Lucene search

K
suseSuseOPENSUSE-SU-2011:0897-1
HistoryAug 12, 2011 - 5:08 a.m.

flash-player (critical)

2011-08-1205:08:25
lists.opensuse.org
13

0.894 High

EPSS

Percentile

98.5%

The update to Flash-Player 10.3.188.5 fixes various
security issues:

  • CVE-2011-2130: CVSS v2 Base Score: 6.8
    (AV:N/AC:M/Au:N/C:P/I:P/A:P)
  • CVE-2011-2134: CVSS v2 Base Score: 6.8
    (AV:N/AC:M/Au:N/C:P/I:P/A:P)
  • CVE-2011-2135: CVSS v2 Base Score: 6.8
    (AV:N/AC:M/Au:N/C:P/I:P/A:P)
  • CVE-2011-2136: CVSS v2 Base Score: 6.8
    (AV:N/AC:M/Au:N/C:P/I:P/A:P)
  • CVE-2011-2137: CVSS v2 Base Score: 6.8
    (AV:N/AC:M/Au:N/C:P/I:P/A:P)
  • CVE-2011-2138: CVSS v2 Base Score: 6.8
    (AV:N/AC:M/Au:N/C:P/I:P/A:P)
  • CVE-2011-2139: CVSS v2 Base Score: 6.8
    (AV:N/AC:M/Au:N/C:P/I:P/A:P)
  • CVE-2011-2140: CVSS v2 Base Score: 6.8
    (AV:N/AC:M/Au:N/C:P/I:P/A:P)
  • CVE-2011-2414: CVSS v2 Base Score: 6.8
    (AV:N/AC:M/Au:N/C:P/I:P/A:P)
  • CVE-2011-2415: CVSS v2 Base Score: 6.8
    (AV:N/AC:M/Au:N/C:P/I:P/A:P)
  • CVE-2011-2416: CVSS v2 Base Score: 6.8
    (AV:N/AC:M/Au:N/C:P/I:P/A:P)
  • CVE-2011-2417: CVSS v2 Base Score: 6.8
    (AV:N/AC:M/Au:N/C:P/I:P/A:P)
  • CVE-2011-2425: CVSS v2 Base Score: 6.8
    (AV:N/AC:M/Au:N/C:P/I:P/A:P)

This update resolves a buffer overflow vulnerability that
could lead to code execution (CVE-2011-2130).

This update resolves a buffer overflow vulnerability that
could lead to code execution (CVE-2011-2134).

This update resolves a memory corruption vulnerability that
could lead to code execution (CVE-2011-2135).

This update resolves an integer overflow vulnerability that
could lead to code execution (CVE-2011-2136).

This update resolves a buffer overflow vulnerability that
could lead to code execution (CVE-2011-2137).

This update resolves an integer overflow vulnerability that
could lead to code execution (CVE-2011-2138).

This update resolves a cross-site information disclosure
vulnerability that could lead to code execution
(CVE-2011-2139).

This update resolves a memory corruption vulnerability that
could lead to code execution (CVE-2011-2140).

This update resolves a buffer overflow vulnerability that
could lead to code execution (CVE-2011-2414).

This update resolves a buffer overflow vulnerability that
could lead to code execution (CVE-2011-2415).

This update resolves an integer overflow vulnerability that
could lead to code execution (CVE-2011-2416).

This update resolves a memory corruption vulnerability that
could lead to code execution (CVE-2011-2417).

This update resolves a memory corruption vulnerability that
could lead to code execution (CVE-2011-2425).