Security update for flash-player (important)

2017-01-11T21:08:32
ID SUSE-SU-2017:0108-1
Type suse
Reporter Suse
Modified 2017-01-11T21:08:32

Description

This update to Adobe Flash 24.0.0.194 fixes the following vulnerabilities advised under APSB17-02:

  • security bypass vulnerability that could lead to information disclosure (CVE-2017-2938)
  • use-after-free vulnerabilities that could lead to code execution (CVE-2017-2932, CVE-2017-2936, CVE-2017-2937)
  • heap buffer overflow vulnerabilities that could lead to code execution (CVE-2017-2927, CVE-2017-2933, CVE-2017-2934, CVE-2017-2935)
  • memory corruption vulnerabilities that could lead to code execution (CVE-2017-2925, CVE-2017-2926, CVE-2017-2928, CVE-2017-2930, CVE-2017-2931)