Red Hat Security Advisory

RHSA-2014:1981

flash-plugin security update

Released 2014-12-10 · Red Hat rating Critical · View on Red Hat →

Fixed in

Red Hat Enterprise Linux Desktop Supplementary (v. 5) flash-plugin-11.2.202.425-1.el5.i386
Red Hat Enterprise Linux Desktop Supplementary (v. 6) flash-plugin-11.2.202.425-1.el6
Red Hat Enterprise Linux Server Supplementary (v. 5) flash-plugin-11.2.202.425-1.el5.i386
Red Hat Enterprise Linux Server Supplementary (v. 6) flash-plugin-11.2.202.425-1.el6
Red Hat Enterprise Linux Workstation Supplementary (v. 6) flash-plugin-11.2.202.425-1.el6

Fixes 6 records

TI-2014-07437 CVE-2014-9163 · GHSA-5ppv-vhvv-pxhh

Stack-based buffer overflow in Adobe Flash Player before 13.0.0.259 and 14.x and 15.x…

CRITICAL 93KEV

Stack-based buffer overflow in Adobe Flash Player before 13.0.0.259 and 14.x and 15.x before 15.0.0.246 on Windows and OS X and before 11.2.202.425 on Linux allows attackers to execute arbitrary code via unspecified vect…

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.4488 Published 2014-12-10 Fixed CWE-121

TI-2014-00556 CVE-2014-0580 · GHSA-x683-qx37-4487

Adobe Flash Player before 13.0.0.259 and 14.x through 16.x before 16.0.0.235 on Windows…

MEDIUM 52

Adobe Flash Player before 13.0.0.259 and 14.x through 16.x before 16.0.0.235 on Windows and OS X and before 11.2.202.425 on Linux allows remote attackers to bypass the Same Origin Policy via unspecified vectors.

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.0585 Published 2014-12-10 Fixed CWE-264

TI-2014-07436 CVE-2014-9162 · GHSA-ghh8-fpp6-8pxm

Adobe Flash Player before 13.0.0.259 and 14.x through 16.x before 16.0.0.235 on Windows…

MEDIUM 50

Adobe Flash Player before 13.0.0.259 and 14.x through 16.x before 16.0.0.235 on Windows and OS X and before 11.2.202.425 on Linux allows attackers to obtain sensitive information via unspecified vectors.

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.04672 Published 2014-12-10 Fixed CWE-200

TI-2014-06932 CVE-2014-8443 · GHSA-g2mv-w3jp-4jfv

Use-after-free vulnerability in Adobe Flash Player before 13.0.0.259 and 14.x through…

MEDIUM 50

Use-after-free vulnerability in Adobe Flash Player before 13.0.0.259 and 14.x through 16.x before 16.0.0.235 on Windows and OS X and before 11.2.202.425 on Linux allows attackers to execute arbitrary code via unspecified…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.04701 Published 2014-12-10 Fixed

TI-2014-00563 CVE-2014-0587 · GHSA-gp55-63jp-32x8

Adobe Flash Player before 13.0.0.259 and 14.x through 16.x before 16.0.0.235 on Windows…

MEDIUM 50

Adobe Flash Player before 13.0.0.259 and 14.x through 16.x before 16.0.0.235 on Windows and OS X and before 11.2.202.425 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.04528 Published 2014-12-10 Fixed CWE-94

TI-2014-07438 CVE-2014-9164 · GHSA-jwcr-c5cc-5pc8

Adobe Flash Player before 13.0.0.259 and 14.x through 16.x before 16.0.0.235 on Windows…

MEDIUM 49

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.03666 Published 2014-12-10 Fixed CWE-94