Adobe 報告：

これらの更新により、コード実行を引き起こす可能性がある型の取り違え（type confusion）の脆弱性を解決します（CVE-2015-5573）。

これらの更新は、コードの実行を引き起こす可能性がある use-after-free の脆弱性を解決します（CVE-2015-5570、CVE-2015-5574、CVE-2015-5581、CVE-2015-5584、CVE-2015-6682）。

これらの更新は、コードの実行につながる、バッファオーバーフローの脆弱性を解決します（CVE-2015-6676、CVE-2015-6678）。

これらの更新は、コードの実行を引き起こす可能性があるメモリ破損の脆弱性を解決します（CVE-2015-5575、CVE-2015-5577、CVE-2015-5578、CVE-2015-5580、CVE-2015-5582、CVE-2015-5588、CVE-2015-6677）。

これらの更新には、Flash Player が脆弱な JSONP コールバック API からの悪意あるコンテンツを必ず拒否するように、追加の検証チェックが含まれています（CVE-2015-5571）。

これらの更新は、メモリ漏洩の脆弱性を解決します（CVE-2015-5576）。

これらの更新には、ベクトル長の破損に対する防御のための緩和のさらなる強化が含まれています（CVE-2015-5568）。

これらの更新は、コードの実行につながる、スタック破損の脆弱性を解決します（CVE-2015-5567、CVE-2015-5579）。

これらの更新では、コード実行につながるスタックオーバーフロー脆弱性を解決しています（CVE-2015-5587）。

これらの更新は、情報漏洩を引き起こす可能性があるセキュリティバイパスの脆弱性を解決します（CVE-2015-5572）。

これらの更新により、同一生成元ポリシーをバイパスし、情報漏洩を引き起こすために悪用される可能性がある脆弱性を解決します（CVE-2015-6679）。

Adobe Flash Player は、複数のセキュリティ上の問題を修正するために 11.2.202.521（APSB15-23 bsc#946880）に更新されています。

詳細については、次の URL を参照してください。

https://helpx.adobe.com/security/products/flash-player/apsb15-23.html

注意：Tenable Network Security は、前述の記述ブロックを SUSE セキュリティアドバイザリから直接抽出しています。Tenable では、できる限り新たな問題を持ち込まないように、自動的に整理して書式設定するようにしています。

The version of Google Chrome OS on the remote mobile host is prior to 45.0.2454.98 and thus unpatched for the following vulnerabilities :

 - An unspecified stack corruption issue exists that allows a remote attacker to execute arbitrary code. (CVE-2015-5567, CVE-2015-5579) 
 - A vector length corruption issue exists that allows a remote attacker to have an unspecified impact. (CVE-2015-5568) 
 - A use-after-free error exists in an unspecified component due to improperly sanitized user-supplied input. A remote attacker can exploit this, via a specially crafted file, to deference already freed memory and execute arbitrary code. (CVE-2015-5570, CVE-2015-5574, CVE-2015-5581, CVE-2015-5584, CVE-2015-6682) 
 - An unspecified flaw exists due to a failure to reject content from vulnerable JSONP callback APIs. A remote attacker can exploit this to have an unspecified impact. (CVE-2015-5571) 
 - An unspecified flaw exists that allows a remote attacker to bypass security restrictions and gain access to sensitive information. (CVE-2015-5572) 
 - An unspecified type confusion flaw exists that allows a remote attacker to execute arbitrary code. (CVE-2015-5573) 
 - A flaw exists in an unspecified component due to improper validation of user-supplied input when handling a specially crafted file. A remote attacker can exploit this to corrupt memory, resulting in a denial of service or the execution of arbitrary code. (CVE-2015-5575, CVE-2015-5577, CVE-2015-5578, CVE-2015-5580, CVE-2015-5582, CVE-2015-5588, CVE-2015-6677) 
 - A memory leak issue exists that allows a remote attacker to have an unspecified impact. (CVE-2015-5576) 
 - A stack buffer overflow condition exists due to improper validation of user-supplied input. A remote attacker can exploit this to execute arbitrary code. (CVE-2015-5587) 
 - An unspecified overflow condition exists due to improper validation of user-supplied input. A remote attacker can exploit this to execute arbitrary code. (CVE-2015-6676, CVE-2015-6678) 
 - An unspecified flaw exists that allows a remote attacker to bypass same-origin policy restrictions and gain access to sensitive information. (CVE-2015-6679)

Versions of Adobe AIR prior to 19.0.0.190 are outdated and thus unpatched for the following vulnerabilities :

