ALT-PU-2014-1155

Критический

ALT-PU-2014-1155: package adobe-flash-player update to version 11-alt25

Источник

errata.altlinux.org

Дата публикации

06.02.2014

Дата обновления

06.02.2014

Устраненные уязвимости

ALT Linux branch p11

ALT Container

ALT Education

ALT Workstation

ALT Workstation K

ALT Server

ALT Virtualization PVE Edition

ALT Linux branch p10

ALT Server

ALT Virtualization Server

ALT Workstation

ALT Workstation K

ALT Education

Simply Linux

Starterkit

ALT Container

Описание

This update upgrades adobe-flash-player to version 11-alt25.

Устраненные уязвимости1

CVE-2014-0497

Критический 9.8

Дата публикации: 05.02.2014

CWE-191

Integer underflow in Adobe Flash Player before 11.7.700.261 and 11.8.x through 12.0.x before 12.0.0.44 on Windows and Mac OS X, and before 11.2.202.336 on Linux, allows remote attackers to execute arbitrary code via unspecified vectors.

CVSS 3.1

Критический 9.8

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Attack vector: Network
Complexity: Low
Privileges: None
User interaction: None
Scope: Unchanged
Confidentiality: High
Integrity: High
Availability: High

CVSS 2.0

Критический 10

AV:N/AC:L/Au:N/C:C/I:C/A:C

Access vector: Network
Complexity: Low
Authentication: None
Confidentiality: Complete
Integrity: Complete
Availability: Complete

Ссылки

CVE-2014-0497 https://nvd.nist.gov/vuln/detail/CVE-2014-0497

Ссылки1

ALT-PU-2014-1155 https://errata.altlinux.org/ALT-PU-2014-1155

Связанные уязвимости

CVE-2014-0497

CVSS3: 9.8

ubuntu

почти 13 лет назад

CVE-2014-0497

redhat

почти 13 лет назад

CVE-2014-0497

CVSS3: 9.8

nvd

почти 13 лет назад

GHSA-qx9j-q623-p5fh

CVSS3: 8.8

github

больше 4 лет назад

ALT-PU-2014-1282

CVSS3: 9.8

altlinux

больше 12 лет назад

ALT-PU-2014-1282: package `chromium` update to version 33.0.1750.149-alt1