| Description: | Summary:
The remote host is missing an update for the 'flash-player-plugin' package(s) announced via the MGASA-2016-0251 advisory.
Vulnerability Insight:
Adobe Flash Player 11.2.202.632 contains fixes to critical security
vulnerabilities found in earlier versions that could potentially allow an
attacker to take control of the affected system.
This update resolves a race condition vulnerability that could lead to
information disclosure (CVE-2016-4247).
This update resolves type confusion vulnerabilities that could lead to code
execution (CVE-2016-4223, CVE-2016-4224, CVE-2016-4225).
This update resolves use-after-free vulnerabilities that could lead to code
execution (CVE-2016-4173, CVE-2016-4174, CVE-2016-4222, CVE-2016-4226,
CVE-2016-4227, CVE-2016-4228, CVE-2016-4229, CVE-2016-4230, CVE-2016-4231,
CVE-2016-4248).
This update resolves a heap buffer overflow vulnerability that could lead
to code execution (CVE-2016-4249).
This update resolves memory corruption vulnerabilities that could lead to
code execution (CVE-2016-4172, CVE-2016-4175, CVE-2016-4179, CVE-2016-4180,
CVE-2016-4181, CVE-2016-4182, CVE-2016-4183, CVE-2016-4184, CVE-2016-4185,
CVE-2016-4186, CVE-2016-4187, CVE-2016-4188, CVE-2016-4189, CVE-2016-4190,
CVE-2016-4217, CVE-2016-4218, CVE-2016-4219, CVE-2016-4220, CVE-2016-4221,
CVE-2016-4233, CVE-2016-4234, CVE-2016-4235, CVE-2016-4236, CVE-2016-4237,
CVE-2016-4238, CVE-2016-4239, CVE-2016-4240, CVE-2016-4241, CVE-2016-4242,
CVE-2016-4243, CVE-2016-4244, CVE-2016-4245, CVE-2016-4246).
This update resolves a memory leak vulnerability (CVE-2016-4232).
This update resolves stack corruption vulnerabilities that could lead to
code execution (CVE-2016-4176, CVE-2016-4177).
This update resolves a security bypass vulnerability that could lead to
information disclosure (CVE-2016-4178)
Affected Software/OS:
'flash-player-plugin' package(s) on Mageia 5.
Solution:
Please install the updated package(s).
CVSS Score:
9.3
CVSS Vector:
AV:N/AC:M/Au:N/C:C/I:C/A:C
|
