suse-su-2015:1211-1
Vulnerability from csaf_suse
Published
2015-07-08 19:43
Modified
2015-07-08 19:43
Summary
Security update for flash-player
Notes
Title of the patch
Security update for flash-player
Description of the patch
flash-player was updated to fix 35 security issues.
These security issues were fixed:
- CVE-2015-3135, CVE-2015-4432, CVE-2015-5118: Heap buffer overflow vulnerabilities that could lead to code execution (bsc#937339).
- CVE-2015-3117, CVE-2015-3123, CVE-2015-3130, CVE-2015-3133, CVE-2015-3134, CVE-2015-4431: Memory corruption vulnerabilities that could lead to code execution (bsc#937339).
- CVE-2015-3126, CVE-2015-4429: Null pointer dereference issues (bsc#937339).
- CVE-2015-3114: A security bypass vulnerability that could lead to information disclosure (bsc#937339).
- CVE-2015-3119, CVE-2015-3120, CVE-2015-3121, CVE-2015-3122, CVE-2015-4433: Type confusion vulnerabilities that could lead to code execution (bsc#937339).
- CVE-2015-3118, CVE-2015-3124, CVE-2015-5117, CVE-2015-3127, CVE-2015-3128, CVE-2015-3129, CVE-2015-3131, CVE-2015-3132, CVE-2015-3136, CVE-2015-3137, CVE-2015-4428, CVE-2015-4430, CVE-2015-5119: Use-after-free vulnerabilities that could lead to code execution (bsc#937339).
- CVE-2014-0578, CVE-2015-3115, CVE-2015-3116, CVE-2015-3125, CVE-2015-5116: Vulnerabilities that could be exploited to bypass the same-origin-policy and lead to information disclosure (bsc#937339).
Patchnames
SUSE-SLE-DESKTOP-12-2015-306,SUSE-SLE-WE-12-2015-306
Terms of use
CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
{ "document": { "aggregate_severity": { "namespace": "https://www.suse.com/support/security/rating/", "text": "critical" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Copyright 2024 SUSE LLC. All rights reserved.", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "summary", "text": "Security update for flash-player", "title": "Title of the patch" }, { "category": "description", "text": "flash-player was updated to fix 35 security issues.\n\nThese security issues were fixed:\n- CVE-2015-3135, CVE-2015-4432, CVE-2015-5118: Heap buffer overflow vulnerabilities that could lead to code execution (bsc#937339).\n- CVE-2015-3117, CVE-2015-3123, CVE-2015-3130, CVE-2015-3133, CVE-2015-3134, CVE-2015-4431: Memory corruption vulnerabilities that could lead to code execution (bsc#937339).\n- CVE-2015-3126, CVE-2015-4429: Null pointer dereference issues (bsc#937339).\n- CVE-2015-3114: A security bypass vulnerability that could lead to information disclosure (bsc#937339).\n- CVE-2015-3119, CVE-2015-3120, CVE-2015-3121, CVE-2015-3122, CVE-2015-4433: Type confusion vulnerabilities that could lead to code execution (bsc#937339).\n- CVE-2015-3118, CVE-2015-3124, CVE-2015-5117, CVE-2015-3127, CVE-2015-3128, CVE-2015-3129, CVE-2015-3131, CVE-2015-3132, CVE-2015-3136, CVE-2015-3137, CVE-2015-4428, CVE-2015-4430, CVE-2015-5119: Use-after-free vulnerabilities that could lead to code execution (bsc#937339).\n- CVE-2014-0578, CVE-2015-3115, CVE-2015-3116, CVE-2015-3125, CVE-2015-5116: Vulnerabilities that could be exploited to bypass the same-origin-policy and lead to information disclosure (bsc#937339).\n ", "title": "Description of the patch" }, { "category": "details", "text": "SUSE-SLE-DESKTOP-12-2015-306,SUSE-SLE-WE-12-2015-306", "title": "Patchnames" }, { "category": "legal_disclaimer", "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).", "title": "Terms of use" } ], "publisher": { "category": "vendor", "contact_details": "https://www.suse.com/support/security/contact/", "name": "SUSE Product Security Team", "namespace": "https://www.suse.com/" }, "references": [ { "category": "external", "summary": "SUSE ratings", "url": "https://www.suse.com/support/security/rating/" }, { "category": "self", "summary": "URL of this CSAF notice", "url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2015_1211-1.json" }, { "category": "self", "summary": "URL for SUSE-SU-2015:1211-1", "url": "https://www.suse.com/support/update/announcement/2015/suse-su-20151211-1/" }, { "category": "self", "summary": "E-Mail link for SUSE-SU-2015:1211-1", "url": "https://lists.suse.com/pipermail/sle-security-updates/2015-July/001488.html" }, { "category": "self", "summary": "SUSE Bug 937339", "url": "https://bugzilla.suse.com/937339" }, { "category": "self", "summary": "SUSE CVE CVE-2014-0578 page", "url": "https://www.suse.com/security/cve/CVE-2014-0578/" }, { "category": "self", "summary": "SUSE CVE CVE-2015-3114 page", "url": "https://www.suse.com/security/cve/CVE-2015-3114/" }, { "category": "self", "summary": "SUSE CVE CVE-2015-3115 page", "url": "https://www.suse.com/security/cve/CVE-2015-3115/" }, { "category": "self", "summary": "SUSE CVE CVE-2015-3116 page", "url": "https://www.suse.com/security/cve/CVE-2015-3116/" }, { "category": "self", "summary": "SUSE CVE CVE-2015-3117 page", "url": "https://www.suse.com/security/cve/CVE-2015-3117/" }, { "category": "self", "summary": "SUSE CVE CVE-2015-3118 page", "url": "https://www.suse.com/security/cve/CVE-2015-3118/" }, { "category": "self", "summary": "SUSE CVE CVE-2015-3119 page", "url": "https://www.suse.com/security/cve/CVE-2015-3119/" }, { "category": "self", "summary": "SUSE CVE CVE-2015-3120 page", "url": "https://www.suse.com/security/cve/CVE-2015-3120/" }, { "category": "self", "summary": "SUSE CVE CVE-2015-3121 page", "url": "https://www.suse.com/security/cve/CVE-2015-3121/" }, { "category": "self", "summary": "SUSE CVE CVE-2015-3122 page", "url": "https://www.suse.com/security/cve/CVE-2015-3122/" }, { "category": "self", "summary": "SUSE CVE CVE-2015-3123 page", "url": "https://www.suse.com/security/cve/CVE-2015-3123/" }, { "category": "self", "summary": "SUSE CVE CVE-2015-3124 page", "url": "https://www.suse.com/security/cve/CVE-2015-3124/" }, { "category": "self", "summary": "SUSE CVE CVE-2015-3125 page", "url": "https://www.suse.com/security/cve/CVE-2015-3125/" }, { "category": "self", "summary": "SUSE CVE CVE-2015-3126 page", "url": "https://www.suse.com/security/cve/CVE-2015-3126/" }, { "category": "self", "summary": "SUSE CVE CVE-2015-3127 page", "url": "https://www.suse.com/security/cve/CVE-2015-3127/" }, { "category": "self", "summary": "SUSE CVE CVE-2015-3128 page", "url": "https://www.suse.com/security/cve/CVE-2015-3128/" }, { "category": "self", "summary": "SUSE CVE CVE-2015-3129 page", "url": "https://www.suse.com/security/cve/CVE-2015-3129/" }, { "category": "self", "summary": "SUSE CVE CVE-2015-3130 page", "url": "https://www.suse.com/security/cve/CVE-2015-3130/" }, { "category": "self", "summary": "SUSE CVE CVE-2015-3131 page", "url": "https://www.suse.com/security/cve/CVE-2015-3131/" }, { "category": "self", "summary": "SUSE CVE CVE-2015-3132 page", "url": "https://www.suse.com/security/cve/CVE-2015-3132/" }, { "category": "self", "summary": "SUSE CVE CVE-2015-3133 page", "url": "https://www.suse.com/security/cve/CVE-2015-3133/" }, { "category": "self", "summary": "SUSE CVE CVE-2015-3134 page", "url": "https://www.suse.com/security/cve/CVE-2015-3134/" }, { "category": "self", "summary": "SUSE CVE CVE-2015-3135 page", "url": "https://www.suse.com/security/cve/CVE-2015-3135/" }, { "category": "self", "summary": "SUSE CVE CVE-2015-3136 page", "url": "https://www.suse.com/security/cve/CVE-2015-3136/" }, { "category": "self", "summary": "SUSE CVE CVE-2015-3137 page", "url": "https://www.suse.com/security/cve/CVE-2015-3137/" }, { "category": "self", "summary": "SUSE CVE CVE-2015-4428 page", "url": "https://www.suse.com/security/cve/CVE-2015-4428/" }, { "category": "self", "summary": "SUSE CVE CVE-2015-4429 page", "url": "https://www.suse.com/security/cve/CVE-2015-4429/" }, { "category": "self", "summary": "SUSE CVE CVE-2015-4430 page", "url": "https://www.suse.com/security/cve/CVE-2015-4430/" }, { "category": "self", "summary": "SUSE CVE CVE-2015-4431 page", "url": "https://www.suse.com/security/cve/CVE-2015-4431/" }, { "category": "self", "summary": "SUSE CVE CVE-2015-4432 page", "url": "https://www.suse.com/security/cve/CVE-2015-4432/" }, { "category": "self", "summary": "SUSE CVE CVE-2015-4433 page", "url": "https://www.suse.com/security/cve/CVE-2015-4433/" }, { "category": "self", "summary": "SUSE CVE CVE-2015-5116 page", "url": "https://www.suse.com/security/cve/CVE-2015-5116/" }, { "category": "self", "summary": "SUSE CVE CVE-2015-5117 page", "url": "https://www.suse.com/security/cve/CVE-2015-5117/" }, { "category": "self", "summary": "SUSE CVE CVE-2015-5118 page", "url": "https://www.suse.com/security/cve/CVE-2015-5118/" }, { "category": "self", "summary": "SUSE CVE CVE-2015-5119 page", "url": "https://www.suse.com/security/cve/CVE-2015-5119/" } ], "title": "Security update for flash-player", "tracking": { "current_release_date": "2015-07-08T19:43:00Z", "generator": { "date": "2015-07-08T19:43:00Z", "engine": { "name": "cve-database.git:bin/generate-csaf.pl", "version": "1" } }, "id": "SUSE-SU-2015:1211-1", "initial_release_date": "2015-07-08T19:43:00Z", "revision_history": [ { "date": "2015-07-08T19:43:00Z", "number": "1", "summary": "Current version" } ], "status": "final", "version": "1" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_version", "name": "flash-player-11.2.202.481-93.1.i586", "product": { "name": "flash-player-11.2.202.481-93.1.i586", "product_id": "flash-player-11.2.202.481-93.1.i586" } }, { "category": "product_version", "name": "flash-player-gnome-11.2.202.481-93.1.i586", "product": { "name": "flash-player-gnome-11.2.202.481-93.1.i586", "product_id": "flash-player-gnome-11.2.202.481-93.1.i586" } } ], "category": "architecture", "name": "i586" }, { "branches": [ { "category": "product_version", "name": "flash-player-11.2.202.481-93.1.x86_64", "product": { "name": "flash-player-11.2.202.481-93.1.x86_64", "product_id": "flash-player-11.2.202.481-93.1.x86_64" } }, { "category": "product_version", "name": "flash-player-gnome-11.2.202.481-93.1.x86_64", "product": { "name": "flash-player-gnome-11.2.202.481-93.1.x86_64", "product_id": "flash-player-gnome-11.2.202.481-93.1.x86_64" } } ], "category": "architecture", "name": "x86_64" }, { "branches": [ { "category": "product_name", "name": "SUSE Linux Enterprise Desktop 12", "product": { "name": "SUSE Linux Enterprise Desktop 12", "product_id": "SUSE Linux Enterprise Desktop 12", "product_identification_helper": { "cpe": "cpe:/o:suse:sled:12" } } }, { "category": "product_name", "name": "SUSE Linux Enterprise Workstation Extension 12", "product": { "name": "SUSE Linux Enterprise Workstation Extension 12", "product_id": "SUSE Linux Enterprise Workstation Extension 12", "product_identification_helper": { "cpe": "cpe:/o:suse:sle-we:12" } } } ], "category": "product_family", "name": "SUSE Linux