": "CWE-119",
|
|
"Href": "https://bdu.fstec.ru/vul/2015-11085",
|
|
"Impact": "Critical",
|
|
"Public": "20150813"
|
|
},
|
|
{
|
|
"ID": "BDU:2015-11086",
|
|
"CVSS": "AV:N/AC:L/Au:N/C:C/I:C/A:C",
|
|
"CWE": "CWE-119",
|
|
"Href": "https://bdu.fstec.ru/vul/2015-11086",
|
|
"Impact": "Critical",
|
|
"Public": "20150813"
|
|
},
|
|
{
|
|
"ID": "BDU:2015-11087",
|
|
"CVSS": "AV:N/AC:L/Au:N/C:C/I:C/A:C",
|
|
"CWE": "CWE-416",
|
|
"Href": "https://bdu.fstec.ru/vul/2015-11087",
|
|
"Impact": "Critical",
|
|
"Public": "20150813"
|
|
},
|
|
{
|
|
"ID": "BDU:2015-11088",
|
|
"CVSS": "AV:N/AC:L/Au:N/C:C/I:C/A:C",
|
|
"CWE": "CWE-416",
|
|
"Href": "https://bdu.fstec.ru/vul/2015-11088",
|
|
"Impact": "Critical",
|
|
"Public": "20150813"
|
|
},
|
|
{
|
|
"ID": "BDU:2015-11089",
|
|
"CVSS": "AV:N/AC:L/Au:N/C:C/I:C/A:C",
|
|
"CWE": "CWE-119",
|
|
"Href": "https://bdu.fstec.ru/vul/2015-11089",
|
|
"Impact": "Critical",
|
|
"Public": "20150813"
|
|
},
|
|
{
|
|
"ID": "BDU:2015-11090",
|
|
"CVSS": "AV:N/AC:L/Au:N/C:C/I:C/A:C",
|
|
"CWE": "CWE-119",
|
|
"Href": "https://bdu.fstec.ru/vul/2015-11090",
|
|
"Impact": "Critical",
|
|
"Public": "20150813"
|
|
},
|
|
{
|
|
"ID": "BDU:2015-11091",
|
|
"CVSS": "AV:N/AC:L/Au:N/C:C/I:C/A:C",
|
|
"CWE": "CWE-843",
|
|
"Href": "https://bdu.fstec.ru/vul/2015-11091",
|
|
"Impact": "Critical",
|
|
"Public": "20150813"
|
|
},
|
|
{
|
|
"ID": "BDU:2015-11092",
|
|
"CVSS": "AV:N/AC:L/Au:N/C:C/I:C/A:C",
|
|
"CWE": "CWE-843",
|
|
"Href": "https://bdu.fstec.ru/vul/2015-11092",
|
|
"Impact": "Critical",
|
|
"Public": "20150813"
|
|
},
|
|
{
|
|
"ID": "BDU:2015-11093",
|
|
"CVSS": "AV:N/AC:L/Au:N/C:C/I:C/A:C",
|
|
"CWE": "CWE-416",
|
|
"Href": "https://bdu.fstec.ru/vul/2015-11093",
|
|
"Impact": "Critical",
|
|
"Public": "20150813"
|
|
},
|
|
{
|
|
"ID": "BDU:2015-11094",
|
|
"CVSS": "AV:N/AC:L/Au:N/C:C/I:C/A:C",
|
|
"CWE": "CWE-416",
|
|
"Href": "https://bdu.fstec.ru/vul/2015-11094",
|
|
"Impact": "Critical",
|
|
"Public": "20150813"
|
|
},
|
|
{
|
|
"ID": "BDU:2015-11095",
|
|
"CVSS": "AV:N/AC:L/Au:N/C:C/I:C/A:C",
|
|
"CWE": "CWE-843",
|
|
"Href": "https://bdu.fstec.ru/vul/2015-11095",
|
|
"Impact": "Critical",
|
|
"Public": "20150813"
|
|
},
|
|
{
|
|
"ID": "BDU:2015-11096",
|
|
"CVSS": "AV:N/AC:L/Au:N/C:C/I:C/A:C",
|
|
"CWE": "CWE-416",
|
|
"Href": "https://bdu.fstec.ru/vul/2015-11096",
|
|
"Impact": "Critical",
