Red Hat Security Advisory

RHSA-2014:0380

flash-plugin security update

Released 2014-04-09 · Red Hat rating Critical · View on Red Hat →

Fixed in

Red Hat Enterprise Linux Desktop Supplementary (v. 5) flash-plugin-11.2.202.350-1.el5.i386
Red Hat Enterprise Linux Desktop Supplementary (v. 6) flash-plugin-11.2.202.350-1.el6
Red Hat Enterprise Linux Server Supplementary (v. 5) flash-plugin-11.2.202.350-1.el5.i386
Red Hat Enterprise Linux Server Supplementary (v. 6) flash-plugin-11.2.202.350-1.el6
Red Hat Enterprise Linux Workstation Supplementary (v. 6) flash-plugin-11.2.202.350-1.el6

Fixes 4 records

TI-2014-00485 CVE-2014-0506 · GHSA-g8c9-p2wf-f6gp

Use-after-free vulnerability in Adobe Flash Player before 11.7.700.275 and 11.8.x through…

MEDIUM 53

Use-after-free vulnerability in Adobe Flash Player before 11.7.700.275 and 11.8.x through 13.0.x before 13.0.0.182 on Windows and OS X and before 11.2.202.350 on Linux, Adobe AIR before 13.0.0.83 on Android, Adobe AIR SD…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.0761 Published 2014-03-27 Fixed CWE-399

TI-2014-00486 CVE-2014-0507 · GHSA-3c5p-wmcv-3jvc

Buffer overflow in Adobe Flash Player before 11.7.700.275 and 11.8.x through 13.0.x…

MEDIUM 49

Buffer overflow in Adobe Flash Player before 11.7.700.275 and 11.8.x through 13.0.x before 13.0.0.182 on Windows and OS X and before 11.2.202.350 on Linux, Adobe AIR before 13.0.0.83 on Android, Adobe AIR SDK before 13.0…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.06419 Published 2014-04-08 Fixed CWE-119

TI-2014-00487 CVE-2014-0508 · GHSA-3hh5-r29m-w2h9

Adobe Flash Player before 11.7.700.275 and 11.8.x through 13.0.x before 13.0.0.182 on…

LOW 30

Adobe Flash Player before 11.7.700.275 and 11.8.x through 13.0.x before 13.0.0.182 on Windows and OS X and before 11.2.202.350 on Linux, Adobe AIR before 13.0.0.83 on Android, Adobe AIR SDK before 13.0.0.83, and Adobe AI…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.04725 Published 2014-04-08 Fixed CWE-264

TI-2014-00488 CVE-2014-0509 · GHSA-w988-3j4h-5xj8

Cross-site scripting (XSS) vulnerability in Adobe Flash Player before 11.7.700.275 and…

LOW 25

Cross-site scripting (XSS) vulnerability in Adobe Flash Player before 11.7.700.275 and 11.8.x through 13.0.x before 13.0.0.182 on Windows and OS X and before 11.2.202.350 on Linux, Adobe AIR before 13.0.0.83 on Android,…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.02808 Published 2014-04-08 Fixed CWE-79