Lucene search

K
mageiaGentoo FoundationMGASA-2014-0029
HistoryJan 25, 2014 - 1:05 a.m.

Updated flash-player-plugin fixes security vulnerabilities

2014-01-2501:05:53
Gentoo Foundation
advisories.mageia.org
18

CVSS2

10

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

EPSS

0.136

Percentile

95.6%

Adobe Flash Player 11.2.202.335 contains fixes to critical security vulnerabilities found in earlier versions. These vulnerabilities could cause a crash and potentially allow an attacker to take control of the affected system. This update resolves a vulnerability that could be used to bypass Flash Player security protections (CVE-2014-0491). This update resolves an address leak vulnerability that could be used to defeat memory address layout randomization (CVE-2014-0492).

OSVersionArchitecturePackageVersionFilename
Mageia3noarchflash-player-plugin< 11.2.202.335-1flash-player-plugin-11.2.202.335-1.mga3.nonfree

CVSS2

10

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

EPSS

0.136

Percentile

95.6%