Adobe 报告：

这些更新解决了可导致代码执行的类型混淆漏洞 (CVE-2015-5573)。

这些更新解决了可导致代码执行的释放后使用漏洞（CVE-2015-5570、CVE-2015-5574、CVE-2015-5581、CVE-2015-5584、CVE-2015-6682）。

这些更新解决了可导致代码执行的缓冲区溢出漏洞（CVE-2015-6676、CVE-2015-6678）。

这些更新解决了可导致代码执行的内存损坏漏洞（CVE-2015-5575、CVE-2015-5577、CVE-2015-5578、CVE-2015-5580、CVE-2015-5582、CVE-2015-5588、CVE-2015-6677）。

这些更新包括其他验证检查，以确保 Flash Player 拒绝来自易受攻击的 JSONP 回调 API 的恶意内容 (CVE-2015-5571)。

这些更新解决了一个内存泄漏漏洞 (CVE-2015-5576)。

这些更新进一步强化了缓解，以防止矢量长度损坏 (CVE-2015-5568)。

这些更新解决了可导致代码执行的堆栈损坏漏洞（CVE-2015-5567、CVE-2015-5579）。

这些更新解决了可导致代码执行的堆栈溢出漏洞 (CVE-2015-5587)。

这些更新解决了可导致信息泄露的安全绕过漏洞 (CVE-2015-5572)。

这些更新解决了可用于绕过同源策略并导致信息泄露的漏洞 (CVE-2015-6679)。

Adobe Flash Player 已更新到版本 11.2.202.521 (APSB15-23 bsc#946880)，用于修复多个安全问题：

更多信息请参阅：

https://helpx.adobe.com/security/products/flash-player/apsb15-23.html

The version of Google Chrome on the remote host is prior to 45.0.2454.99 and is affected by the following vulnerabilities :

 - An unspecified stack corruption issue exists that allows a remote attacker to execute arbitrary code. (CVE-2015-5567, CVE-2015-5579) 
 - A vector length corruption issue exists that allows a remote attacker to have an unspecified impact. (CVE-2015-5568) 
 - A use-after-free error exists in an unspecified component due to improperly sanitized user-supplied input. A remote attacker can exploit this, via a specially crafted file, to deference already freed memory and execute arbitrary code. (CVE-2015-5570, CVE-2015-5574, CVE-2015-5581, CVE-2015-5584, CVE-2015-6682) 
 - An unspecified flaw exists due to a failure to reject content from vulnerable JSONP callback APIs. A remote attacker can exploit this to have an unspecified impact. (CVE-2015-5571) 
 - An unspecified flaw exists that allows a remote attacker to bypass security restrictions and gain access to sensitive information. (CVE-2015-5572) 
 - An unspecified type confusion flaw exists that allows a remote attacker to execute arbitrary code. (CVE-2015-5573) 
 - A flaw exists in an unspecified component due to improper validation of user-supplied input when handling a specially crafted file. A remote attacker can exploit this to corrupt memory, resulting in a denial of service or the execution of arbitrary code. (CVE-2015-5575, CVE-2015-5577, CVE-2015-5578, CVE-2015-5580, CVE-2015-5582, CVE-2015-5588, CVE-2015-6677) 
 - A memory leak issue exists that allows a remote attacker to have an unspecified impact. (CVE-2015-5576) 
 - A stack buffer overflow condition exists due to improper validation of user-supplied input. A remote attacker can exploit this to execute arbitrary code. (CVE-2015-5587) 
 - An unspecified overflow condition exists due to improper validation of user-supplied input. A remote attacker can exploit this to execute arbitrary code. (CVE-2015-6676, CVE-2015-6678) 
 - An unspecified flaw exists that allows a remote attacker to bypass same-origin policy restrictions and gain access to sensitive information. (CVE-2015-6679)

The version of Google Chrome OS on the remote mobile host is prior to 45.0.2454.98 and thus unpatched for the following vulnerabilities :

 - An unspecified stack corruption issue exists that allows a remote attacker to execute arbitrary code. (CVE-2015-5567, CVE-2015-5579) 
 - A vector length corruption issue exists that allows a remote attacker to have an unspecified impact. (CVE-2015-5568) 
 - A use-after-free error exists in an unspecified component due to improperly sanitized user-supplied input. A remote attacker can exploit this, via a specially crafted file, to deference already freed memory and execute arbitrary code. (CVE-2015-5570, CVE-2015-5574, CVE-2015-5581, CVE-2015-5584, CVE-2015-6682) 
 - An unspecified flaw exists due to a failure to reject content from vulnerable JSONP callback APIs. A remote attacker can exploit this to have an unspecified impact. (CVE-2015-5571) 
 - An unspecified flaw exists that allows a remote attacker to bypass security restrictions and gain access to sensitive information. (CVE-2015-5572) 
 - An unspecified type confusion flaw exists that allows a remote attacker to execute arbitrary code. (CVE-2015-5573) 
 - A flaw exists in an unspecified component due to improper validation of user-supplied input when handling a specially crafted file. A remote attacker can exploit this to corrupt memory, resulting in a denial of service or the execution of arbitrary code. (CVE-2015-5575, CVE-2015-5577, CVE-2015-5578, CVE-2015-5580, CVE-2015-5582, CVE-2015-5588, CVE-2015-6677) 
 - A memory leak issue exists that allows a remote attacker to have an unspecified impact. (CVE-2015-5576) 
 - A stack buffer overflow condition exists due to improper validation of user-supplied input. A remote attacker can exploit this to execute arbitrary code. (CVE-2015-5587) 
 - An unspecified overflow condition exists due to improper validation of user-supplied input. A remote attacker can exploit this to execute arbitrary code. (CVE-2015-6676, CVE-2015-6678) 
 - An unspecified flaw exists that allows a remote attacker to bypass same-origin policy restrictions and gain access to sensitive information. (CVE-2015-6679)