|
|
"Public": "20150813"
|
|
},
|
|
{
|
|
"ID": "BDU:2015-11097",
|
|
"CVSS": "AV:N/AC:L/Au:N/C:C/I:C/A:C",
|
|
"CWE": "CWE-189",
|
|
"Href": "https://bdu.fstec.ru/vul/2015-11097",
|
|
"Impact": "Critical",
|
|
"Public": "20150813"
|
|
},
|
|
{
|
|
"ID": "BDU:2015-11098",
|
|
"CVSS": "AV:N/AC:L/Au:N/C:C/I:C/A:C",
|
|
"CWE": "CWE-416",
|
|
"Href": "https://bdu.fstec.ru/vul/2015-11098",
|
|
"Impact": "Critical",
|
|
"Public": "20150813"
|
|
},
|
|
{
|
|
"ID": "BDU:2015-11099",
|
|
"CVSS": "AV:N/AC:L/Au:N/C:C/I:C/A:C",
|
|
"CWE": "CWE-843",
|
|
"Href": "https://bdu.fstec.ru/vul/2015-11099",
|
|
"Impact": "Critical",
|
|
"Public": "20150813"
|
|
},
|
|
{
|
|
"ID": "BDU:2015-11100",
|
|
"CVSS": "AV:N/AC:L/Au:N/C:C/I:C/A:C",
|
|
"CWE": "CWE-416",
|
|
"Href": "https://bdu.fstec.ru/vul/2015-11100",
|
|
"Impact": "Critical",
|
|
"Public": "20150813"
|
|
},
|
|
{
|
|
"ID": "BDU:2015-11101",
|
|
"CVSS": "AV:N/AC:L/Au:N/C:C/I:C/A:C",
|
|
"CWE": "CWE-416",
|
|
"Href": "https://bdu.fstec.ru/vul/2015-11101",
|
|
"Impact": "Critical",
|
|
"Public": "20150813"
|
|
}
|
|
],
|
|
"CVEs": [
|
|
{
|
|
"ID": "CVE-2015-3107",
|
|
"CVSS": "AV:N/AC:L/Au:N/C:C/I:C/A:C",
|
|
"CWE": "NVD-CWE-Other",
|
|
"Href": "https://nvd.nist.gov/vuln/detail/CVE-2015-3107",
|
|
"Impact": "Critical",
|
|
"Public": "20150610"
|
|
},
|
|
{
|
|
"ID": "CVE-2015-5124",
|
|
"CVSS": "AV:N/AC:L/Au:N/C:C/I:C/A:C",
|
|
"CWE": "CWE-119",
|
|
"Href": "https://nvd.nist.gov/vuln/detail/CVE-2015-5124",
|
|
"Impact": "Critical",
|
|
"Public": "20150720"
|
|
},
|
|
{
|
|
"ID": "CVE-2015-5125",
|
|
"CVSS": "AV:N/AC:L/Au:N/C:C/I:C/A:C",
|
|
"CWE": "CWE-119",
|
|
"Href": "https://nvd.nist.gov/vuln/detail/CVE-2015-5125",
|
|
"Impact": "Critical",
|
|
"Public": "20150814"
|
|
},
|
|
{
|
|
"ID": "CVE-2015-5127",
|
|
"CVSS": "AV:N/AC:L/Au:N/C:C/I:C/A:C",
|
|
"CWE": "NVD-CWE-Other",
|
|
"Href": "https://nvd.nist.gov/vuln/detail/CVE-2015-5127",
|
|
"Impact": "Critical",
|
|
"Public": "20150814"
|
|
},
|
|
{
|
|
"ID": "CVE-2015-5128",
|
|
"Href": "https://nvd.nist.gov/vuln/detail/CVE-2015-5128",
|
|
"Impact": "None",
|
|
"Public": "20151008"
|
|
},
|
|
{
|
|
"ID": "CVE-2015-5129",
|
|
"CVSS": "AV:N/AC:L/Au:N/C:C/I:C/A:C",
|
|
"CWE": "CWE-119",
|
|
"Href": "https://nvd.nist.gov/vuln/detail/CVE-2015-5129",
|
|
"Impact": "Critical",
|
|
"Public": "20150814"
|
|
},
|
|
{
|
|
"ID": "CVE-2015-5130",
