Red Hat Security AdvisoryRHSA-2009:1658
flash-plugin security update
Released 2009-12-09 · Red Hat rating Critical · View on Red Hat →
Fixed in
- Red Hat Desktop version 3 Extras flash-plugin-9.0.260.0-1.el3.with.oss.i386
- Red Hat Desktop version 4 Extras flash-plugin-9.0.260.0-1.el4.i386
- Red Hat Enterprise Linux AS version 3 Extras flash-plugin-9.0.260.0-1.el3.with.oss.i386
- Red Hat Enterprise Linux AS version 4 Extras flash-plugin-9.0.260.0-1.el4.i386
- Red Hat Enterprise Linux ES version 3 Extras flash-plugin-9.0.260.0-1.el3.with.oss.i386
- Red Hat Enterprise Linux ES version 4 Extras flash-plugin-9.0.260.0-1.el4.i386
- Red Hat Enterprise Linux WS version 3 Extras flash-plugin-9.0.260.0-1.el3.with.oss.i386
- Red Hat Enterprise Linux WS version 4 Extras flash-plugin-9.0.260.0-1.el4.i386
Fixes 5 records
Priority MEDIUM 54
Heap-based buffer overflow in Adobe Flash Player before 10.0.42.34 and Adobe AIR before 1.5.3 allows remote attackers to execute arbitrary code via crafted dimensions of JPEG data in an SWF file.
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.11556 · Published 2009-12-10 · Fixed CWE-119
Priority MEDIUM 52
Integer overflow in the Verifier::parseExceptionHandlers function in Adobe Flash Player before 10.0.42.34 and Adobe AIR before 1.5.3 allows remote attackers to execute arbitrary code via an SWF file with a large exceptio…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.09955 · Published 2009-12-10 · Fixed CWE-189
Priority MEDIUM 50
Multiple unspecified vulnerabilities in Adobe Flash Player before 10.0.42.34 and Adobe AIR before 1.5.3 allow attackers to cause a denial of service (application crash) or possibly execute arbitrary code via unknown vect…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.07568 · Published 2009-12-10 · Fixed
Priority MEDIUM 50
Adobe Flash Player before 10.0.42.34 and Adobe AIR before 1.5.3 might allow attackers to execute arbitrary code via unspecified vectors, related to a "data injection vulnerability."
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.07115 · Published 2009-12-10 · Fixed CWE-94
Priority MEDIUM 49
Adobe Flash Player before 10.0.42.34 and Adobe AIR before 1.5.3 might allow attackers to execute arbitrary code via unspecified vectors that trigger memory corruption.
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.06253 · Published 2009-12-10 · Fixed CWE-399
THREATIST.IORead the docs