LWN.net Logo

flash_plugin: multiple vulnerabilities

Package(s):flash_plugin CVE #(s):CVE-2012-0752 CVE-2012-0753 CVE-2012-0754 CVE-2012-0755 CVE-2012-0756 CVE-2012-0767
Created:February 17, 2012 Updated:February 27, 2012
Description: From the Red Hat advisory:

Multiple security flaws were found in the way flash-plugin displayed certain SWF content. An attacker could use these flaws to create a specially-crafted SWF file that would cause flash-plugin to crash or, potentially, execute arbitrary code when the victim loaded a page containing the specially-crafted SWF content. (CVE-2012-0752, CVE-2012-0753, CVE-2012-0754, CVE-2012-0755, CVE-2012-0756)

A flaw in flash-plugin could allow an attacker to conduct cross-site scripting (XSS) attacks if a victim were tricked into visiting a specially-crafted web page. (CVE-2012-0767)

Alerts:
Red Hat RHSA-2012:0144-01 2012-02-17
openSUSE openSUSE-SU-2012:0265-1 2012-02-17
SUSE SUSE-SU-2012:0280-1 2012-02-18
SUSE SUSE-SU-2012:0299-1 2012-02-27

(Log in to post comments)

Copyright © 2013, Eklektix, Inc.
Comments and public postings are copyrighted by their creators.
Linux is a registered trademark of Linus Torvalds