Enterprise" } ], "category": "vendor", "name": "SUSE" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "flash-player-11.2.202.481-93.1.i586 as component of SUSE Linux Enterprise Desktop 12", "product_id": "SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.481-93.1.i586" }, "product_reference": "flash-player-11.2.202.481-93.1.i586", "relates_to_product_reference": "SUSE Linux Enterprise Desktop 12" }, { "category": "default_component_of", "full_product_name": { "name": "flash-player-11.2.202.481-93.1.x86_64 as component of SUSE Linux Enterprise Desktop 12", "product_id": "SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.481-93.1.x86_64" }, "product_reference": "flash-player-11.2.202.481-93.1.x86_64", "relates_to_product_reference": "SUSE Linux Enterprise Desktop 12" }, { "category": "default_component_of", "full_product_name": { "name": "flash-player-gnome-11.2.202.481-93.1.i586 as component of SUSE Linux Enterprise Desktop 12", "product_id": "SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.481-93.1.i586" }, "product_reference": "flash-player-gnome-11.2.202.481-93.1.i586", "relates_to_product_reference": "SUSE Linux Enterprise Desktop 12" }, { "category": "default_component_of", "full_product_name": { "name": "flash-player-gnome-11.2.202.481-93.1.x86_64 as component of SUSE Linux Enterprise Desktop 12", "product_id": "SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.481-93.1.x86_64" }, "product_reference": "flash-player-gnome-11.2.202.481-93.1.x86_64", "relates_to_product_reference": "SUSE Linux Enterprise Desktop 12" }, { "category": "default_component_of", "full_product_name": { "name": "flash-player-11.2.202.481-93.1.i586 as component of SUSE Linux Enterprise Workstation Extension 12", "product_id": "SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.481-93.1.i586" }, "product_reference": "flash-player-11.2.202.481-93.1.i586", "relates_to_product_reference": "SUSE Linux Enterprise Workstation Extension 12" }, { "category": "default_component_of", "full_product_name": { "name": "flash-player-11.2.202.481-93.1.x86_64 as component of SUSE Linux Enterprise Workstation Extension 12", "product_id": "SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.481-93.1.x86_64" }, "product_reference": "flash-player-11.2.202.481-93.1.x86_64", "relates_to_product_reference": "SUSE Linux Enterprise Workstation Extension 12" }, { "category": "default_component_of", "full_product_name": { "name": "flash-player-gnome-11.2.202.481-93.1.i586 as component of SUSE Linux Enterprise Workstation Extension 12", "product_id": "SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.481-93.1.i586" }, "product_reference": "flash-player-gnome-11.2.202.481-93.1.i586", "relates_to_product_reference": "SUSE Linux Enterprise Workstation Extension 12" }, { "category": "default_component_of", "full_product_name": { "name": "flash-player-gnome-11.2.202.481-93.1.x86_64 as component of SUSE Linux Enterprise Workstation Extension 12", "product_id": "SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.481-93.1.x86_64" }, "product_reference": "flash-player-gnome-11.2.202.481-93.1.x86_64", "relates_to_product_reference": "SUSE Linux Enterprise Workstation Extension 12" } ] }, "vulnerabilities": [ { "cve": "CVE-2014-0578", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2014-0578" } ], "notes": [ { "category": "general", "text": "Adobe Flash Player before 13.0.0.302 and 14.x through 18.x before 18.0.0.203 on Windows and OS X and before 11.2.202.481 on Linux, Adobe AIR before 18.0.0.180, Adobe AIR SDK before 18.0.0.180, and Adobe AIR SDK \u0026 Compiler before 18.0.0.180 allow remote attackers to bypass the Same Origin Policy via unspecified vectors, a different vulnerability than CVE-2015-3115, CVE-2015-3116, CVE-2015-3125, and CVE-2015-5116.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.481-93.1.i586", "SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.481-93.1.x86_64", "SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.481-93.1.i586", "SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.481-93.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.481-93.1.i586", "SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.481-93.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.481-93.1.i586", "SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.481-93.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2014-0578", "url": "https://www.suse.com/security/cve/CVE-2014-0578" }, { "category": "external", "summary": "SUSE Bug 937339 for CVE-2014-0578", "url": "https://bugzilla.suse.com/937339" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.481-93.1.i586", "SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.481-93.1.x86_64", "SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.481-93.1.i586", "SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.481-93.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.481-93.1.i586", "SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.481-93.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.481-93.1.i586", "SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.481-93.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2015-07-08T19:43:00Z", "details": "critical" } ], "title": "CVE-2014-0578" }, { "cve": "CVE-2015-3114", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2015-3114" } ], "notes": [ { "category": "general", "text": "Adobe Flash Player before 13.0.0.302 and 14.x through 18.x before 18.0.0.203 on Windows and OS X and before 11.2.202.481 on Linux, Adobe AIR before 18.0.0.180, Adobe AIR SDK before 18.0.0.180, and Adobe AIR SDK \u0026 Compiler before 18.0.0.180 allow attackers to bypass intended access restrictions and obtain sensitive information via unspecified vectors.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.481-93.1.i586", "SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.481-93.1.x86_64", "SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.481-93.1.i586", "SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.481-93.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.481-93.1.i586", "SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.481-93.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.481-93.1.i586", "SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.481-93.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2015-3114", "url": "https://www.suse.com/security/cve/CVE-2015-3114" }, { "category": "external", "summary": "SUSE Bug 937339 for CVE-2015-3114", "url": "https://bugzilla.suse.com/937339" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.481-93.1.i586", "SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.481-93.1.x86_64", "SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.481-93.1.i586", "SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.481-93.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.481-93.1.i586", "SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.481-93.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.481-93.1.i586", "SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.481-93.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2015-07-08T19:43:00Z", "details": "critical" } ], "title": "CVE-2015-3114" }, { "cve": "CVE-2015-3115", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2015-3115" } ], "notes": [ { "category": "general", "text": "Adobe Flash Player before 13.0.0.302 and 14.x through 18.x before 18.0.0.203 on Windows and OS X and before 11.2.202.481 on Linux, Adobe AIR before 18.0.0.180, Adobe AIR SDK before 18.0.0.180, and Adobe AIR SDK \u0026 Compiler before 18.0.0.180 allow remote attackers to bypass the Same Origin Policy via unspecified vectors, a different vulnerability than CVE-2014-0578, CVE-2015-3116, CVE-2015-3125, and CVE-2015-5116.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.481-93.1.i586", "SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.481-93.1.x86_64", "SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.481-93.1.i586", "SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.481-93.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.481-93.1.i586", "SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.481-93.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.481-93.1.i586", "SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.481-93.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2015-3115", "url": "https://www.suse.com/security/cve/CVE-2015-3115" }, { "category": "external", "summary": "SUSE Bug 937339 for CVE-2015-3115", "url": "https://bugzilla.suse.com/937339" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.481-93.1.i586", "SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.481-93.1.x86_64", "SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.481-93.1.i586", "SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.481-93.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.481-93.1.i586", "SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.481-93.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.481-93.1.i586", "SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.481-93.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2015-07-08T19:43:00Z", "details": "critical" } ], "title": "CVE-2015-3115" }, { "cve": "CVE-2015-3116", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2015-3116" } ], "notes": [ { "category": "general", "text": "Adobe Flash Player before 13.0.0.302 and 14.x through 18.x before 18.0.0.203 on Windows and OS X and before 11.2.202.481 on Linux, Adobe AIR before 18.0.0.180, Adobe AIR SDK before 18.0.0.180, and Adobe AIR SDK \u0026 Compiler before 18.0.0.180 allow remote attackers to bypass the Same Origin Policy via unspecified vectors, a different vulnerability than CVE-2014-0578, CVE-2015-3115, CVE-2015-3125, and CVE-2015-5116.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.481-93.1.i586", "SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.481-93.1.x86_64", "SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.481-93.1.i586", "SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.481-93.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.481-93.1.i586", "SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.481-93.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.481-93.1.i586", "SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.481-93.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2015-3116", "url": "https://www.suse.com/security/cve/CVE-2015-3116" }, { "category": "external", "summary": "SUSE Bug 937339 for CVE-2015-3116", "url": "https://bugzilla.suse.com/937339" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.481-93.1.i586", "SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.481-93.1.x86_64", "SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.481-93.1.i586", "SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.481-93.