Skip to content
OpenAdvisories
High 2 exploited CVEs RHSA-2015:1235 2 CVEs

Red Hat Security Advisory: flash-plugin security update

Published Sep 13, 2024 · Updated Jun 29, 2026

Ecosystem: Red Hat

Fixed packages 3

ReleasePackageFixed in
Red Hat · RHEL 5 rhel_extras:5::client flash-plugin 0:11.2.202.491-1.el5
Red Hat · RHEL 5 rhel_extras:5::server flash-plugin 0:11.2.202.491-1.el5
Red Hat · RHEL 6 rhel_extras:6 flash-plugin 0:11.2.202.491-1.el6_6

Vulnerabilities 2

  • High 7.8
    CVE-2015-5122 Exploited Public exploit EPSS 87%

    Use-after-free vulnerability in the DisplayObject class in the ActionScript 3 (AS3) implementation in Adobe Flash Playe…

    flashplugin-nonfree Ubuntu
    KEV Apr 13, 2022
  • High 7.8
    CVE-2015-5123 Exploited EPSS 19%

    Use-after-free vulnerability in the BitmapData class in the ActionScript 3 (AS3) implementation in Adobe Flash Player 1…

    flashplugin-nonfree Ubuntu
    KEV Apr 13, 2022

References

  • article
    https://access.redhat.com/security/updates/classification/#critical
  • article
    https://helpx.adobe.com/security/products/flash-player/apsb15-18.html
  • article
    https://helpx.adobe.com/security/products/flash-player/apsa15-04.html
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1242216
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2015/rhsa-2015_1235.json
  • report
    https://access.redhat.com/security/cve/CVE-2015-5122
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2015-5122
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2015-5122
  • article
    https://www.cisa.gov/known-exploited-vulnerabilities-catalog
  • report
    https://access.redhat.com/security/cve/CVE-2015-5123
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2015-5123
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2015-5123