Versions of Adobe AIR prior to 19.0.0.190 are outdated and thus unpatched for the following vulnerabilities :

  - An unspecified stack corruption issue exists that allows a remote attacker to execute arbitrary code. (CVE-2015-5567, CVE-2015-5579)
 - A vector length corruption issue exists that allows a remote attacker to have an unspecified impact. (CVE-2015-5568)
 - A use-after-free error exists in an unspecified component due to improperly sanitized user-supplied input. A remote attacker can exploit this, via a specially crafted file, to dereference already freed memory and execute arbitrary code. (CVE-2015-5570, CVE-2015-5574, CVE-2015-5581, CVE-2015-5584, CVE-2015-6682)
 - An unspecified flaw exists due to a failure to reject content from vulnerable JSONP callback APIs. A remote attacker can exploit this to have an unspecified impact. (CVE-2015-5571)
 - An unspecified flaw exists that allows a remote attacker to bypass security restrictions and gain access to sensitive information. (CVE-2015-5572)
 - An unspecified type confusion flaw exists that allows a remote attacker to execute arbitrary code. (CVE-2015-5573)
 - A flaw exists in an unspecified component due to improper validation of user-supplied input when handling a specially crafted file. A remote attacker can exploit this to corrupt memory, resulting in a denial of service or the execution of arbitrary code. (CVE-2015-5575, CVE-2015-5577, CVE-2015-5578, CVE-2015-5580, CVE-2015-5582, CVE-2015-5588, CVE-2015-6677)
 - A memory leak issue exists that allows a remote attacker to have an unspecified impact. (CVE-2015-5576)
 - A stack buffer overflow condition exists due to improper validation of user-supplied input. A remote attacker can exploit this to execute arbitrary code. (CVE-2015-5587)
 - An unspecified overflow condition exists due to improper validation of user-supplied input. A remote attacker can exploit this to execute arbitrary code. (CVE-2015-6676, CVE-2015-6678)
 - An unspecified flaw exists that allows a remote attacker to bypass same-origin policy restrictions and gain access to sensitive information. (CVE-2015-6679)

Versions of Adobe Flash Player prior to 19.0.0.185 are outdated and thus unpatched for the following vulnerabilities :

  - An unspecified stack corruption issue exists that allows a remote attacker to execute arbitrary code. (CVE-2015-5567, CVE-2015-5579)
 - A vector length corruption issue exists that allows a remote attacker to have an unspecified impact. (CVE-2015-5568)
 - A use-after-free error exists in an unspecified component due to improperly sanitized user-supplied input. A remote attacker can exploit this, via a specially crafted file, to dereference already freed memory and execute arbitrary code. (CVE-2015-5570, CVE-2015-5574, CVE-2015-5581, CVE-2015-5584, CVE-2015-6682)
 - An unspecified flaw exists due to a failure to reject content from vulnerable JSONP callback APIs. A remote attacker can exploit this to have an unspecified impact. (CVE-2015-5571)
 - An unspecified flaw exists that allows a remote attacker to bypass security restrictions and gain access to sensitive information. (CVE-2015-5572)
 - An unspecified type confusion flaw exists that allows a remote attacker to execute arbitrary code. (CVE-2015-5573)
 - A flaw exists in an unspecified component due to improper validation of user-supplied input when handling a specially crafted file. A remote attacker can exploit this to corrupt memory, resulting in a denial of service or the execution of arbitrary code. (CVE-2015-5575, CVE-2015-5577, CVE-2015-5578, CVE-2015-5580, CVE-2015-5582, CVE-2015-5588, CVE-2015-6677)
 - A memory leak issue exists that allows a remote attacker to have an unspecified impact. (CVE-2015-5576)
 - A stack buffer overflow condition exists due to improper validation of user-supplied input. A remote attacker can exploit this to execute arbitrary code. (CVE-2015-5587)
 - An unspecified overflow condition exists due to improper validation of user-supplied input. A remote attacker can exploit this to execute arbitrary code. (CVE-2015-6676, CVE-2015-6678)
 - An unspecified flaw exists that allows a remote attacker to bypass same-origin policy restrictions and gain access to sensitive information. (CVE-2015-6679)

ID	名前	製品	ファミリー	公開日	更新日	深刻度
86188	FreeBSD：flash -- 多种漏洞 (4e3e8a50-65c1-11e5-948e-bcaec565249c)	Nessus	FreeBSD Local Security Checks	2015/9/29	2021/1/6	critical
86120	openSUSE 安全更新：flash-player (openSUSE-2015-603)	Nessus	SuSE Local Security Checks	2015/9/24	2021/1/19	critical
8884	Google Chrome < 45.0.2454.99 Multiple Vulnerabilities	Nessus Network Monitor	Web Clients	2015/10/2	2019/3/6	high
8888	Google Chrome OS < 45.0.2454.98 Multiple Vulnerabilities	Nessus Network Monitor	Mobile Devices	2015/10/2	2019/3/6	high
9003	Adobe AIR < 19.0.0.190 Multiple Vulnerabilities (APSB15-23)	Nessus Network Monitor	Web Clients	2015/10/21	2019/3/6	critical
9004	Flash Player < 19.0.0.185 Multiple Vulnerabilities (APSB15-23)	Nessus Network Monitor	Web Clients	2015/10/21	2019/3/6	critical

検出

プラグインの検索

critical

critical

high

high

critical

critical