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.481-93.1.i586", "SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.481-93.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.481-93.1.i586", "SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.481-93.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2015-07-08T19:43:00Z", "details": "critical" } ], "title": "CVE-2015-3116" }, { "cve": "CVE-2015-3117", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2015-3117" } ], "notes": [ { "category": "general", "text": "Adobe Flash Player before 13.0.0.302 and 14.x through 18.x before 18.0.0.203 on Windows and OS X and before 11.2.202.481 on Linux, Adobe AIR before 18.0.0.180, Adobe AIR SDK before 18.0.0.180, and Adobe AIR SDK \u0026 Compiler before 18.0.0.180 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-3123, CVE-2015-3130, CVE-2015-3133, CVE-2015-3134, and CVE-2015-4431.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.481-93.1.i586", "SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.481-93.1.x86_64", "SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.481-93.1.i586", "SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.481-93.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.481-93.1.i586", "SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.481-93.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.481-93.1.i586", "SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.481-93.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2015-3117", "url": "https://www.suse.com/security/cve/CVE-2015-3117" }, { "category": "external", "summary": "SUSE Bug 937339 for CVE-2015-3117", "url": "https://bugzilla.suse.com/937339" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.481-93.1.i586", "SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.481-93.1.x86_64", "SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.481-93.1.i586", "SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.481-93.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.481-93.1.i586", "SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.481-93.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.481-93.1.i586", "SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.481-93.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2015-07-08T19:43:00Z", "details": "critical" } ], "title": "CVE-2015-3117" }, { "cve": "CVE-2015-3118", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2015-3118" } ], "notes": [ { "category": "general", "text": "Use-after-free vulnerability in Adobe Flash Player before 13.0.0.302 and 14.x through 18.x before 18.0.0.203 on Windows and OS X and before 11.2.202.481 on Linux, Adobe AIR before 18.0.0.180, Adobe AIR SDK before 18.0.0.180, and Adobe AIR SDK \u0026 Compiler before 18.0.0.180 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-3124, CVE-2015-3127, CVE-2015-3128, CVE-2015-3129, CVE-2015-3131, CVE-2015-3132, CVE-2015-3136, CVE-2015-3137, CVE-2015-4428, CVE-2015-4430, and CVE-2015-5117.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.481-93.1.i586", "SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.481-93.1.x86_64", "SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.481-93.1.i586", "SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.481-93.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.481-93.1.i586", "SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.481-93.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.481-93.1.i586", "SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.481-93.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2015-3118", "url": "https://www.suse.com/security/cve/CVE-2015-3118" }, { "category": "external", "summary": "SUSE Bug 937339 for CVE-2015-3118", "url": "https://bugzilla.suse.com/937339" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.481-93.1.i586", "SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.481-93.1.x86_64", "SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.481-93.1.i586", "SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.481-93.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.481-93.1.i586", "SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.481-93.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.481-93.1.i586", "SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.481-93.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2015-07-08T19:43:00Z", "details": "critical" } ], "title": "CVE-2015-3118" }, { "cve": "CVE-2015-3119", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2015-3119" } ], "notes": [ { "category": "general", "text": "Adobe Flash Player before 13.0.0.302 and 14.x through 18.x before 18.0.0.203 on Windows and OS X and before 11.2.202.481 on Linux, Adobe AIR before 18.0.0.180, Adobe AIR SDK before 18.0.0.180, and Adobe AIR SDK \u0026 Compiler before 18.0.0.180 allow attackers to execute arbitrary code by leveraging an unspecified \"type confusion,\" a different vulnerability than CVE-2015-3120, CVE-2015-3121, CVE-2015-3122, and CVE-2015-4433.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.481-93.1.i586", "SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.481-93.1.x86_64", "SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.481-93.1.i586", "SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.481-93.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.481-93.1.i586", "SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.481-93.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.481-93.1.i586", "SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.481-93.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2015-3119", "url": "https://www.suse.com/security/cve/CVE-2015-3119" }, { "category": "external", "summary": "SUSE Bug 937339 for CVE-2015-3119", "url": "https://bugzilla.suse.com/937339" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.481-93.1.i586", "SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.481-93.1.x86_64", "SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.481-93.1.i586", "SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.481-93.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.481-93.1.i586", "SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.481-93.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.481-93.1.i586", "SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.481-93.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2015-07-08T19:43:00Z", "details": "critical" } ], "title": "CVE-2015-3119" }, { "cve": "CVE-2015-3120", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2015-3120" } ], "notes": [ { "category": "general", "text": "Adobe Flash Player before 13.0.0.302 and 14.x through 18.x before 18.0.0.203 on Windows and OS X and before 11.2.202.481 on Linux, Adobe AIR before 18.0.0.180, Adobe AIR SDK before 18.0.0.180, and Adobe AIR SDK \u0026 Compiler before 18.0.0.180 allow attackers to execute arbitrary code by leveraging an unspecified \"type confusion,\" a different vulnerability than CVE-2015-3119, CVE-2015-3121, CVE-2015-3122, and CVE-2015-4433.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.481-93.1.i586", "SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.481-93.1.x86_64", "SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.481-93.1.i586", "SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.481-93.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.481-93.1.i586", "SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.481-93.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.481-93.1.i586", "SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.481-93.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2015-3120", "url": "https://www.suse.com/security/cve/CVE-2015-3120" }, { "category": "external", "summary": "SUSE Bug 937339 for CVE-2015-3120", "url": "https://bugzilla.suse.com/937339" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.481-93.1.i586", "SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.481-93.1.x86_64", "SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.481-93.1.i586", "SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.481-93.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.481-93.1.i586", "SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.481-93.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.481-93.1.i586", "SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.481-93.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2015-07-08T19:43:00Z", "details": "critical" } ], "title": "CVE-2015-3120" }, { "cve": "CVE-2015-3121", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2015-3121" } ], "notes": [ { "category": "general", "text": "Adobe Flash Player before 13.0.0.302 and 14.x through 18.x before 18.0.0.203 on Windows and OS X and before 11.2.202.481 on Linux, Adobe AIR before 18.0.0.180, Adobe AIR SDK before 18.0.0.180, and Adobe AIR SDK \u0026 Compiler before 18.0.0.180 allow attackers to execute arbitrary code by leveraging an unspecified \"type confusion,\" a different vulnerability than CVE-2015-3119, CVE-2015-3120, CVE-2015-3122, and CVE-2015-4433.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.481-93.1.i586", "SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.481-93.1.x86_64", "SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.481-93.1.i586", "SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.481-93.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.481-93.1.i586", "SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.481-93.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.481-93.1.i586", "SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.481-93.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2015-3121", "url": "https://www.suse.com/security/cve/CVE-2015-3121" }, { "category": "external", "summary": "SUSE Bug 937339 for CVE-2015-3121", "url": "https://bugzilla.suse.com/937339" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.481-93.1.i586", "SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.481-93.1.x86_64", "SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.481-93.1.i586", "SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.481-93.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.481-93.1.i586", "SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.481-93.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.481-93.1.i586", "SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.481-93.