openSUSE Security Update : flash-player (openSUSE-SU-2011:0897-1)
Critical Nessus Plugin ID 75501
Synopsis
The remote openSUSE host is missing a security update.
Description
The update to Flash-Player 10.3.188.5 fixes various security issues :
- CVE-2011-2130: CVSS v2 Base Score: 6.8 (AV:N/AC:M/Au:N/C:P/I:P/A:P)
- CVE-2011-2134: CVSS v2 Base Score: 6.8 (AV:N/AC:M/Au:N/C:P/I:P/A:P)
- CVE-2011-2135: CVSS v2 Base Score: 6.8 (AV:N/AC:M/Au:N/C:P/I:P/A:P)
- CVE-2011-2136: CVSS v2 Base Score: 6.8 (AV:N/AC:M/Au:N/C:P/I:P/A:P)
- CVE-2011-2137: CVSS v2 Base Score: 6.8 (AV:N/AC:M/Au:N/C:P/I:P/A:P)
- CVE-2011-2138: CVSS v2 Base Score: 6.8 (AV:N/AC:M/Au:N/C:P/I:P/A:P)
- CVE-2011-2139: CVSS v2 Base Score: 6.8 (AV:N/AC:M/Au:N/C:P/I:P/A:P)
- CVE-2011-2140: CVSS v2 Base Score: 6.8 (AV:N/AC:M/Au:N/C:P/I:P/A:P)
- CVE-2011-2414: CVSS v2 Base Score: 6.8 (AV:N/AC:M/Au:N/C:P/I:P/A:P)
- CVE-2011-2415: CVSS v2 Base Score: 6.8 (AV:N/AC:M/Au:N/C:P/I:P/A:P)
- CVE-2011-2416: CVSS v2 Base Score: 6.8 (AV:N/AC:M/Au:N/C:P/I:P/A:P)
- CVE-2011-2417: CVSS v2 Base Score: 6.8 (AV:N/AC:M/Au:N/C:P/I:P/A:P)
- CVE-2011-2425: CVSS v2 Base Score: 6.8 (AV:N/AC:M/Au:N/C:P/I:P/A:P)
This update resolves a buffer overflow vulnerability that could lead to code execution (CVE-2011-2130).
This update resolves a buffer overflow vulnerability that could lead to code execution (CVE-2011-2134).
This update resolves a memory corruption vulnerability that could lead to code execution (CVE-2011-2135).
This update resolves an integer overflow vulnerability that could lead to code execution (CVE-2011-2136).
This update resolves a buffer overflow vulnerability that could lead to code execution (CVE-2011-2137).
This update resolves an integer overflow vulnerability that could lead to code execution (CVE-2011-2138).
This update resolves a cross-site information disclosure vulnerability that could lead to code execution (CVE-2011-2139).
This update resolves a memory corruption vulnerability that could lead to code execution (CVE-2011-2140).
This update resolves a buffer overflow vulnerability that could lead to code execution (CVE-2011-2414).
This update resolves a buffer overflow vulnerability that could lead to code execution (CVE-2011-2415).
This update resolves an integer overflow vulnerability that could lead to code execution (CVE-2011-2416).
This update resolves a memory corruption vulnerability that could lead to code execution (CVE-2011-2417).
This update resolves a memory corruption vulnerability that could lead to code execution (CVE-2011-2425).
Solution
Update the affected flash-player package.