Red Hat Security AdvisoryRHSA-2009:1657
flash-plugin security update
Released 2009-12-09 · Red Hat rating Critical · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Desktop Supplementary (v. 5) flash-plugin-10.0.42.34-1.el5.i386
- Red Hat Enterprise Linux Server Supplementary (v. 5) flash-plugin-10.0.42.34-1.el5.i386
Fixes 6 records
Priority MEDIUM 54
Heap-based buffer overflow in Adobe Flash Player before 10.0.42.34 and Adobe AIR before 1.5.3 allows remote attackers to execute arbitrary code via crafted dimensions of JPEG data in an SWF file.
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.11556 · Published 2009-12-10 · Fixed CWE-119
Priority MEDIUM 52
Integer overflow in the Verifier::parseExceptionHandlers function in Adobe Flash Player before 10.0.42.34 and Adobe AIR before 1.5.3 allows remote attackers to execute arbitrary code via an SWF file with a large exceptio…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.09955 · Published 2009-12-10 · Fixed CWE-189
Priority MEDIUM 50
Multiple unspecified vulnerabilities in Adobe Flash Player before 10.0.42.34 and Adobe AIR before 1.5.3 allow attackers to cause a denial of service (application crash) or possibly execute arbitrary code via unknown vect…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.07568 · Published 2009-12-10 · Fixed
Priority MEDIUM 50
Adobe Flash Player before 10.0.42.34 and Adobe AIR before 1.5.3 might allow attackers to execute arbitrary code via unspecified vectors, related to a "data injection vulnerability."
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.07115 · Published 2009-12-10 · Fixed CWE-94
Priority MEDIUM 49
Adobe Flash Player before 10.0.42.34 and Adobe AIR before 1.5.3 might allow attackers to execute arbitrary code via unspecified vectors that trigger memory corruption.
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.06253 · Published 2009-12-10 · Fixed CWE-399
Priority MEDIUM 49
Adobe Flash Player 10.x before 10.0.42.34 and Adobe AIR before 1.5.3 might allow attackers to execute arbitrary code via unspecified vectors that trigger memory corruption.
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.06253 · Published 2009-12-10 · Fixed CWE-399