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2015-07-08T19:43:00Z", "details": "critical" } ], "title": "CVE-2015-3121" }, { "cve": "CVE-2015-3122", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2015-3122" } ], "notes": [ { "category": "general", "text": "Adobe Flash Player before 13.0.0.302 and 14.x through 18.x before 18.0.0.203 on Windows and OS X and before 11.2.202.481 on Linux, Adobe AIR before 18.0.0.180, Adobe AIR SDK before 18.0.0.180, and Adobe AIR SDK \u0026 Compiler before 18.0.0.180 allow attackers to execute arbitrary code by leveraging an unspecified \"type confusion,\" a different vulnerability than CVE-2015-3119, CVE-2015-3120, CVE-2015-3121, and CVE-2015-4433.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.481-93.1.i586", "SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.481-93.1.x86_64", "SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.481-93.1.i586", "SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.481-93.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.481-93.1.i586", "SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.481-93.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.481-93.1.i586", "SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.481-93.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2015-3122", "url": "https://www.suse.com/security/cve/CVE-2015-3122" }, { "category": "external", "summary": "SUSE Bug 937339 for CVE-2015-3122", "url": "https://bugzilla.suse.com/937339" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.481-93.1.i586", "SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.481-93.1.x86_64", "SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.481-93.1.i586", "SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.481-93.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.481-93.1.i586", "SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.481-93.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.481-93.1.i586", "SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.481-93.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2015-07-08T19:43:00Z", "details": "critical" } ], "title": "CVE-2015-3122" }, { "cve": "CVE-2015-3123", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2015-3123" } ], "notes": [ { "category": "general", "text": "Adobe Flash Player before 13.0.0.302 and 14.x through 18.x before 18.0.0.203 on Windows and OS X and before 11.2.202.481 on Linux, Adobe AIR before 18.0.0.180, Adobe AIR SDK before 18.0.0.180, and Adobe AIR SDK \u0026 Compiler before 18.0.0.180 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-3117, CVE-2015-3130, CVE-2015-3133, CVE-2015-3134, and CVE-2015-4431.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.481-93.1.i586", "SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.481-93.1.x86_64", "SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.481-93.1.i586", "SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.481-93.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.481-93.1.i586", "SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.481-93.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.481-93.1.i586", "SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.481-93.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2015-3123", "url": "https://www.suse.com/security/cve/CVE-2015-3123" }, { "category": "external", "summary": "SUSE Bug 937339 for CVE-2015-3123", "url": "https://bugzilla.suse.com/937339" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.481-93.1.i586", "SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.481-93.1.x86_64", "SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.481-93.1.i586", "SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.481-93.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.481-93.1.i586", "SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.481-93.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.481-93.1.i586", "SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.481-93.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2015-07-08T19:43:00Z", "details": "critical" } ], "title": "CVE-2015-3123" }, { "cve": "CVE-2015-3124", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2015-3124" } ], "notes": [ { "category": "general", "text": "Use-after-free vulnerability in Adobe Flash Player before 13.0.0.302 and 14.x through 18.x before 18.0.0.203 on Windows and OS X and before 11.2.202.481 on Linux, Adobe AIR before 18.0.0.180, Adobe AIR SDK before 18.0.0.180, and Adobe AIR SDK \u0026 Compiler before 18.0.0.180 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-3118, CVE-2015-3127, CVE-2015-3128, CVE-2015-3129, CVE-2015-3131, CVE-2015-3132, CVE-2015-3136, CVE-2015-3137, CVE-2015-4428, CVE-2015-4430, and CVE-2015-5117.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.481-93.1.i586", "SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.481-93.1.x86_64", "SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.481-93.1.i586", "SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.481-93.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.481-93.1.i586", "SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.481-93.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.481-93.1.i586", "SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.481-93.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2015-3124", "url": "https://www.suse.com/security/cve/CVE-2015-3124" }, { "category": "external", "summary": "SUSE Bug 937339 for CVE-2015-3124", "url": "https://bugzilla.suse.com/937339" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.481-93.1.i586", "SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.481-93.1.x86_64", "SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.481-93.1.i586", "SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.481-93.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.481-93.1.i586", "SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.481-93.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.481-93.1.i586", "SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.481-93.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2015-07-08T19:43:00Z", "details": "critical" } ], "title": "CVE-2015-3124" }, { "cve": "CVE-2015-3125", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2015-3125" } ], "notes": [ { "category": "general", "text": "Adobe Flash Player before 13.0.0.302 and 14.x through 18.x before 18.0.0.203 on Windows and OS X and before 11.2.202.481 on Linux, Adobe AIR before 18.0.0.180, Adobe AIR SDK before 18.0.0.180, and Adobe AIR SDK \u0026 Compiler before 18.0.0.180 allow remote attackers to bypass the Same Origin Policy via unspecified vectors, a different vulnerability than CVE-2014-0578, CVE-2015-3115, CVE-2015-3116, and CVE-2015-5116.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.481-93.1.i586", "SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.481-93.1.x86_64", "SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.481-93.1.i586", "SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.481-93.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.481-93.1.i586", "SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.481-93.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.481-93.1.i586", "SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.481-93.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2015-3125", "url": "https://www.suse.com/security/cve/CVE-2015-3125" }, { "category": "external", "summary": "SUSE Bug 937339 for CVE-2015-3125", "url": "https://bugzilla.suse.com/937339" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.481-93.1.i586", "SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.481-93.1.x86_64", "SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.481-93.1.i586", "SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.481-93.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.481-93.1.i586", "SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.481-93.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.481-93.1.i586", "SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.481-93.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2015-07-08T19:43:00Z", "details": "critical" } ], "title": "CVE-2015-3125" }, { "cve": "CVE-2015-3126", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2015-3126" } ], "notes": [ { "category": "general", "text": "Adobe Flash Player before 13.0.0.302 and 14.x through 18.x before 18.0.0.203 on Windows and OS X and before 11.2.202.481 on Linux, Adobe AIR before 18.0.0.180, Adobe AIR SDK before 18.0.0.180, and Adobe AIR SDK \u0026 Compiler before 18.0.0.180 allow attackers to cause a denial of service (NULL pointer dereference) or possibly have unspecified other impact via unknown vectors, a different vulnerability than CVE-2015-4429.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.481-93.1.i586", "SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.481-93.1.x86_64", "SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.481-93.1.i586", "SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.481-93.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.481-93.1.i586", "SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.481-93.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.481-93.1.i586", "SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.481-93.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2015-3126", "url": "https://www.suse.com/security/cve/CVE-2015-3126" }, { "category": "external", "summary": "SUSE Bug 937339 for CVE-2015-3126", "url": "https://bugzilla.suse.com/937339" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.481-93.1.i586", "SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.481-93.1.x86_64", "SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.481-93.1.i586", "SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.481-93.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.481-93.1.i586", "SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.481-93.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.481-93.1.i586", "SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.481-93.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2015-07-08T19:43:00Z", "details": "critical" } ], "title": "CVE-2015-3126" }, { "cve": "CVE-2015-3127", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2015-3127" } ], "notes": [ { "category": "general", "text": "Use-after-free vulnerability in Adobe Flash Player before 13.0.0.302 and 14.x through 18.x before 18.0.0.203 on Windows and OS X and before 11.2.202.481 on Linux, Adobe AIR before 18.0.0.180, Adobe AIR SDK before 18.0.0.180, and Adobe AIR SDK \u0026 Compiler before 18.0.0.180 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-3118, CVE-2015-3124, CVE-2015-3128, CVE-2015-3129, CVE-2015-3131, CVE-2015-3132, CVE-2015-3136, CVE-2015-3137, CVE-2015-4428, CVE-2015-4430, and CVE-2015-5117.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.481-93.1.i586", "SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.481-93.1.x86_64", "SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.481-93.1.i586", "SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.481-93.