|
|
"CVSS": "AV:N/AC:L/Au:N/C:C/I:C/A:C",
|
|
"CWE": "NVD-CWE-Other",
|
|
"Href": "https://nvd.nist.gov/vuln/detail/CVE-2015-5130",
|
|
"Impact": "Critical",
|
|
"Public": "20150814"
|
|
},
|
|
{
|
|
"ID": "CVE-2015-5131",
|
|
"CVSS": "AV:N/AC:L/Au:N/C:C/I:C/A:C",
|
|
"CWE": "CWE-119",
|
|
"Href": "https://nvd.nist.gov/vuln/detail/CVE-2015-5131",
|
|
"Impact": "Critical",
|
|
"Public": "20150814"
|
|
},
|
|
{
|
|
"ID": "CVE-2015-5132",
|
|
"CVSS": "AV:N/AC:L/Au:N/C:C/I:C/A:C",
|
|
"CWE": "CWE-119",
|
|
"Href": "https://nvd.nist.gov/vuln/detail/CVE-2015-5132",
|
|
"Impact": "Critical",
|
|
"Public": "20150814"
|
|
},
|
|
{
|
|
"ID": "CVE-2015-5133",
|
|
"CVSS": "AV:N/AC:L/Au:N/C:C/I:C/A:C",
|
|
"CWE": "CWE-119",
|
|
"Href": "https://nvd.nist.gov/vuln/detail/CVE-2015-5133",
|
|
"Impact": "Critical",
|
|
"Public": "20150814"
|
|
},
|
|
{
|
|
"ID": "CVE-2015-5134",
|
|
"CVSS": "AV:N/AC:L/Au:N/C:C/I:C/A:C",
|
|
"CWE": "NVD-CWE-Other",
|
|
"Href": "https://nvd.nist.gov/vuln/detail/CVE-2015-5134",
|
|
"Impact": "Critical",
|
|
"Public": "20150814"
|
|
},
|
|
{
|
|
"ID": "CVE-2015-5539",
|
|
"CVSS": "AV:N/AC:L/Au:N/C:C/I:C/A:C",
|
|
"CWE": "NVD-CWE-Other",
|
|
"Href": "https://nvd.nist.gov/vuln/detail/CVE-2015-5539",
|
|
"Impact": "Critical",
|
|
"Public": "20150814"
|
|
},
|
|
{
|
|
"ID": "CVE-2015-5540",
|
|
"CVSS": "AV:N/AC:L/Au:N/C:C/I:C/A:C",
|
|
"CWE": "NVD-CWE-Other",
|
|
"Href": "https://nvd.nist.gov/vuln/detail/CVE-2015-5540",
|
|
"Impact": "Critical",
|
|
"Public": "20150814"
|
|
},
|
|
{
|
|
"ID": "CVE-2015-5541",
|
|
"CVSS": "AV:N/AC:L/Au:N/C:C/I:C/A:C",
|
|
"CWE": "CWE-119",
|
|
"Href": "https://nvd.nist.gov/vuln/detail/CVE-2015-5541",
|
|
"Impact": "Critical",
|
|
"Public": "20150814"
|
|
},
|
|
{
|
|
"ID": "CVE-2015-5544",
|
|
"CVSS": "AV:N/AC:L/Au:N/C:C/I:C/A:C",
|
|
"CWE": "CWE-119",
|
|
"Href": "https://nvd.nist.gov/vuln/detail/CVE-2015-5544",
|
|
"Impact": "Critical",
|
|
"Public": "20150814"
|
|
},
|
|
{
|
|
"ID": "CVE-2015-5545",
|
|
"CVSS": "AV:N/AC:L/Au:N/C:C/I:C/A:C",
|
|
"CWE": "CWE-119",
|
|
"Href": "https://nvd.nist.gov/vuln/detail/CVE-2015-5545",
|
|
"Impact": "Critical",
|
|
"Public": "20150814"
|
|
},
|
|
{
|
|
"ID": "CVE-2015-5546",
|
|
"CVSS": "AV:N/AC:L/Au:N/C:C/I:C/A:C",
|
|
"CWE": "CWE-119",
|
|
"Href": "https://nvd.nist.gov/vuln/detail/CVE-2015-5546",
|
|
"Impact": "Critical",
|
|
