Seite 1 von 1

Verfasst: 12.08.2011, 12:22
von Lighty

Flash-Player Security Update

The update to Flash-Player 10.3.188.5 fixes various
security issues:
- CVE-2011-2130: CVSS v2 Base Score: 6.8
(AV:N/AC:M/Au:N/C:P/I:P/A:P)
- CVE-2011-2134: CVSS v2 Base Score: 6.8
(AV:N/AC:M/Au:N/C:P/I:P/A:P)
- CVE-2011-2135: CVSS v2 Base Score: 6.8
(AV:N/AC:M/Au:N/C:P/I:P/A:P)
- CVE-2011-2136: CVSS v2 Base Score: 6.8
(AV:N/AC:M/Au:N/C:P/I:P/A:P)
- CVE-2011-2137: CVSS v2 Base Score: 6.8
(AV:N/AC:M/Au:N/C:P/I:P/A:P)
- CVE-2011-2138: CVSS v2 Base Score: 6.8
(AV:N/AC:M/Au:N/C:P/I:P/A:P)
- CVE-2011-2139: CVSS v2 Base Score: 6.8
(AV:N/AC:M/Au:N/C:P/I:P/A:P)
- CVE-2011-2140: CVSS v2 Base Score: 6.8
(AV:N/AC:M/Au:N/C:P/I:P/A:P)
- CVE-2011-2414: CVSS v2 Base Score: 6.8
(AV:N/AC:M/Au:N/C:P/I:P/A:P)
- CVE-2011-2415: CVSS v2 Base Score: 6.8
(AV:N/AC:M/Au:N/C:P/I:P/A:P)
- CVE-2011-2416: CVSS v2 Base Score: 6.8
(AV:N/AC:M/Au:N/C:P/I:P/A:P)
- CVE-2011-2417: CVSS v2 Base Score: 6.8
(AV:N/AC:M/Au:N/C:P/I:P/A:P)
- CVE-2011-2425: CVSS v2 Base Score: 6.8
(AV:N/AC:M/Au:N/C:P/I:P/A:P)


This update resolves a buffer overflow vulnerability that
could lead to code execution (CVE-2011-2130).

This update resolves a buffer overflow vulnerability that
could lead to code execution (CVE-2011-2134).

This update resolves a memory corruption vulnerability that
could lead to code execution (CVE-2011-2135).

This update resolves an integer overflow vulnerability that
could lead to code execution (CVE-2011-2136).

This update resolves a buffer overflow vulnerability that
could lead to code execution (CVE-2011-2137).

This update resolves an integer overflow vulnerability that
could lead to code execution (CVE-2011-2138).

This update resolves a cross-site information disclosure
vulnerability that could lead to code execution
(CVE-2011-2139).

This update resolves a memory corruption vulnerability that
could lead to code execution (CVE-2011-2140).

This update resolves a buffer overflow vulnerability that
could lead to code execution (CVE-2011-2414).

This update resolves a buffer overflow vulnerability that
could lead to code execution (CVE-2011-2415).

This update resolves an integer overflow vulnerability that
could lead to code execution (CVE-2011-2416).

This update resolves a memory corruption vulnerability that
could lead to code execution (CVE-2011-2417).

This update resolves a memory corruption vulnerability that
could lead to code execution (CVE-2011-2425).

Weitere Informationen zu den Fehlerbereinigungen dieser Aktualisierung sind auf diesen Webseiten verfügbar:
• bug number 711427

Weitere Informationen zu dieser Sicherheitsaktualisierung sind auf diesen Webseiten verfügbar:
http://cve.mitre.org/cgi-bin/cvename.cg ... -2011-2130
http://cve.mitre.org/cgi-bin/cvename.cg ... -2011-2134
http://cve.mitre.org/cgi-bin/cvename.cg ... -2011-2135
http://cve.mitre.org/cgi-bin/cvename.cg ... -2011-2136
http://cve.mitre.org/cgi-bin/cvename.cg ... -2011-2137
http://cve.mitre.org/cgi-bin/cvename.cg ... -2011-2138
http://cve.mitre.org/cgi-bin/cvename.cg ... -2011-2139
http://cve.mitre.org/cgi-bin/cvename.cg ... -2011-2140
http://cve.mitre.org/cgi-bin/cvename.cg ... -2011-2414
http://cve.mitre.org/cgi-bin/cvename.cg ... -2011-2415
http://cve.mitre.org/cgi-bin/cvename.cg ... -2011-2416
http://cve.mitre.org/cgi-bin/cvename.cg ... -2011-2417
http://cve.mitre.org/cgi-bin/cvename.cg ... -2011-2425

Veraltete Pakete:
• flash-player - 10.3.181.34-1.2.1
/• flash-player - 10.3.183.5-0.2.1
/• flash-player - 10.2.153.1-0.4.1
/• flash-player - 10.3.181.34-1.2.1
/• flash-player - 10.2.152.26-2.1
/• flash-player - 10.2.152.26-3.2.1
/• flash-player - 10.3.181.14-0.2.1
/• flash-player - 10.2.153.1-0.2.1
/• flash-player - 10.2.159.1-0.2.1
/• flash-player - 10.3.181.26-0.2.1
/• flash-player - 10.3.181.22-0.2.1

Paketquelle: Aktualisierungen-für-openSUSE-11.4-11.4-0