Gentoo FoundationMGASA-2014-0261Updated flash-player-plugin packages fix multiple vulnerabilities
10 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
0.071 Low
EPSS
Percentile
94.0%
Adobe Flash Player 11.2.202.378 contains fixes to critical security vulnerabilities found in earlier versions that could potentially allow an attacker to take control of the affected system. This updates resolves cross-site-scripting vulnerabilities (CVE-2014-0531, CVE-2014-0532, CVE-2014-0533). This updates resolves security bypass vulnerabilities (CVE-2014-0534, CVE-2014-0535). This updates resolves a memory corruption vulnerability that could result in arbitrary code execution (CVE-2014-0536).
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Mageia | 3 | noarch | flash-player-plugin | < 11.2.202.378-1 | flash-player-plugin-11.2.202.378-1.mga3.nonfree |
| Mageia | 4 | noarch | flash-player-plugin | < 11.2.202.378-1 | flash-player-plugin-11.2.202.378-1.mga4.nonfree |
Related
10 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
0.071 Low
EPSS
Percentile
94.0%