Lucene search

K
suseSuseSUSE-SU-2015:1255-1
HistoryJul 17, 2015 - 11:11 a.m.

Security update for flash-player (critical)

2015-07-1711:11:01
lists.opensuse.org
17

0.974 High

EPSS

Percentile

99.9%

flash-player was updated to fix two security issues.

These security issues were fixed:

  • CVE-2015-5123: Use-after-free vulnerability in the BitmapData class in
    the ActionScript 3 (AS3) implementation in Adobe Flash Player allowed
    remote attackers to execute arbitrary code or cause a denial of service
    (memory corruption) via crafted Flash content that overrides a valueOf
    function (bsc#937752).
  • CVE-2015-5122: Use-after-free vulnerability in the DisplayObject class
    in the ActionScript 3 (AS3) implementation in Adobe Flash Player allowed
    remote attackers to execute arbitrary code or cause a denial of service
    (memory corruption) via crafted Flash content that leverages improper
    handling of the opaqueBackground property (bsc#937752).