Summary: | <www-plugins/adobe-flash-11.1.102.63: Multiple vulnerabilities (CVE-2012-0768, CVE-2012-0769) | ||
---|---|---|---|
Product: | Gentoo Security | Reporter: | Tim Sammut (RETIRED) <underling> |
Component: | Vulnerabilities | Assignee: | Gentoo Security <security> |
Status: | RESOLVED FIXED | ||
Severity: | normal | CC: | desktop-misc, king.infet, lack |
Priority: | Normal | ||
Version: | unspecified | ||
Hardware: | All | ||
OS: | Linux | ||
URL: | https://www.adobe.com/support/security/bulletins/apsb12-05.html | ||
Whiteboard: | B2 [glsa] | ||
Package list: | Runtime testing required: | --- |
Description
Tim Sammut (RETIRED)
![]() 11.1.102.63 added to CVS. Great, thank you. Arches, please test and mark stable: =www-plugins/adobe-flash-11.1.102.63 Target keywords : "amd64 x86" amd64 ok x86: ok amd64 stable x86 stable (In reply to comment #6) > x86 stable wrong, this is only said *after* you have committed the change in Portage which isn't the case here x86 done Thanks for doing this so quickly, everyone. Added to pending GLSA request. CVE-2012-0769 (http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-0769): Adobe Flash Player before 10.3.183.16 and 11.x before 11.1.102.63 on Windows, Mac OS X, Linux, and Solaris; before 11.1.111.7 on Android 2.x and 3.x; and before 11.1.115.7 on Android 4.x does not properly handle integers, which allows attackers to obtain sensitive information via unspecified vectors. CVE-2012-0768 (http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-0768): The Matrix3D component in Adobe Flash Player before 10.3.183.16 and 11.x before 11.1.102.63 on Windows, Mac OS X, Linux, and Solaris; before 11.1.111.7 on Android 2.x and 3.x; and before 11.1.115.7 on Android 4.x allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors. This issue was resolved and addressed in GLSA 201204-07 at http://security.gentoo.org/glsa/glsa-201204-07.xml by GLSA coordinator Sean Amoss (ackle). |