Oval Definition:oval:org.opensuse.security:def:79977
Revision Date:2014-11-14Version:1
Title:Security update for flash-player
Description:



flash-player was updated to version 11.2.202.418 to fix 18 security issues:

* Memory corruption vulnerabilities that could lead to code execution (CVE-2014-0576, CVE-2014-0581, CVE-2014-8440, CVE-2014-8441). * Use-after-free vulnerabilities that could lead to code execution (CVE-2014-0573, CVE-2014-0588, CVE-2014-8438). * A double free vulnerability that could lead to code execution (CVE-2014-0574). * Type confusion vulnerabilities that could lead to code execution (CVE-2014-0577, CVE-2014-0584, CVE-2014-0585, CVE-2014-0586, CVE-2014-0590). * Heap buffer overflow vulnerabilities that could lead to code execution (CVE-2014-0582, CVE-2014-0589). * An information disclosure vulnerability that could be exploited to disclose session tokens (CVE-2014-8437). * A heap buffer overflow vulnerability that could be exploited to perform privilege escalation from low to medium integrity level (CVE-2014-0583). * A permission issue that could be exploited to perform privilege escalation from low to medium integrity level (CVE-2014-8442).

Further information can be found at http://helpx.adobe.com/security/products/flash-player/apsb14-24.html .

Security Issues:

* CVE-2014-0576 * CVE-2014-0581 * CVE-2014-8440 * CVE-2014-8441 * CVE-2014-0573 * CVE-2014-0588 * CVE-2014-8438 * CVE-2014-0574 * CVE-2014-0577 * CVE-2014-0584 * CVE-2014-0585 * CVE-2014-0586 * CVE-2014-0590 * CVE-2014-0582 * CVE-2014-0589 * CVE-2014-8437 * CVE-2014-0583 * CVE-2014-8442

Family:unixClass:patch
Status:Reference(s):905032
CVE-2014-0573
CVE-2014-0574
CVE-2014-0576
CVE-2014-0577
CVE-2014-0581
CVE-2014-0582
CVE-2014-0583
CVE-2014-0584
CVE-2014-0585
CVE-2014-0586
CVE-2014-0588
CVE-2014-0589
CVE-2014-0590
CVE-2014-8437
CVE-2014-8438
CVE-2014-8440
CVE-2014-8441
CVE-2014-8442
SUSE-SU-2015:0239-1
Platform(s):SUSE Linux Enterprise Desktop 11 SP3
Product(s):
Definition Synopsis
  • SUSE Linux Enterprise Desktop 11 SP3 is installed
  • AND Package Information
  • flash-player-11.2.202.418-0.3.1 is installed
  • OR flash-player-gnome-11.2.202.418-0.3.1 is installed
  • OR flash-player-kde4-11.2.202.418-0.3.1 is installed
  • BACK