openSUSE 10 Security Update : gnash (gnash-3447)

This update fixes a denial of service problem in the free flash player gnash. CVE-2007-2500 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update gnash-3447. The text description of this plugin is C...

CVE-2007-2500

Removed by vendor...

CVE-2007-2500

CVE-2007-2500 affects GNU Gnash 0.7.2 where a large number of SHOWFRAME elements inside a DEFINESPRITE in server/parser/sprite_definition.cpp triggers memory corruption and allows code execution by calling free with an arbitrary address. Public reports (NVD, SUSE, openSUSE NASL) describe memory c...