ALT-PU-2017-3648

Критический

ALT-PU-2017-3648: package adobe-flash-player update to version 27-alt1.S1

Источник

errata.altlinux.org

Дата публикации

21.09.2017

Дата обновления

21.09.2017

Устраненные уязвимости

ALT Linux branch p11

ALT Container

ALT Education

ALT Workstation

ALT Workstation K

ALT Server

ALT Virtualization PVE Edition

ALT Linux branch p10

ALT Server

ALT Virtualization Server

ALT Workstation

ALT Workstation K

ALT Education

Simply Linux

Starterkit

ALT Container

Описание

This update upgrades adobe-flash-player to version 27-alt1.S1.

Устраненные уязвимости2

CVE-2017-11281

Критический 9.8

Дата публикации: 01.12.2017

CWE-119

Adobe Flash Player has an exploitable memory corruption vulnerability in the text handling function. Successful exploitation could lead to arbitrary code execution. This affects 26.0.0.151 and earlier.

CVSS 3.0

Критический 9.8

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Attack vector: Network
Complexity: Low
Privileges: None
User interaction: None
Scope: Unchanged
Confidentiality: High
Integrity: High
Availability: High

CVSS 2.0

Высокий 7.5

AV:N/AC:L/Au:N/C:P/I:P/A:P

Access vector: Network
Complexity: Low
Authentication: None
Confidentiality: Partial
Integrity: Partial
Availability: Partial

Ссылки

CVE-2017-11281 https://nvd.nist.gov/vuln/detail/CVE-2017-11281

Ссылки1

ALT-PU-2017-3648 https://errata.altlinux.org/ALT-PU-2017-3648

Связанные уязвимости

ALT-PU-2017-2290

CVSS3: 9.8

altlinux

около 9 лет назад

ALT-PU-2017-2290: package `adobe-flash-player-ppapi` update to version 27-alt1.S1

ADV170013

msrc

около 9 лет назад

September 2017 Flash Security Update

CVE-2017-11282

CVSS3: 9.8

ubuntu

почти 9 лет назад

Adobe Flash Player has an exploitable memory corruption vulnerability in the MP4 atom parser. Successful exploitation could lead to arbitrary code execution. This affects 26.0.0.151 and earlier.

CVE-2017-11282

CVSS3: 8.8

redhat

около 9 лет назад

Adobe Flash Player has an exploitable memory corruption vulnerability in the MP4 atom parser. Successful exploitation could lead to arbitrary code execution. This affects 26.0.0.151 and earlier.

CVE-2017-11282

CVSS3: 9.8

nvd

почти 9 лет назад

Adobe Flash Player has an exploitable memory corruption vulnerability in the MP4 atom parser. Successful exploitation could lead to arbitrary code execution. This affects 26.0.0.151 and earlier.