Red Hat Security Advisory

RHSA-2009:1189

flash-plugin security update

Released 2009-07-31 · Red Hat rating Critical · View on Red Hat →

Fixed in

Red Hat Desktop version 3 Extras flash-plugin-9.0.246.0-2.el3.with.oss.i386
Red Hat Desktop version 4 Extras flash-plugin-9.0.246.0-2.el4.i386
Red Hat Enterprise Linux AS version 3 Extras flash-plugin-9.0.246.0-2.el3.with.oss.i386
Red Hat Enterprise Linux AS version 4 Extras flash-plugin-9.0.246.0-2.el4.i386
Red Hat Enterprise Linux ES version 3 Extras flash-plugin-9.0.246.0-2.el3.with.oss.i386
Red Hat Enterprise Linux ES version 4 Extras flash-plugin-9.0.246.0-2.el4.i386
Red Hat Enterprise Linux WS version 3 Extras flash-plugin-9.0.246.0-2.el3.with.oss.i386
Red Hat Enterprise Linux WS version 4 Extras flash-plugin-9.0.246.0-2.el4.i386

Fixes 9 records

TI-2009-01774 CVE-2009-1862 · GHSA-wx6p-35hf-vhhj

Unspecified vulnerability in Adobe Reader and Acrobat 9.x through 9.1.2, and Adobe Flash…

CRITICAL 93KEV

Unspecified vulnerability in Adobe Reader and Acrobat 9.x through 9.1.2, and Adobe Flash Player 9.x through 9.0.159.0 and 10.x through 10.0.22.87, allows remote attackers to execute arbitrary code or cause a denial of se…

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.21198 Published 2009-07-23 Fixed CWE-787

TI-2009-01781 CVE-2009-1869 · GHSA-6r68-5hx2-xfw5

Integer overflow in the ActionScript Virtual Machine 2 (AVM2) abcFile parser in Adobe…

MEDIUM 59

Integer overflow in the ActionScript Virtual Machine 2 (AVM2) abcFile parser in Adobe Flash Player before 9.0.246.0 and 10.x before 10.0.32.18, and Adobe AIR before 1.5.2, allows attackers to cause a denial of service (a…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.19698 Published 2009-07-31 Fixed CWE-189

TI-2009-01780 CVE-2009-1868 · GHSA-4qww-9ghh-23c6

Heap-based buffer overflow in Adobe Flash Player before 9.0.246.0 and 10.x before…

MEDIUM 59

Heap-based buffer overflow in Adobe Flash Player before 9.0.246.0 and 10.x before 10.0.32.18, and Adobe AIR before 1.5.2, allows attackers to cause a denial of service (application crash) or possibly execute arbitrary co…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.21442 Published 2009-07-31 Fixed CWE-119

TI-2009-01778 CVE-2009-1866 · GHSA-f74w-j6qg-22r9

Stack-based buffer overflow in Adobe Flash Player before 9.0.246.0 and 10.x before…

MEDIUM 50

Stack-based buffer overflow in Adobe Flash Player before 9.0.246.0 and 10.x before 10.0.32.18, and Adobe AIR before 1.5.2, allows attackers to cause a denial of service (application crash) or possibly execute arbitrary c…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.07301 Published 2009-07-31 Fixed CWE-119

TI-2009-01776 CVE-2009-1864 · GHSA-c7gf-53j7-h5w5

Heap-based buffer overflow in Adobe Flash Player before 9.0.246.0 and 10.x before…

MEDIUM 50

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.07301 Published 2009-07-31 Fixed CWE-119

TI-2009-01777 CVE-2009-1865 · GHSA-q9rx-4j7q-qf5g

Adobe Flash Player before 9.0.246.0 and 10.x before 10.0.32.18, and Adobe AIR before…

MEDIUM 49

Adobe Flash Player before 9.0.246.0 and 10.x before 10.0.32.18, and Adobe AIR before 1.5.2, allows attackers to cause a denial of service (application crash) or possibly execute arbitrary code via unspecified vectors, re…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.06033 Published 2009-07-31 Fixed

TI-2009-01775 CVE-2009-1863 · GHSA-m546-wgg7-8mgq

Unspecified vulnerability in Adobe Flash Player before 9.0.246.0 and 10.x before…

MEDIUM 49

Unspecified vulnerability in Adobe Flash Player before 9.0.246.0 and 10.x before 10.0.32.18, and Adobe AIR before 1.5.2, allows attackers to cause a denial of service (application crash) or possibly execute arbitrary cod…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.06033 Published 2009-07-31 Fixed CWE-264

TI-2009-01779 CVE-2009-1867 · GHSA-r26x-f2vh-qpgr

Adobe Flash Player before 9.0.246.0 and 10.x before 10.0.32.18, and Adobe AIR before…

LOW 27

Adobe Flash Player before 9.0.246.0 and 10.x before 10.0.32.18, and Adobe AIR before 1.5.2, allows attackers to trick a user into (1) selecting a link or (2) completing a dialog, related to a "clickjacking vulnerability.…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.0393 Published 2009-07-31 Fixed CWE-59

TI-2009-01782 CVE-2009-1870 · GHSA-qwmj-9j79-8g4m

Adobe Flash Player before 9.0.246.0 and 10.x before 10.0.32.18, and Adobe AIR before…

LOW 24

Adobe Flash Player before 9.0.246.0 and 10.x before 10.0.32.18, and Adobe AIR before 1.5.2, allows attackers to obtain sensitive information via vectors involving saving an SWF file to a hard drive, related to a "local s…

CVSS 2.0MEDIUM 4.9 Local No auth Interaction — EPSS 0.00773 Published 2009-07-31 Fixed CWE-200