Lucene search

K
suseSuseOPENSUSE-SU-2014:1444-1
HistoryNov 18, 2014 - 12:04 p.m.

Security update for flash-player (important)

2014-11-1812:04:40
lists.opensuse.org
20

0.973 High

EPSS

Percentile

99.9%

flash-player was updated to version 11.2.202.418 to fix 18 security issues.

These security issues were fixed:

  • Memory corruption vulnerabilities that could lead to code execution
    (CVE-2014-0576, CVE-2014-0581, CVE-2014-8440, CVE-2014-8441).
  • Use-after-free vulnerabilities that could lead to code execution
    (CVE-2014-0573, CVE-2014-0588, CVE-2014-8438).
  • A double free vulnerability that could lead to code execution
    (CVE-2014-0574).
  • Type confusion vulnerabilities that could lead to code execution
    (CVE-2014-0577, CVE-2014-0584, CVE-2014-0585, CVE-2014-0586,
    CVE-2014-0590).
  • Heap buffer overflow vulnerabilities that could lead to code execution
    (CVE-2014-0582, CVE-2014-0589).
  • An information disclosure vulnerability that could be exploited to
    disclose session tokens (CVE-2014-8437).
  • A heap buffer overflow vulnerability that could be exploited to perform
    privilege escalation from low to medium integrity level (CVE-2014-0583).
  • A permission issue that could be exploited to perform privilege
    escalation from low to medium integrity level (CVE-2014-8442).