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.481-93.1.i586", "SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.481-93.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.481-93.1.i586", "SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.481-93.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2015-3127", "url": "https://www.suse.com/security/cve/CVE-2015-3127" }, { "category": "external", "summary": "SUSE Bug 937339 for CVE-2015-3127", "url": "https://bugzilla.suse.com/937339" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.481-93.1.i586", "SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.481-93.1.x86_64", "SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.481-93.1.i586", "SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.481-93.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.481-93.1.i586", "SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.481-93.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.481-93.1.i586", "SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.481-93.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2015-07-08T19:43:00Z", "details": "critical" } ], "title": "CVE-2015-3127" }, { "cve": "CVE-2015-3128", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2015-3128" } ], "notes": [ { "category": "general", "text": "Use-after-free vulnerability in Adobe Flash Player before 13.0.0.302 and 14.x through 18.x before 18.0.0.203 on Windows and OS X and before 11.2.202.481 on Linux, Adobe AIR before 18.0.0.180, Adobe AIR SDK before 18.0.0.180, and Adobe AIR SDK \u0026 Compiler before 18.0.0.180 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-3118, CVE-2015-3124, CVE-2015-3127, CVE-2015-3129, CVE-2015-3131, CVE-2015-3132, CVE-2015-3136, CVE-2015-3137, CVE-2015-4428, CVE-2015-4430, and CVE-2015-5117.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.481-93.1.i586", "SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.481-93.1.x86_64", "SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.481-93.1.i586", "SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.481-93.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.481-93.1.i586", "SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.481-93.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.481-93.1.i586", "SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.481-93.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2015-3128", "url": "https://www.suse.com/security/cve/CVE-2015-3128" }, { "category": "external", "summary": "SUSE Bug 937339 for CVE-2015-3128", "url": "https://bugzilla.suse.com/937339" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.481-93.1.i586", "SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.481-93.1.x86_64", "SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.481-93.1.i586", "SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.481-93.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.481-93.1.i586", "SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.481-93.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.481-93.1.i586", "SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.481-93.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2015-07-08T19:43:00Z", "details": "critical" } ], "title": "CVE-2015-3128" }, { "cve": "CVE-2015-3129", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2015-3129" } ], "notes": [ { "category": "general", "text": "Use-after-free vulnerability in Adobe Flash Player before 13.0.0.302 and 14.x through 18.x before 18.0.0.203 on Windows and OS X and before 11.2.202.481 on Linux, Adobe AIR before 18.0.0.180, Adobe AIR SDK before 18.0.0.180, and Adobe AIR SDK \u0026 Compiler before 18.0.0.180 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-3118, CVE-2015-3124, CVE-2015-3127, CVE-2015-3128, CVE-2015-3131, CVE-2015-3132, CVE-2015-3136, CVE-2015-3137, CVE-2015-4428, CVE-2015-4430, and CVE-2015-5117.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.481-93.1.i586", "SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.481-93.1.x86_64", "SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.481-93.1.i586", "SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.481-93.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.481-93.1.i586", "SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.481-93.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.481-93.1.i586", "SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.481-93.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2015-3129", "url": "https://www.suse.com/security/cve/CVE-2015-3129" }, { "category": "external", "summary": "SUSE Bug 937339 for CVE-2015-3129", "url": "https://bugzilla.suse.com/937339" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.481-93.1.i586", "SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.481-93.1.x86_64", "SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.481-93.1.i586", "SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.481-93.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.481-93.1.i586", "SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.481-93.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.481-93.1.i586", "SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.481-93.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2015-07-08T19:43:00Z", "details": "critical" } ], "title": "CVE-2015-3129" }, { "cve": "CVE-2015-3130", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2015-3130" } ], "notes": [ { "category": "general", "text": "Adobe Flash Player before 13.0.0.302 and 14.x through 18.x before 18.0.0.203 on Windows and OS X and before 11.2.202.481 on Linux, Adobe AIR before 18.0.0.180, Adobe AIR SDK before 18.0.0.180, and Adobe AIR SDK \u0026 Compiler before 18.0.0.180 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-3117, CVE-2015-3123, CVE-2015-3133, CVE-2015-3134, and CVE-2015-4431.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.481-93.1.i586", "SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.481-93.1.x86_64", "SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.481-93.1.i586", "SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.481-93.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.481-93.1.i586", "SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.481-93.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.481-93.1.i586", "SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.481-93.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2015-3130", "url": "https://www.suse.com/security/cve/CVE-2015-3130" }, { "category": "external", "summary": "SUSE Bug 937339 for CVE-2015-3130", "url": "https://bugzilla.suse.com/937339" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.481-93.1.i586", "SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.481-93.1.x86_64", "SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.481-93.1.i586", "SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.481-93.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.481-93.1.i586", "SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.481-93.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.481-93.1.i586", "SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.481-93.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2015-07-08T19:43:00Z", "details": "critical" } ], "title": "CVE-2015-3130" }, { "cve": "CVE-2015-3131", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2015-3131" } ], "notes": [ { "category": "general", "text": "Use-after-free vulnerability in Adobe Flash Player before 13.0.0.302 and 14.x through 18.x before 18.0.0.203 on Windows and OS X and before 11.2.202.481 on Linux, Adobe AIR before 18.0.0.180, Adobe AIR SDK before 18.0.0.180, and Adobe AIR SDK \u0026 Compiler before 18.0.0.180 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-3118, CVE-2015-3124, CVE-2015-3127, CVE-2015-3128, CVE-2015-3129, CVE-2015-3132, CVE-2015-3136, CVE-2015-3137, CVE-2015-4428, CVE-2015-4430, and CVE-2015-5117.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.481-93.1.i586", "SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.481-93.1.x86_64", "SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.481-93.1.i586", "SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.481-93.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.481-93.1.i586", "SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.481-93.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.481-93.1.i586", "SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.481-93.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2015-3131", "url": "https://www.suse.com/security/cve/CVE-2015-3131" }, { "category": "external", "summary": "SUSE Bug 937339 for CVE-2015-3131", "url": "https://bugzilla.suse.com/937339" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.481-93.1.i586", "SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.481-93.1.x86_64", "SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.481-93.1.i586", "SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.481-93.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.481-93.1.i586", "SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.481-93.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.481-93.1.i586", "SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.481-93.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2015-07-08T19:43:00Z", "details": "critical" } ], "title": "CVE-2015-3131" }, { "cve": "CVE-2015-3132", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2015-3132" } ], "notes": [ { "category": "general", "text": "Use-after-free vulnerability in Adobe Flash Player before 13.0.0.302 and 14.x through 18.x before 18.0.0.203 on Windows and OS X and before 11.2.202.481 on Linux, Adobe AIR before 18.0.0.180, Adobe AIR SDK before 18.0.0.180, and Adobe AIR SDK \u0026 Compiler before 18.0.0.180 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-3118, CVE-2015-3124, CVE-2015-3127, CVE-2015-3128, CVE-2015-3129, CVE-2015-3131, CVE-2015-3136, CVE-2015-3137, CVE-2015-4428, CVE-2015-4430, and CVE-2015-5117.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.481-93.1.i586", "SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.481-93.1.x86_64", "SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.481-93.1.i586", "SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.481-93.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.481-93.1.i586", "SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.481-93.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.481-93.1.i586", "SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.481-93.