Lucene search

K
mageiaGentoo FoundationMGASA-2014-0335
HistoryAug 18, 2014 - 1:14 p.m.

Updated flash-player-plugin packages fix security vulnerabilities

2014-08-1813:14:56
Gentoo Foundation
advisories.mageia.org
27

CVSS2

10

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

EPSS

0.415

Percentile

97.4%

Adobe Flash Player 11.2.202.400 contains fixes to critical security vulnerabilities found in earlier versions that could potentially allow an attacker to take control of the affected system. This update resolves memory leakage vulnerabilities that could be used to bypass memory address randomization (CVE-2014-0540, CVE-2014-0542, CVE-2014-0543, CVE-2014-0544, CVE-2014-0545). This update resolves a security bypass vulnerability (CVE-2014-0541). This update resolves a use-after-free vulnerability that could lead to code execution (CVE-2014-0538).

CVSS2

10

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

EPSS

0.415

Percentile

97.4%