Flash Player <= 16.0.0.257 Information Disclosure (APSB15-02)

low Nessus Network Monitor Plugin ID 8658

Synopsis

The remote host is running an outdated version of Adobe Flash Player for Internet Explorer which is affected by an information disclosure vulnerability.

Description

According to its version number, the instance of Flash Player on the remote host is exposed to an information disclosure vulnerability due a flaw that can allow bypassing of memory randomization mitigations, aiding in further attacks.

Solution

Upgrade to Adobe Flash Player version 16.0.0.287 or later.\n\nAlternatively, Adobe has made version 13.0.0.262 available for those installs that cannot be upgraded to 16.x.

Plugin Details

Severity: Low

ID: 8658

Family: Web Clients

Published: 3/27/2015

Updated: 3/6/2019

Nessus ID: 80946

Risk Information

VPR

Risk Factor: High

Score: 8.9

CVSS v2

Risk Factor: Medium

Base Score: 4.3

Temporal Score: 3.6

Vector: CVSS2#AV:N/AC:M/Au:N/C:P/I:N/A:N

CVSS v3

Risk Factor: Low

Base Score: 3.7

Temporal Score: 3.5

Vector: CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N

Temporal Vector: CVSS:3.0/E:F/RL:O/RC:C

Vulnerability Information

CPE: cpe:/a:adobe:flash_player

Patch Publication Date: 1/22/2015

Vulnerability Publication Date: 1/21/2015

Reference Information

CVE: CVE-2015-0310

BID: 72261

Detections

Analytics