Oval Definition:oval:com.redhat.rhsa:def:20080221
Revision Date:2008-04-08Version:602
Title:RHSA-2008:0221: flash-plugin security update (Critical)
Description:The flash-plugin package contains a Firefox-compatible Adobe Flash Player Web browser plug-in.

  • Several input validation flaws were found in the way Flash Player displayed certain content. These may have made it possible to execute arbitrary code on a victim's machine, if the victim opened a malicious Adobe Flash file. (CVE-2007-0071, CVE-2007-6019)

  • A flaw was found in the way Flash Player established TCP sessions to remote hosts. A remote attacker could, consequently, use Flash Player to conduct a DNS rebinding attack. (CVE-2007-5275, CVE-2008-1655)

  • A flaw was found in the way Flash Player restricted the interpretation and usage of cross-domain policy files. A remote attacker could use Flash Player to conduct cross-domain and cross-site scripting attacks. (CVE-2007-6243, CVE-2008-1654)

  • A flaw was found in the way Flash Player interacted with web browsers. An attacker could use malicious content presented by Flash Player to conduct a cross-site scripting attack. (CVE-2007-6637)

    All users of Adobe Flash Player should upgrade to this updated package, which contains Flash Player version 9.0.124.0 and resolves these issues.
  • Family:unixClass:patch
    Status:Reference(s):CVE-2007-0071
    CVE-2007-5275
    CVE-2007-6019
    CVE-2007-6243
    CVE-2007-6637
    CVE-2008-1654
    CVE-2008-1655
    CVE-2008-3872
    RHSA-2008:0221-01
    Platform(s):Supplementary for Red Hat Enterprise Linux 5
    Product(s):
    Definition Synopsis
  • Red Hat Enterprise Linux 5 is installed
  • AND flash-plugin is earlier than 0:9.0.124.0-1.el5
  • AND flash-plugin is signed with Red Hat redhatrelease key
  • BACK