"Public": "20150814"
|
|
},
|
|
{
|
|
"ID": "CVE-2015-5547",
|
|
"CVSS": "AV:N/AC:L/Au:N/C:C/I:C/A:C",
|
|
"CWE": "CWE-119",
|
|
"Href": "https://nvd.nist.gov/vuln/detail/CVE-2015-5547",
|
|
"Impact": "Critical",
|
|
"Public": "20150814"
|
|
},
|
|
{
|
|
"ID": "CVE-2015-5548",
|
|
"CVSS": "AV:N/AC:L/Au:N/C:C/I:C/A:C",
|
|
"CWE": "CWE-119",
|
|
"Href": "https://nvd.nist.gov/vuln/detail/CVE-2015-5548",
|
|
"Impact": "Critical",
|
|
"Public": "20150814"
|
|
},
|
|
{
|
|
"ID": "CVE-2015-5549",
|
|
"CVSS": "AV:N/AC:L/Au:N/C:C/I:C/A:C",
|
|
"CWE": "CWE-119",
|
|
"Href": "https://nvd.nist.gov/vuln/detail/CVE-2015-5549",
|
|
"Impact": "Critical",
|
|
"Public": "20150814"
|
|
},
|
|
{
|
|
"ID": "CVE-2015-5550",
|
|
"CVSS": "AV:N/AC:L/Au:N/C:C/I:C/A:C",
|
|
"CWE": "NVD-CWE-Other",
|
|
"Href": "https://nvd.nist.gov/vuln/detail/CVE-2015-5550",
|
|
"Impact": "Critical",
|
|
"Public": "20150814"
|
|
},
|
|
{
|
|
"ID": "CVE-2015-5551",
|
|
"CVSS": "AV:N/AC:L/Au:N/C:C/I:C/A:C",
|
|
"CWE": "NVD-CWE-Other",
|
|
"Href": "https://nvd.nist.gov/vuln/detail/CVE-2015-5551",
|
|
"Impact": "Critical",
|
|
"Public": "20150814"
|
|
},
|
|
{
|
|
"ID": "CVE-2015-5552",
|
|
"CVSS": "AV:N/AC:L/Au:N/C:C/I:C/A:C",
|
|
"CWE": "CWE-119",
|
|
"Href": "https://nvd.nist.gov/vuln/detail/CVE-2015-5552",
|
|
"Impact": "Critical",
|
|
"Public": "20150814"
|
|
},
|
|
{
|
|
"ID": "CVE-2015-5553",
|
|
"CVSS": "AV:N/AC:L/Au:N/C:C/I:C/A:C",
|
|
"CWE": "CWE-119",
|
|
"Href": "https://nvd.nist.gov/vuln/detail/CVE-2015-5553",
|
|
"Impact": "Critical",
|
|
"Public": "20150814"
|
|
},
|
|
{
|
|
"ID": "CVE-2015-5554",
|
|
"CVSS": "AV:N/AC:L/Au:N/C:C/I:C/A:C",
|
|
"CWE": "NVD-CWE-Other",
|
|
"Href": "https://nvd.nist.gov/vuln/detail/CVE-2015-5554",
|
|
"Impact": "Critical",
|
|
"Public": "20150814"
|
|
},
|
|
{
|
|
"ID": "CVE-2015-5555",
|
|
"CVSS": "AV:N/AC:L/Au:N/C:C/I:C/A:C",
|
|
"CWE": "NVD-CWE-Other",
|
|
"Href": "https://nvd.nist.gov/vuln/detail/CVE-2015-5555",
|
|
"Impact": "Critical",
|
|
"Public": "20150814"
|
|
},
|
|
{
|
|
"ID": "CVE-2015-5556",
|
|
"CVSS": "AV:N/AC:L/Au:N/C:C/I:C/A:C",
|
|
"CWE": "NVD-CWE-Other",
|
|
"Href": "https://nvd.nist.gov/vuln/detail/CVE-2015-5556",
|
|
"Impact": "Critical",
|
|
"Public": "20150814"
|
|
},
|
|
{
|
|
"ID": "CVE-2015-5557",
|
|
"CVSS": "AV:N/AC:L/Au:N/C:C/I:C/A:C",
|
|
"CWE": "NVD-CWE-Other",
|
|
"Href": "https://nvd.nist.gov/vuln/detail/CVE-2015-5557",