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2015-3132", "url": "https://www.suse.com/security/cve/CVE-2015-3132" }, { "category": "external", "summary": "SUSE Bug 937339 for CVE-2015-3132", "url": "https://bugzilla.suse.com/937339" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.481-93.1.i586", "SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.481-93.1.x86_64", "SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.481-93.1.i586", "SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.481-93.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.481-93.1.i586", "SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.481-93.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.481-93.1.i586", "SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.481-93.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2015-07-08T19:43:00Z", "details": "critical" } ], "title": "CVE-2015-3132" }, { "cve": "CVE-2015-3133", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2015-3133" } ], "notes": [ { "category": "general", "text": "Adobe Flash Player before 13.0.0.302 and 14.x through 18.x before 18.0.0.203 on Windows and OS X and before 11.2.202.481 on Linux, Adobe AIR before 18.0.0.180, Adobe AIR SDK before 18.0.0.180, and Adobe AIR SDK \u0026 Compiler before 18.0.0.180 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-3117, CVE-2015-3123, CVE-2015-3130, CVE-2015-3134, and CVE-2015-4431.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.481-93.1.i586", "SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.481-93.1.x86_64", "SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.481-93.1.i586", "SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.481-93.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.481-93.1.i586", "SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.481-93.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.481-93.1.i586", "SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.481-93.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2015-3133", "url": "https://www.suse.com/security/cve/CVE-2015-3133" }, { "category": "external", "summary": "SUSE Bug 937339 for CVE-2015-3133", "url": "https://bugzilla.suse.com/937339" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.481-93.1.i586", "SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.481-93.1.x86_64", "SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.481-93.1.i586", "SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.481-93.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.481-93.1.i586", "SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.481-93.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.481-93.1.i586", "SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.481-93.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2015-07-08T19:43:00Z", "details": "critical" } ], "title": "CVE-2015-3133" }, { "cve": "CVE-2015-3134", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2015-3134" } ], "notes": [ { "category": "general", "text": "Adobe Flash Player before 13.0.0.302 and 14.x through 18.x before 18.0.0.203 on Windows and OS X and before 11.2.202.481 on Linux, Adobe AIR before 18.0.0.180, Adobe AIR SDK before 18.0.0.180, and Adobe AIR SDK \u0026 Compiler before 18.0.0.180 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-3117, CVE-2015-3123, CVE-2015-3130, CVE-2015-3133, and CVE-2015-4431.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.481-93.1.i586", "SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.481-93.1.x86_64", "SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.481-93.1.i586", "SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.481-93.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.481-93.1.i586", "SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.481-93.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.481-93.1.i586", "SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.481-93.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2015-3134", "url": "https://www.suse.com/security/cve/CVE-2015-3134" }, { "category": "external", "summary": "SUSE Bug 937339 for CVE-2015-3134", "url": "https://bugzilla.suse.com/937339" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.481-93.1.i586", "SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.481-93.1.x86_64", "SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.481-93.1.i586", "SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.481-93.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.481-93.1.i586", "SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.481-93.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.481-93.1.i586", "SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.481-93.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2015-07-08T19:43:00Z", "details": "critical" } ], "title": "CVE-2015-3134" }, { "cve": "CVE-2015-3135", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2015-3135" } ], "notes": [ { "category": "general", "text": "Heap-based buffer overflow in Adobe Flash Player before 13.0.0.302 and 14.x through 18.x before 18.0.0.203 on Windows and OS X and before 11.2.202.481 on Linux, Adobe AIR before 18.0.0.180, Adobe AIR SDK before 18.0.0.180, and Adobe AIR SDK \u0026 Compiler before 18.0.0.180 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-4432 and CVE-2015-5118.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.481-93.1.i586", "SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.481-93.1.x86_64", "SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.481-93.1.i586", "SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.481-93.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.481-93.1.i586", "SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.481-93.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.481-93.1.i586", "SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.481-93.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2015-3135", "url": "https://www.suse.com/security/cve/CVE-2015-3135" }, { "category": "external", "summary": "SUSE Bug 937339 for CVE-2015-3135", "url": "https://bugzilla.suse.com/937339" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.481-93.1.i586", "SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.481-93.1.x86_64", "SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.481-93.1.i586", "SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.481-93.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.481-93.1.i586", "SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.481-93.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.481-93.1.i586", "SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.481-93.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2015-07-08T19:43:00Z", "details": "critical" } ], "title": "CVE-2015-3135" }, { "cve": "CVE-2015-3136", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2015-3136" } ], "notes": [ { "category": "general", "text": "Use-after-free vulnerability in Adobe Flash Player before 13.0.0.302 and 14.x through 18.x before 18.0.0.203 on Windows and OS X and before 11.2.202.481 on Linux, Adobe AIR before 18.0.0.180, Adobe AIR SDK before 18.0.0.180, and Adobe AIR SDK \u0026 Compiler before 18.0.0.180 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-3118, CVE-2015-3124, CVE-2015-3127, CVE-2015-3128, CVE-2015-3129, CVE-2015-3131, CVE-2015-3132, CVE-2015-3137, CVE-2015-4428, CVE-2015-4430, and CVE-2015-5117.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.481-93.1.i586", "SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.481-93.1.x86_64", "SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.481-93.1.i586", "SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.481-93.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.481-93.1.i586", "SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.481-93.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.481-93.1.i586", "SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.481-93.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2015-3136", "url": "https://www.suse.com/security/cve/CVE-2015-3136" }, { "category": "external", "summary": "SUSE Bug 937339 for CVE-2015-3136", "url": "https://bugzilla.suse.com/937339" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.481-93.1.i586", "SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.481-93.1.x86_64", "SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.481-93.1.i586", "SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.481-93.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.481-93.1.i586", "SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.481-93.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.481-93.1.i586", "SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.481-93.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2015-07-08T19:43:00Z", "details": "critical" } ], "title": "CVE-2015-3136" }, { "cve": "CVE-2015-3137", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2015-3137" } ], "notes": [ { "category": "general", "text": "Use-after-free vulnerability in Adobe Flash Player before 13.0.0.302 and 14.x through 18.x before 18.0.0.203 on Windows and OS X and before 11.2.202.481 on Linux, Adobe AIR before 18.0.0.180, Adobe AIR SDK before 18.0.0.180, and Adobe AIR SDK \u0026 Compiler before 18.0.0.180 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-3118, CVE-2015-3124, CVE-2015-3127, CVE-2015-3128, CVE-2015-3129, CVE-2015-3131, CVE-2015-3132, CVE-2015-3136, CVE-2015-4428, CVE-2015-4430, and CVE-2015-5117.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.481-93.1.i586", "SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.481-93.1.x86_64", "SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.481-93.1.i586", "SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.481-93.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.481-93.1.i586", "SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.481-93.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.481-93.1.i586", "SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.481-93.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2015-3137", "url": "https://www.suse.com/security/cve/CVE-2015-3137" }, { "category": "external", "summary": "SUSE Bug 937339 for CVE-2015-3137", "url": "https://bugzilla.suse.com/937339" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.481-93.1.i586", "SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.481-93.1.x86_64", "SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.481-93.1.i586", "SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.481-93.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.481-93.1.i586", "SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.481-93.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.481-93.1.i586", "SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.481-93.