flash-player: arbitrary code execution [LWN.net]

Package(s):

flash-player

CVE #(s):

CVE-2011-0609

Created:

March 29, 2011

Updated:

April 1, 2011

Description:

From the CVE entry:

Unspecified vulnerability in Adobe Flash Player 10.2.154.13 and earlier on Windows, Mac OS X, Linux, and Solaris and 10.1.106.16 and earlier on Android, and Authplay.dll (aka AuthPlayLib.bundle) in Adobe Reader and Acrobat 9.x through 9.4.2 and 10.x through 10.0.1 on Windows and Mac OS X, allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via crafted Flash content, as demonstrated by a .swf file embedded in an Excel spreadsheet, and as exploited in the wild in March 2011.

Alerts:

Gentoo	201110-11	2011-10-13
SUSE	SUSE-SR:2011:005	2011-04-01
openSUSE	openSUSE-SU-2011:0239-1	2011-03-29

(Log in to post comments)

flash-player: arbitrary code execution

Posted Mar 31, 2011 14:42 UTC (Thu) by Thalience (subscriber, #4217) [Link]

As usual, no update available for amd64 users.

Fuck.

flash-player: arbitrary code execution

Posted Apr 1, 2011 5:19 UTC (Fri) by dlang (✭ supporter ✭, #313) [Link]

I thought that Adobe killed off the 64 bit version.