LWN.net Logo

flash-plugin: multiple vulnerabilities

Package(s):flash-plugin CVE #(s):CVE-2011-0579 CVE-2011-0618 CVE-2011-0619 CVE-2011-0620 CVE-2011-0621 CVE-2011-0622 CVE-2011-0623 CVE-2011-0624 CVE-2011-0625 CVE-2011-0626 CVE-2011-0627
Created:May 13, 2011 Updated:May 18, 2011
Description: From the Red Hat advisory:

Multiple security flaws were found in the way flash-plugin displayed certain SWF content. An attacker could use these flaws to create a specially-crafted SWF file that would cause flash-plugin to crash or, potentially, execute arbitrary code when the victim loaded a page containing the specially-crafted SWF content. (CVE-2011-0618, CVE-2011-0619, CVE-2011-0620, CVE-2011-0621, CVE-2011-0622, CVE-2011-0623, CVE-2011-0624, CVE-2011-0625, CVE-2011-0626, CVE-2011-0627)

This update also fixes an information disclosure flaw in flash-plugin. (CVE-2011-0579)

Alerts:
Gentoo 201110-11 2011-10-13
openSUSE openSUSE-SU-2011:0492-1 2011-05-13
Red Hat RHSA-2011:0511-01 2011-05-13

(Log in to post comments)

Copyright © 2013, Eklektix, Inc.
Comments and public postings are copyrighted by their creators.
Linux is a registered trademark of Linus Torvalds