Описание
Security update for flash-player
The Adobe flash-player was updated to 24.0.0.221 to fix the following issues:
Security update to 24.0.0.221 (bsc#1025258), fixing the following vulnerabilities advised under APSB17-04:
- type confusion vulnerability that could lead to code execution (CVE-2017-2995).
- integer overflow vulnerability that could lead to code execution (CVE-2017-2987).
- use-after-free vulnerabilities that could lead to code execution (CVE-2017-2982, CVE-2017-2985, CVE-2017-2993, CVE-2017-2994).
- heap buffer overflow vulnerabilities that could lead to code execution (CVE-2017- 2984, CVE-2017-2986, CVE-2017-2992).
- memory corruption vulnerabilities that could lead to code execution (CVE-2017-2988, CVE-2017-2990, CVE-2017-2991, CVE-2017-2996).
Список пакетов
SUSE Linux Enterprise Desktop 12 SP1
SUSE Linux Enterprise Workstation Extension 12 SP1
Ссылки
- Link for SUSE-SU-2017:0523-1
- E-Mail link for SUSE-SU-2017:0523-1
- SUSE Security Ratings
- SUSE Bug 1025258
- SUSE CVE CVE-2017-2982 page
- SUSE CVE CVE-2017-2985 page
- SUSE CVE CVE-2017-2986 page
- SUSE CVE CVE-2017-2987 page
- SUSE CVE CVE-2017-2988 page
- SUSE CVE CVE-2017-2990 page
- SUSE CVE CVE-2017-2991 page
- SUSE CVE CVE-2017-2992 page
- SUSE CVE CVE-2017-2993 page
- SUSE CVE CVE-2017-2994 page
- SUSE CVE CVE-2017-2995 page
- SUSE CVE CVE-2017-2996 page
Описание
Adobe Flash Player versions 24.0.0.194 and earlier have an exploitable use after free vulnerability in a routine related to player shutdown. Successful exploitation could lead to arbitrary code execution.
Затронутые продукты
Ссылки
- CVE-2017-2982
- SUSE Bug 1025258
Описание
Adobe Flash Player versions 24.0.0.194 and earlier have an exploitable use after free vulnerability in the ActionScript 3 BitmapData class. Successful exploitation could lead to arbitrary code execution.
Затронутые продукты
Ссылки
- CVE-2017-2985
- SUSE Bug 1025258
Описание
Adobe Flash Player versions 24.0.0.194 and earlier have an exploitable heap overflow vulnerability in the Flash Video (FLV) codec. Successful exploitation could lead to arbitrary code execution.
Затронутые продукты
Ссылки
- CVE-2017-2986
- SUSE Bug 1025258
Описание
Adobe Flash Player versions 24.0.0.194 and earlier have an exploitable integer overflow vulnerability related to Flash Broker COM. Successful exploitation could lead to arbitrary code execution.
Затронутые продукты
Ссылки
- CVE-2017-2987
- SUSE Bug 1025258
Описание
Adobe Flash Player versions 24.0.0.194 and earlier have an exploitable memory corruption vulnerability when performing garbage collection. Successful exploitation could lead to arbitrary code execution.
Затронутые продукты
Ссылки
- CVE-2017-2988
- SUSE Bug 1025258
Описание
Adobe Flash Player versions 24.0.0.194 and earlier have an exploitable memory corruption vulnerability in the h264 decompression routine. Successful exploitation could lead to arbitrary code execution.
Затронутые продукты
Ссылки
- CVE-2017-2990
- SUSE Bug 1025258
Описание
Adobe Flash Player versions 24.0.0.194 and earlier have an exploitable memory corruption vulnerability in the h264 codec (related to decompression). Successful exploitation could lead to arbitrary code execution.
Затронутые продукты
Ссылки
- CVE-2017-2991
- SUSE Bug 1025258
Описание
Adobe Flash Player versions 24.0.0.194 and earlier have an exploitable heap overflow vulnerability when parsing an MP4 header. Successful exploitation could lead to arbitrary code execution.
Затронутые продукты
Ссылки
- CVE-2017-2992
- SUSE Bug 1025258
Описание
Adobe Flash Player versions 24.0.0.194 and earlier have an exploitable use after free vulnerability related to event handlers. Successful exploitation could lead to arbitrary code execution.
Затронутые продукты
Ссылки
- CVE-2017-2993
- SUSE Bug 1025258
Описание
Adobe Flash Player versions 24.0.0.194 and earlier have an exploitable use after free vulnerability in Primetime SDK event dispatch. Successful exploitation could lead to arbitrary code execution.
Затронутые продукты
Ссылки
- CVE-2017-2994
- SUSE Bug 1025258
Описание
Adobe Flash Player versions 24.0.0.194 and earlier have an exploitable type confusion vulnerability related to the MessageChannel class. Successful exploitation could lead to arbitrary code execution.
Затронутые продукты
Ссылки
- CVE-2017-2995
- SUSE Bug 1025258
Описание
Adobe Flash Player versions 24.0.0.194 and earlier have an exploitable memory corruption vulnerability in Primetime SDK. Successful exploitation could lead to arbitrary code execution.
Затронутые продукты
Ссылки
- CVE-2017-2996
- SUSE Bug 1025258