| Description: | Summary:
The remote host is missing an update for the 'flash-player'
package(s) announced via the referenced advisory.
Vulnerability Insight:
Adobe Flash Player has been updated to 11.2.202.406 which fixes various
security issues.
These updates:
* resolve a memory leakage vulnerability that could have been used to
bypass memory address randomization (CVE-2014-0557).
* resolve a security bypass vulnerability (CVE-2014-0554).
* resolve a use-after-free vulnerability that could have lead to code
execution (CVE-2014-0553).
* resolve memory corruption vulnerabilities that could have lead to
code execution (CVE-2014-0547, CVE-2014-0549, CVE-2014-0550,
CVE-2014-0551, CVE-2014-0552, CVE-2014-0555).
* resolve a vulnerability that could have been used to bypass the same
origin policy (CVE-2014-0548).
* resolve a heap buffer overflow vulnerability that could have lead to
code execution (CVE-2014-0556, CVE-2014-0559).
Security Issues:
* CVE-2014-0547
* CVE-2014-0548
* CVE-2014-0549
* CVE-2014-0550
* CVE-2014-0551
* CVE-2014-0552
* CVE-2014-0553
* CVE-2014-0554
* CVE-2014-0555
Description truncated, please see the referenced URL(s) for more information.
Affected Software/OS:
flash-player on SUSE Linux Enterprise Desktop 11 SP3
Solution:
Please install the updated package(s).
CVSS Score:
10.0
CVSS Vector:
AV:N/AC:L/Au:N/C:C/I:C/A:C
|
