Lucene search

K
mageiaGentoo FoundationMGASA-2014-0128
HistoryMar 12, 2014 - 8:22 p.m.

Updated flash-player-plugin packages fix security vulnerabilities

2014-03-1220:22:25
Gentoo Foundation
advisories.mageia.org
19

CVSS2

6.4

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:P/A:N

EPSS

0.006

Percentile

78.2%

Adobe Flash Player 11.2.202.346 contains fixes to important vulnerabilities found in earlier versions that could allow a remote attacker to bypass security restrictions or to access sensitive information. This update resolves a vulnerability that could be used to bypass the same origin policy (CVE-2014-0503). This update resolves a vulnerability that could be used to read the contents of the clipboard (CVE-2014-0504).

CVSS2

6.4

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:P/A:N

EPSS

0.006

Percentile

78.2%