Red Hat Security AdvisoryRHSA-2009:1188
flash-plugin security update
Released 2009-07-31 · Red Hat rating Critical · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Desktop Supplementary (v. 5) flash-plugin-10.0.32.18-2.el5.i386
- Red Hat Enterprise Linux Server Supplementary (v. 5) flash-plugin-10.0.32.18-2.el5.i386
Fixes 9 records
Priority CRITICAL 93KEV
Unspecified vulnerability in Adobe Reader and Acrobat 9.x through 9.1.2, and Adobe Flash Player 9.x through 9.0.159.0 and 10.x through 10.0.22.87, allows remote attackers to execute arbitrary code or cause a denial of se…
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.21198 · Published 2009-07-23 · Fixed CWE-787
Priority MEDIUM 59
Integer overflow in the ActionScript Virtual Machine 2 (AVM2) abcFile parser in Adobe Flash Player before 9.0.246.0 and 10.x before 10.0.32.18, and Adobe AIR before 1.5.2, allows attackers to cause a denial of service (a…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.19698 · Published 2009-07-31 · Fixed CWE-189
Priority MEDIUM 59
Heap-based buffer overflow in Adobe Flash Player before 9.0.246.0 and 10.x before 10.0.32.18, and Adobe AIR before 1.5.2, allows attackers to cause a denial of service (application crash) or possibly execute arbitrary co…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.21442 · Published 2009-07-31 · Fixed CWE-119
Priority MEDIUM 50
Stack-based buffer overflow in Adobe Flash Player before 9.0.246.0 and 10.x before 10.0.32.18, and Adobe AIR before 1.5.2, allows attackers to cause a denial of service (application crash) or possibly execute arbitrary c…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.07301 · Published 2009-07-31 · Fixed CWE-119
Priority MEDIUM 50
Heap-based buffer overflow in Adobe Flash Player before 9.0.246.0 and 10.x before 10.0.32.18, and Adobe AIR before 1.5.2, allows attackers to cause a denial of service (application crash) or possibly execute arbitrary co…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.07301 · Published 2009-07-31 · Fixed CWE-119
Priority MEDIUM 49
Adobe Flash Player before 9.0.246.0 and 10.x before 10.0.32.18, and Adobe AIR before 1.5.2, allows attackers to cause a denial of service (application crash) or possibly execute arbitrary code via unspecified vectors, re…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.06033 · Published 2009-07-31 · Fixed
Priority MEDIUM 49
Unspecified vulnerability in Adobe Flash Player before 9.0.246.0 and 10.x before 10.0.32.18, and Adobe AIR before 1.5.2, allows attackers to cause a denial of service (application crash) or possibly execute arbitrary cod…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.06033 · Published 2009-07-31 · Fixed CWE-264
Priority LOW 27
Adobe Flash Player before 9.0.246.0 and 10.x before 10.0.32.18, and Adobe AIR before 1.5.2, allows attackers to trick a user into (1) selecting a link or (2) completing a dialog, related to a "clickjacking vulnerability.…
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.0393 · Published 2009-07-31 · Fixed CWE-59
Priority LOW 24
Adobe Flash Player before 9.0.246.0 and 10.x before 10.0.32.18, and Adobe AIR before 1.5.2, allows attackers to obtain sensitive information via vectors involving saving an SWF file to a hard drive, related to a "local s…
CVSS 2.0MEDIUM 4.9· Local · No auth · Interaction — · EPSS 0.00773 · Published 2009-07-31 · Fixed CWE-200