|
|
"Impact": "Critical",
|
|
"Public": "20150814"
|
|
},
|
|
{
|
|
"ID": "CVE-2015-5558",
|
|
"CVSS": "AV:N/AC:L/Au:N/C:C/I:C/A:C",
|
|
"CWE": "NVD-CWE-Other",
|
|
"Href": "https://nvd.nist.gov/vuln/detail/CVE-2015-5558",
|
|
"Impact": "Critical",
|
|
"Public": "20150814"
|
|
},
|
|
{
|
|
"ID": "CVE-2015-5559",
|
|
"CVSS": "AV:N/AC:L/Au:N/C:C/I:C/A:C",
|
|
"CWE": "NVD-CWE-Other",
|
|
"Href": "https://nvd.nist.gov/vuln/detail/CVE-2015-5559",
|
|
"Impact": "Critical",
|
|
"Public": "20150814"
|
|
},
|
|
{
|
|
"ID": "CVE-2015-5560",
|
|
"CVSS": "AV:N/AC:L/Au:N/C:C/I:C/A:C",
|
|
"CWE": "CWE-189",
|
|
"Href": "https://nvd.nist.gov/vuln/detail/CVE-2015-5560",
|
|
"Impact": "Critical",
|
|
"Public": "20150814"
|
|
},
|
|
{
|
|
"ID": "CVE-2015-5561",
|
|
"CVSS": "AV:N/AC:L/Au:N/C:C/I:C/A:C",
|
|
"CWE": "NVD-CWE-Other",
|
|
"Href": "https://nvd.nist.gov/vuln/detail/CVE-2015-5561",
|
|
"Impact": "Critical",
|
|
"Public": "20150814"
|
|
},
|
|
{
|
|
"ID": "CVE-2015-5562",
|
|
"CVSS": "AV:N/AC:L/Au:N/C:C/I:C/A:C",
|
|
"CWE": "NVD-CWE-Other",
|
|
"Href": "https://nvd.nist.gov/vuln/detail/CVE-2015-5562",
|
|
"Impact": "Critical",
|
|
"Public": "20150814"
|
|
},
|
|
{
|
|
"ID": "CVE-2015-5563",
|
|
"CVSS": "AV:N/AC:L/Au:N/C:C/I:C/A:C",
|
|
"CWE": "NVD-CWE-Other",
|
|
"Href": "https://nvd.nist.gov/vuln/detail/CVE-2015-5563",
|
|
"Impact": "Critical",
|
|
"Public": "20150814"
|
|
},
|
|
{
|
|
"ID": "CVE-2015-5564",
|
|
"CVSS": "AV:N/AC:L/Au:N/C:C/I:C/A:C",
|
|
"CWE": "NVD-CWE-Other",
|
|
"Href": "https://nvd.nist.gov/vuln/detail/CVE-2015-5564",
|
|
"Impact": "Critical",
|
|
"Public": "20150814"
|
|
}
|
|
],
|
|
"AffectedCPEs": {
|
|
"CPEs": [
|
|
"cpe:/o:alt:spworkstation:8.4",
|
|
"cpe:/o:alt:spserver:8.4"
|
|
]
|
|
}
|
|
}
|
|
},
|
|
"Criteria": {
|
|
"Operator": "AND",
|
|
"Criterions": [
|
|
{
|
|
"TestRef": "oval:org.altlinux.errata:tst:3001",
|
|
"Comment": "ALT Linux must be installed"
|
|
}
|
|
],
|
|
"Criterias": [
|
|
{
|
|
"Operator": "OR",
|
|
"Criterions": [
|
|
{
|
|
"TestRef": "oval:org.altlinux.errata:tst:20151674001",
|
|
"Comment": "i586-mozilla-plugin-adobe-flash is earlier than 3:11.2.202.508-alt52"
|
|
},
|
|
{
|
|
"TestRef": "oval:org.altlinux.errata:tst:20151674002",
|
|
"Comment": "mozilla-plugin-adobe-flash is earlier than 3:11.2.202.508-alt52"
|
|
}
|
|
]
|
|
}
|
|
]
|
|
}
|
|
}
|
|
]
|
|
} |