SuSE 11.2 / 11.3 Security Update : flash-player (SAT Patch Numbers 8639 / 8640)

Critical Nessus Plugin ID 71492


The remote SuSE 11 host is missing one or more security updates.


This update fixes the following security issues with flash-player :

- flash-plugin: multiple code execution flaws (APSB13-28).

- These updates resolve a type confusion vulnerability that could lead to code execution. (CVE-2013-5331)

- These updates resolve a memory corruption vulnerability that could lead to code execution. (CVE-2013-5332)

- Ref: sb13-28.html


Apply SAT patch number 8639 / 8640 as appropriate.

See Also

Plugin Details

Severity: Critical

ID: 71492

File Name: suse_11_flash-player-131213.nasl

Version: $Revision: 1.4 $

Type: local

Agent: unix

Published: 2013/12/17

Modified: 2014/04/29

Dependencies: 12634

Risk Information

Risk Factor: Critical


Base Score: 10

Vector: CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C

Vulnerability Information

CPE: p-cpe:/a:novell:suse_linux:11:flash-player, p-cpe:/a:novell:suse_linux:11:flash-player-gnome, p-cpe:/a:novell:suse_linux:11:flash-player-kde4, cpe:/o:novell:suse_linux:11

Required KB Items: Host/local_checks_enabled, Host/cpu, Host/SuSE/release, Host/SuSE/rpm-list

Exploit Available: true

Exploit Ease: Exploits are available

Patch Publication Date: 2013/12/13

Exploitable With

Core Impact

Metasploit (Adobe Flash Player Type Confusion Remote Code Execution)

Reference Information

CVE: CVE-2013-5331, CVE-2013-5332