SUSE-SU-2015:1258-1

Einstufung nach Quelle

Keine Quelle nennt einen CVSS-Wert.

Trivys eigenes Label ist CRITICAL. Kritisch laut SUSE.

Beschreibung

flash-player was updated to fix two security issues. These security issues were fixed: - CVE-2015-5123: Use-after-free vulnerability in the BitmapData class in the ActionScript 3 (AS3) implementation in Adobe Flash Player allowed remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted Flash content that overrides a valueOf function (bsc#937752). - CVE-2015-5122: Use-after-free vulnerability in the DisplayObject class in the ActionScript 3 (AS3) implementation in Adobe Flash Player allowed remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted Flash content that leverages improper handling of the opaqueBackground property (bsc#937752).

Betroffene Pakete und behobene Versionen

Referenzen

• https://bugzilla.suse.com/937752
• https://lists.suse.com/pipermail/sle-security-updates/2015-July/001498.html
• https://www.suse.com/security/cve/CVE-2015-5122/
• https://www.suse.com/security/cve/CVE-2015-5123/
• https://www.suse.com/support/security/rating/
• https://www.suse.com/support/update/announcement/2015/suse-su-20151258-1/