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2015-07-08T19:43:00Z", "details": "critical" } ], "title": "CVE-2015-3137" }, { "cve": "CVE-2015-4428", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2015-4428" } ], "notes": [ { "category": "general", "text": "Use-after-free vulnerability in Adobe Flash Player before 13.0.0.302 and 14.x through 18.x before 18.0.0.203 on Windows and OS X and before 11.2.202.481 on Linux, Adobe AIR before 18.0.0.180, Adobe AIR SDK before 18.0.0.180, and Adobe AIR SDK \u0026 Compiler before 18.0.0.180 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-3118, CVE-2015-3124, CVE-2015-3127, CVE-2015-3128, CVE-2015-3129, CVE-2015-3131, CVE-2015-3132, CVE-2015-3136, CVE-2015-3137, CVE-2015-4430, and CVE-2015-5117.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.481-93.1.i586", "SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.481-93.1.x86_64", "SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.481-93.1.i586", "SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.481-93.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.481-93.1.i586", "SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.481-93.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.481-93.1.i586", "SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.481-93.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2015-4428", "url": "https://www.suse.com/security/cve/CVE-2015-4428" }, { "category": "external", "summary": "SUSE Bug 937339 for CVE-2015-4428", "url": "https://bugzilla.suse.com/937339" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.481-93.1.i586", "SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.481-93.1.x86_64", "SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.481-93.1.i586", "SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.481-93.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.481-93.1.i586", "SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.481-93.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.481-93.1.i586", "SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.481-93.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2015-07-08T19:43:00Z", "details": "critical" } ], "title": "CVE-2015-4428" }, { "cve": "CVE-2015-4429", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2015-4429" } ], "notes": [ { "category": "general", "text": "Adobe Flash Player before 13.0.0.302 and 14.x through 18.x before 18.0.0.203 on Windows and OS X and before 11.2.202.481 on Linux, Adobe AIR before 18.0.0.180, Adobe AIR SDK before 18.0.0.180, and Adobe AIR SDK \u0026 Compiler before 18.0.0.180 allow attackers to cause a denial of service (NULL pointer dereference) or possibly have unspecified other impact via unknown vectors, a different vulnerability than CVE-2015-3126.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.481-93.1.i586", "SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.481-93.1.x86_64", "SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.481-93.1.i586", "SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.481-93.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.481-93.1.i586", "SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.481-93.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.481-93.1.i586", "SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.481-93.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2015-4429", "url": "https://www.suse.com/security/cve/CVE-2015-4429" }, { "category": "external", "summary": "SUSE Bug 937339 for CVE-2015-4429", "url": "https://bugzilla.suse.com/937339" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.481-93.1.i586", "SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.481-93.1.x86_64", "SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.481-93.1.i586", "SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.481-93.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.481-93.1.i586", "SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.481-93.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.481-93.1.i586", "SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.481-93.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2015-07-08T19:43:00Z", "details": "critical" } ], "title": "CVE-2015-4429" }, { "cve": "CVE-2015-4430", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2015-4430" } ], "notes": [ { "category": "general", "text": "Use-after-free vulnerability in Adobe Flash Player before 13.0.0.302 and 14.x through 18.x before 18.0.0.203 on Windows and OS X and before 11.2.202.481 on Linux, Adobe AIR before 18.0.0.180, Adobe AIR SDK before 18.0.0.180, and Adobe AIR SDK \u0026 Compiler before 18.0.0.180 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-3118, CVE-2015-3124, CVE-2015-3127, CVE-2015-3128, CVE-2015-3129, CVE-2015-3131, CVE-2015-3132, CVE-2015-3136, CVE-2015-3137, CVE-2015-4428, and CVE-2015-5117.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.481-93.1.i586", "SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.481-93.1.x86_64", "SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.481-93.1.i586", "SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.481-93.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.481-93.1.i586", "SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.481-93.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.481-93.1.i586", "SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.481-93.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2015-4430", "url": "https://www.suse.com/security/cve/CVE-2015-4430" }, { "category": "external", "summary": "SUSE Bug 937339 for CVE-2015-4430", "url": "https://bugzilla.suse.com/937339" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.481-93.1.i586", "SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.481-93.1.x86_64", "SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.481-93.1.i586", "SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.481-93.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.481-93.1.i586", "SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.481-93.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.481-93.1.i586", "SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.481-93.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2015-07-08T19:43:00Z", "details": "critical" } ], "title": "CVE-2015-4430" }, { "cve": "CVE-2015-4431", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2015-4431" } ], "notes": [ { "category": "general", "text": "Adobe Flash Player before 13.0.0.302 and 14.x through 18.x before 18.0.0.203 on Windows and OS X and before 11.2.202.481 on Linux, Adobe AIR before 18.0.0.180, Adobe AIR SDK before 18.0.0.180, and Adobe AIR SDK \u0026 Compiler before 18.0.0.180 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-3117, CVE-2015-3123, CVE-2015-3130, CVE-2015-3133, and CVE-2015-3134.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.481-93.1.i586", "SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.481-93.1.x86_64", "SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.481-93.1.i586", "SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.481-93.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.481-93.1.i586", "SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.481-93.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.481-93.1.i586", "SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.481-93.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2015-4431", "url": "https://www.suse.com/security/cve/CVE-2015-4431" }, { "category": "external", "summary": "SUSE Bug 937339 for CVE-2015-4431", "url": "https://bugzilla.suse.com/937339" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.481-93.1.i586", "SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.481-93.1.x86_64", "SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.481-93.1.i586", "SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.481-93.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.481-93.1.i586", "SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.481-93.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.481-93.1.i586", "SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.481-93.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2015-07-08T19:43:00Z", "details": "critical" } ], "title": "CVE-2015-4431" }, { "cve": "CVE-2015-4432", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2015-4432" } ], "notes": [ { "category": "general", "text": "Heap-based buffer overflow in Adobe Flash Player before 13.0.0.302 and 14.x through 18.x before 18.0.0.203 on Windows and OS X and before 11.2.202.481 on Linux, Adobe AIR before 18.0.0.180, Adobe AIR SDK before 18.0.0.180, and Adobe AIR SDK \u0026 Compiler before 18.0.0.180 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-3135 and CVE-2015-5118.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.481-93.1.i586", "SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.481-93.1.x86_64", "SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.481-93.1.i586", "SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.481-93.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.481-93.1.i586", "SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.481-93.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.481-93.1.i586", "SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.481-93.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2015-4432", "url": "https://www.suse.com/security/cve/CVE-2015-4432" }, { "category": "external", "summary": "SUSE Bug 937339 for CVE-2015-4432", "url": "https://bugzilla.suse.com/937339" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.481-93.1.i586", "SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.481-93.1.x86_64", "SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.481-93.1.i586", "SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.481-93.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.481-93.1.i586", "SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.481-93.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.481-93.1.i586", "SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.481-93.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2015-07-08T19:43:00Z", "details": "critical" } ], "title": "CVE-2015-4432" }, { "cve": "CVE-2015-4433", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2015-4433" } ], "notes": [ { "category": "general", "text": "Adobe Flash Player before 13.0.0.302 and 14.x through 18.x before 18.0.0.203 on Windows and OS X and before 11.2.202.481 on Linux, Adobe AIR before 18.0.0.180, Adobe AIR SDK before 18.0.0.180, and Adobe AIR SDK \u0026 Compiler before 18.0.0.180 allow attackers to execute arbitrary code by leveraging an unspecified \"type confusion,\" a different vulnerability than CVE-2015-3119, CVE-2015-3120, CVE-2015-3121, and CVE-2015-3122.