Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
kasperskyKaspersky LabKLA11414
HistoryFeb 12, 2019 - 12:00 a.m.

KLA11414 OSI vulnerability in Adobe Flash Player

2019-02-1200:00:00
Kaspersky Lab
threats.kaspersky.com
40

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:N/A:N

6.5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

6.8 Medium

AI Score

Confidence

High

0.032 Low

EPSS

Percentile

91.3%

JSON

An out-of-bounds vulnerability was found in Adobe Flash Player. Malicious users can exploit this vulnerability to obtain sensitive information.

Technical details

To update Adobe Flash Player ActiveX (detected as Flash.ocx) on Windows 8 and higher, use the solution from KLA11415

Original advisories

APSB19-06

Exploitation

Malware exists for this vulnerability. Usually such malware is classified as Exploit. More details.

Related products

Adobe-Flash-Player-ActiveX

Adobe-Flash-Player-NPAPI

Adobe-Flash-Player-PPAPI

CVE list

CVE-2019-7090 warning

Solution

Update to the latest version

Flash Player Download Center

Impacts

  • OSI

Obtain sensitive information. Exploitation of vulnerabilities with this impact can lead to capturing by abuser information, critical for user or system.

Affected Products

  • Adobe Flash Player earlier than 32.0.0.142

Related

nessus 5
openvas 8
cve 1
zdi 1
checkpoint_advisories 1
mageia 1
mscve 1
redhatcve 1
nvd 1
redhat 1
cvelist 1
prion 1
freebsd 1
adobe 1
thn 1
qualysblog 1
threatpost 1
nessus
nessus
Adobe Flash Player for Mac <= 32.0.0.114 (APSB19-06)
2019-02-12 00:00:00
RHEL 6 : flash-plugin (RHSA-2019:0348)
2019-02-14 00:00:00
KB4487038: Security update for Adobe Flash Player (February 2019)
2019-02-12 00:00:00
openvas
openvas
Adobe Flash Player Security Update (APSB19-06) - Linux
2019-02-13 00:00:00
Adobe Flash Player Security Update (APSB19-06) - Windows
2019-02-13 00:00:00
Adobe Flash Player Within Google Chrome Security Update (APSB19-06) - Windows
2019-02-13 00:00:00
cve
cve
CVE-2019-7090
2019-05-24 19:29:02
zdi
zdi
Adobe Flash Player ActionScript Vector Out-Of-Bounds Read Information Disclosure Vulnerability
2019-02-12 00:00:00
checkpoint_advisories
checkpoint_advisories
Adobe Flash Player Out-of-bounds read (APSB19-06: CVE-2019-7090)
2019-02-12 00:00:00
mageia
mageia
Updated flash-player-plugin packages fix security vulnerability
2019-02-17 20:17:45
mscve
mscve
February 2019 Adobe Flash Security Update
2019-02-12 08:00:00
redhatcve
redhatcve
CVE-2019-7090
2019-10-11 15:49:50
nvd
nvd
CVE-2019-7090
2019-05-24 19:29:02
redhat
redhat
(RHSA-2019:0348) Important: flash-plugin security update
2019-02-14 03:51:12
cvelist
cvelist
CVE-2019-7090
2019-05-24 18:41:31
prion
prion
Out-of-bounds
2019-05-24 19:29:00
freebsd
freebsd
Flash Player -- information disclosure
2019-02-12 00:00:00
adobe
adobe
APSB19-06 Security updates available for Adobe Flash Player
2019-02-12 00:00:00
thn
thn
Adobe Releases February 2019 Patch Updates For 75 Vulnerabilities
2019-02-12 17:21:00
qualysblog
qualysblog
February 2019 Patch Tuesday – 74 Vulns, 20 Critical, Exchange 0-day, Adobe Vulns
2019-02-12 19:46:37
threatpost
threatpost
Adobe Fixes 43 Critical Acrobat and Reader Flaws
2019-02-12 15:09:48

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:N/A:N

6.5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

6.8 Medium

AI Score

Confidence

High

0.032 Low

EPSS

Percentile

91.3%

JSON
Related for KLA11414
nessus5openvas8cve1zdi1checkpoint_advisories1mageia1mscve1redhatcve1nvd1redhat1cvelist1prion1freebsd1adobe1thn1qualysblog1threatpost1