  - An unspecified stack corruption issue exists that allows a remote attacker to execute arbitrary code. (CVE-2015-5567, CVE-2015-5579)
 - A vector length corruption issue exists that allows a remote attacker to have an unspecified impact. (CVE-2015-5568)
 - A use-after-free error exists in an unspecified component due to improperly sanitized user-supplied input. A remote attacker can exploit this, via a specially crafted file, to dereference already freed memory and execute arbitrary code. (CVE-2015-5570, CVE-2015-5574, CVE-2015-5581, CVE-2015-5584, CVE-2015-6682)
 - An unspecified flaw exists due to a failure to reject content from vulnerable JSONP callback APIs. A remote attacker can exploit this to have an unspecified impact. (CVE-2015-5571)
 - An unspecified flaw exists that allows a remote attacker to bypass security restrictions and gain access to sensitive information. (CVE-2015-5572)
 - An unspecified type confusion flaw exists that allows a remote attacker to execute arbitrary code. (CVE-2015-5573)
 - A flaw exists in an unspecified component due to improper validation of user-supplied input when handling a specially crafted file. A remote attacker can exploit this to corrupt memory, resulting in a denial of service or the execution of arbitrary code. (CVE-2015-5575, CVE-2015-5577, CVE-2015-5578, CVE-2015-5580, CVE-2015-5582, CVE-2015-5588, CVE-2015-6677)
 - A memory leak issue exists that allows a remote attacker to have an unspecified impact. (CVE-2015-5576)
 - A stack buffer overflow condition exists due to improper validation of user-supplied input. A remote attacker can exploit this to execute arbitrary code. (CVE-2015-5587)
 - An unspecified overflow condition exists due to improper validation of user-supplied input. A remote attacker can exploit this to execute arbitrary code. (CVE-2015-6676, CVE-2015-6678)
 - An unspecified flaw exists that allows a remote attacker to bypass same-origin policy restrictions and gain access to sensitive information. (CVE-2015-6679)

Versions of Adobe Flash Player prior to 19.0.0.185 are outdated and thus unpatched for the following vulnerabilities :

  - An unspecified stack corruption issue exists that allows a remote attacker to execute arbitrary code. (CVE-2015-5567, CVE-2015-5579)
 - A vector length corruption issue exists that allows a remote attacker to have an unspecified impact. (CVE-2015-5568)
 - A use-after-free error exists in an unspecified component due to improperly sanitized user-supplied input. A remote attacker can exploit this, via a specially crafted file, to dereference already freed memory and execute arbitrary code. (CVE-2015-5570, CVE-2015-5574, CVE-2015-5581, CVE-2015-5584, CVE-2015-6682)
 - An unspecified flaw exists due to a failure to reject content from vulnerable JSONP callback APIs. A remote attacker can exploit this to have an unspecified impact. (CVE-2015-5571)
 - An unspecified flaw exists that allows a remote attacker to bypass security restrictions and gain access to sensitive information. (CVE-2015-5572)
 - An unspecified type confusion flaw exists that allows a remote attacker to execute arbitrary code. (CVE-2015-5573)
 - A flaw exists in an unspecified component due to improper validation of user-supplied input when handling a specially crafted file. A remote attacker can exploit this to corrupt memory, resulting in a denial of service or the execution of arbitrary code. (CVE-2015-5575, CVE-2015-5577, CVE-2015-5578, CVE-2015-5580, CVE-2015-5582, CVE-2015-5588, CVE-2015-6677)
 - A memory leak issue exists that allows a remote attacker to have an unspecified impact. (CVE-2015-5576)
 - A stack buffer overflow condition exists due to improper validation of user-supplied input. A remote attacker can exploit this to execute arbitrary code. (CVE-2015-5587)
 - An unspecified overflow condition exists due to improper validation of user-supplied input. A remote attacker can exploit this to execute arbitrary code. (CVE-2015-6676, CVE-2015-6678)
 - An unspecified flaw exists that allows a remote attacker to bypass same-origin policy restrictions and gain access to sensitive information. (CVE-2015-6679)

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
86188	FreeBSD：flash -- 複数の脆弱性（4e3e8a50-65c1-11e5-948e-bcaec565249c）	Nessus	FreeBSD Local Security Checks	2015/9/29	2021/1/6	critical
86141	SUSE SLED11 セキュリティ更新： flash-player （SUSE-SU-2015：1614-1）	Nessus	SuSE Local Security Checks	2015/9/25	2021/1/6	critical
8888	Google Chrome OS < 45.0.2454.98 Multiple Vulnerabilities	Nessus Network Monitor	Mobile Devices	2015/10/2	2019/3/6	high
9003	Adobe AIR < 19.0.0.190 Multiple Vulnerabilities (APSB15-23)	Nessus Network Monitor	Web Clients	2015/10/21	2019/3/6	critical
9004	Flash Player < 19.0.0.185 Multiple Vulnerabilities (APSB15-23)	Nessus Network Monitor	Web Clients	2015/10/21	2019/3/6	critical

检测

插件搜索

critical

critical

high

critical

critical