GLSA Advocate
Joined: 12 May 2004 Posts: 2663
|
Posted: Thu Sep 06, 2012 5:26 am Post subject: [ GLSA 201209-01 ] Adobe Flash Player: Multiple vulnerabilit |
|
|
Gentoo Linux Security Advisory
Title: Adobe Flash Player: Multiple vulnerabilities (GLSA 201209-01)
Severity: normal
Exploitable: remote
Date: September 05, 2012
Bug(s): #431432, #432286
ID: 201209-01
Synopsis
Multiple vulnerabilities have been found in Adobe Flash Player, the
worst of which could result in execution of arbitrary code.
Background
The Adobe Flash Player is a renderer for the SWF file format, which is
commonly used to provide interactive websites.
Affected Packages
Package: www-plugins/adobe-flash
Vulnerable: < 11.2.202.238
Unaffected: >= 11.2.202.238
Architectures: All supported architectures
Description
Multiple unspecified vulnerabilities have been discovered in Adobe Flash
Player. Please review the CVE identifiers referenced below for details.
Impact
A remote attacker could entice a user to open specially crafted SWF
content, possibly resulting in execution of arbitrary code with the
privileges of the process, or a Denial of Service condition. Furthermore,
a remote attacker may be able to obtain sensitive information.
Workaround
There is no known workaround at this time.
Resolution
All Adobe Flash Player users should upgrade to the latest version: Code: | # emerge --sync
# emerge --ask --oneshot --verbose
">=www-plugins/adobe-flash-11.2.202.238"
|
References
CVE-2012-1535
CVE-2012-4163
CVE-2012-4164
CVE-2012-4165
CVE-2012-4166
CVE-2012-4167
CVE-2012-4168 |
|