openSUSE Security Update : swfdec (swfdec-524)

The free Flash decoder engine 'swfdec' was updated to version 0.6.8 to fix lots of crashers which are likely security relevant and could be exploited to remotely execute code. CVE-2008-3796 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin...

CVE-2008-3796

CVE-2008-3796 concerns the Flash decoder engine swfdec . The vulnerability affects swfdec 0.6 and older, with versions before 0.6.8 allowing remote attackers to crash the application (denial of service) by presenting a crafted 1x1 JPEG image. Public descriptions in multiple sources (NVD, SUSE/SUS...