Red Hat Security Advisory

RHSA-2011:1333

flash-plugin security update

Released 2011-09-22 · Red Hat rating Critical · View on Red Hat →

Fixed in

Red Hat Enterprise Linux Desktop Supplementary (v. 5) flash-plugin-10.3.183.10-1.el5.i386
Red Hat Enterprise Linux Desktop Supplementary (v. 6) flash-plugin-10.3.183.10-1.el6
Red Hat Enterprise Linux Server Supplementary (v. 5) flash-plugin-10.3.183.10-1.el5.i386
Red Hat Enterprise Linux Server Supplementary (v. 6) flash-plugin-10.3.183.10-1.el6
Red Hat Enterprise Linux Workstation Supplementary (v. 6) flash-plugin-10.3.183.10-1.el6

Fixes 6 records

TI-2011-02120 CVE-2011-2426 · GHSA-pc48-33pf-32pp

Stack-based buffer overflow in the ActionScript Virtual Machine (AVM) component in Adobe…

MEDIUM 51

Stack-based buffer overflow in the ActionScript Virtual Machine (AVM) component in Adobe Flash Player before 10.3.183.10 on Windows, Mac OS X, Linux, and Solaris, and before 10.3.186.7 on Android, allows remote attackers…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.08197 Published 2011-09-22 Fixed CWE-119

TI-2011-02124 CVE-2011-2430 · GHSA-9mj8-c9h5-8r5p

Adobe Flash Player before 10.3.183.10 on Windows, Mac OS X, Linux, and Solaris, and…

MEDIUM 49

Adobe Flash Player before 10.3.183.10 on Windows, Mac OS X, Linux, and Solaris, and before 10.3.186.7 on Android, allows remote attackers to execute arbitrary code via crafted streaming media, related to a "logic error v…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.0627 Published 2011-09-22 Fixed CWE-20

TI-2011-02121 CVE-2011-2427 · GHSA-7h55-3rvq-vwr9

Stack-based buffer overflow in the ActionScript Virtual Machine (AVM) component in Adobe…

MEDIUM 49

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.06359 Published 2011-09-22 Fixed CWE-119

TI-2011-02122 CVE-2011-2428 · GHSA-8368-8fhr-8jhg

Adobe Flash Player before 10.3.183.10 on Windows, Mac OS X, Linux, and Solaris, and…

MEDIUM 48

Adobe Flash Player before 10.3.183.10 on Windows, Mac OS X, Linux, and Solaris, and before 10.3.186.7 on Android, allows attackers to execute arbitrary code or cause a denial of service (browser crash) via unspecified ve…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.05251 Published 2011-09-22 Fixed CWE-20

TI-2011-02123 CVE-2011-2429 · GHSA-xrcc-hq3w-rm7j

Adobe Flash Player before 10.3.183.10 on Windows, Mac OS X, Linux, and Solaris, and…

LOW 30

Adobe Flash Player before 10.3.183.10 on Windows, Mac OS X, Linux, and Solaris, and before 10.3.186.7 on Android, allows attackers to bypass intended access restrictions and obtain sensitive information via unspecified v…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.04052 Published 2011-09-22 Fixed CWE-264

TI-2011-02138 CVE-2011-2444 · GHSA-m398-9jm3-95r6

Cross-site scripting (XSS) vulnerability in Adobe Flash Player before 10.3.183.10 on…

LOW 25

Cross-site scripting (XSS) vulnerability in Adobe Flash Player before 10.3.183.10 on Windows, Mac OS X, Linux, and Solaris, and before 10.3.186.7 on Android, allows remote attackers to inject arbitrary web script or HTML…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.02701 Published 2011-09-22 Fixed CWE-79