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.481-93.1.i586", "SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.481-93.1.x86_64", "SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.481-93.1.i586", "SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.481-93.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.481-93.1.i586", "SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.481-93.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.481-93.1.i586", "SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.481-93.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2015-4433", "url": "https://www.suse.com/security/cve/CVE-2015-4433" }, { "category": "external", "summary": "SUSE Bug 937339 for CVE-2015-4433", "url": "https://bugzilla.suse.com/937339" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.481-93.1.i586", "SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.481-93.1.x86_64", "SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.481-93.1.i586", "SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.481-93.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.481-93.1.i586", "SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.481-93.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.481-93.1.i586", "SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.481-93.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2015-07-08T19:43:00Z", "details": "critical" } ], "title": "CVE-2015-4433" }, { "cve": "CVE-2015-5116", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2015-5116" } ], "notes": [ { "category": "general", "text": "Adobe Flash Player before 13.0.0.302 and 14.x through 18.x before 18.0.0.203 on Windows and OS X and before 11.2.202.481 on Linux, Adobe AIR before 18.0.0.180, Adobe AIR SDK before 18.0.0.180, and Adobe AIR SDK \u0026 Compiler before 18.0.0.180 allow remote attackers to bypass the Same Origin Policy via unspecified vectors, a different vulnerability than CVE-2014-0578, CVE-2015-3115, CVE-2015-3116, and CVE-2015-3125.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.481-93.1.i586", "SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.481-93.1.x86_64", "SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.481-93.1.i586", "SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.481-93.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.481-93.1.i586", "SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.481-93.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.481-93.1.i586", "SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.481-93.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2015-5116", "url": "https://www.suse.com/security/cve/CVE-2015-5116" }, { "category": "external", "summary": "SUSE Bug 937339 for CVE-2015-5116", "url": "https://bugzilla.suse.com/937339" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.481-93.1.i586", "SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.481-93.1.x86_64", "SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.481-93.1.i586", "SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.481-93.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.481-93.1.i586", "SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.481-93.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.481-93.1.i586", "SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.481-93.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2015-07-08T19:43:00Z", "details": "critical" } ], "title": "CVE-2015-5116" }, { "cve": "CVE-2015-5117", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2015-5117" } ], "notes": [ { "category": "general", "text": "Use-after-free vulnerability in Adobe Flash Player before 13.0.0.302 and 14.x through 18.x before 18.0.0.203 on Windows and OS X and before 11.2.202.481 on Linux, Adobe AIR before 18.0.0.180, Adobe AIR SDK before 18.0.0.180, and Adobe AIR SDK \u0026 Compiler before 18.0.0.180 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-3118, CVE-2015-3124, CVE-2015-3127, CVE-2015-3128, CVE-2015-3129, CVE-2015-3131, CVE-2015-3132, CVE-2015-3136, CVE-2015-3137, CVE-2015-4428, and CVE-2015-4430.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.481-93.1.i586", "SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.481-93.1.x86_64", "SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.481-93.1.i586", "SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.481-93.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.481-93.1.i586", "SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.481-93.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.481-93.1.i586", "SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.481-93.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2015-5117", "url": "https://www.suse.com/security/cve/CVE-2015-5117" }, { "category": "external", "summary": "SUSE Bug 937339 for CVE-2015-5117", "url": "https://bugzilla.suse.com/937339" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.481-93.1.i586", "SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.481-93.1.x86_64", "SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.481-93.1.i586", "SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.481-93.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.481-93.1.i586", "SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.481-93.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.481-93.1.i586", "SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.481-93.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2015-07-08T19:43:00Z", "details": "critical" } ], "title": "CVE-2015-5117" }, { "cve": "CVE-2015-5118", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2015-5118" } ], "notes": [ { "category": "general", "text": "Heap-based buffer overflow in Adobe Flash Player before 13.0.0.302 and 14.x through 18.x before 18.0.0.203 on Windows and OS X and before 11.2.202.481 on Linux, Adobe AIR before 18.0.0.180, Adobe AIR SDK before 18.0.0.180, and Adobe AIR SDK \u0026 Compiler before 18.0.0.180 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-3135 and CVE-2015-4432.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.481-93.1.i586", "SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.481-93.1.x86_64", "SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.481-93.1.i586", "SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.481-93.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.481-93.1.i586", "SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.481-93.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.481-93.1.i586", "SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.481-93.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2015-5118", "url": "https://www.suse.com/security/cve/CVE-2015-5118" }, { "category": "external", "summary": "SUSE Bug 937339 for CVE-2015-5118", "url": "https://bugzilla.suse.com/937339" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.481-93.1.i586", "SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.481-93.1.x86_64", "SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.481-93.1.i586", "SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.481-93.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.481-93.1.i586", "SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.481-93.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.481-93.1.i586", "SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.481-93.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2015-07-08T19:43:00Z", "details": "critical" } ], "title": "CVE-2015-5118" }, { "cve": "CVE-2015-5119", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2015-5119" } ], "notes": [ { "category": "general", "text": "Use-after-free vulnerability in the ByteArray class in the ActionScript 3 (AS3) implementation in Adobe Flash Player 13.x through 13.0.0.296 and 14.x through 18.0.0.194 on Windows and OS X and 11.x through 11.2.202.468 on Linux allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted Flash content that overrides a valueOf function, as exploited in the wild in July 2015.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.481-93.1.i586", "SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.481-93.1.x86_64", "SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.481-93.1.i586", "SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.481-93.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.481-93.1.i586", "SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.481-93.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.481-93.1.i586", "SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.481-93.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2015-5119", "url": "https://www.suse.com/security/cve/CVE-2015-5119" }, { "category": "external", "summary": "SUSE Bug 937339 for CVE-2015-5119", "url": "https://bugzilla.suse.com/937339" }, { "category": "external", "summary": "SUSE Bug 937752 for CVE-2015-5119", "url": "https://bugzilla.suse.com/937752" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.481-93.1.i586", "SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.481-93.1.x86_64", "SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.481-93.1.i586", "SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.481-93.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.481-93.1.i586", "SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.481-93.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.481-93.1.i586", "SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.481-93.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 9.8, "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.481-93.1.i586", "SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.481-93.1.x86_64", "SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.481-93.1.i586", "SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.481-93.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.481-93.1.i586", "SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.481-93.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.481-93.1.i586", "SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.481-93.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2015-07-08T19:43:00Z", "details": "critical" } ], "title": "CVE-2015-5119" } ] }
Loading…
Loading…
Sightings
Author | Source | Type | Date |
---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
- Confirmed: The vulnerability is confirmed from an analyst perspective.
- Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
- Patched: This vulnerability was successfully patched by the user reporting the sighting.
- Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
- Not confirmed: The user expresses doubt about the veracity of the vulnerability.
- Not patched: This vulnerability was not successfully patched by the user reporting the sighting.
Loading…
Loading…