Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 615292 - <www-plugins/adobe-flash-25.0.0.148: Multiple vulnerabilities
Summary: <www-plugins/adobe-flash-25.0.0.148: Multiple vulnerabilities
Status: RESOLVED DUPLICATE of bug 615244
Alias: None
Product: Gentoo Security
Classification: Unclassified
Component: Vulnerabilities (show other bugs)
Hardware: All Linux
: Normal normal (vote)
Assignee: Gentoo Security
URL: https://helpx.adobe.com/security/prod...
Whiteboard: A1 [glsa?]
Keywords:
Depends on:
Blocks:
 
Reported: 2017-04-11 17:07 UTC by Kristian Fiskerstrand (RETIRED)
Modified: 2017-04-12 10:17 UTC (History)
3 users (show)

See Also:
Package list:
Runtime testing required: ---

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Kristian Fiskerstrand (RETIRED) gentoo-dev 2017-04-11 17:07:30 UTC 
From ${URL}:

Vulnerability Details

    These updates resolve use-after-free vulnerabilities that could lead to code execution (CVE-2017-3058, CVE-2017-3059, CVE-2017-3062, CVE-2017-3063). 
    These updates resolve memory corruption vulnerabilities that could lead to code execution (CVE-2017-3060, CVE-2017-3061, CVE-2017-3064).

Acknowledgments

Adobe would like to thank the following individuals and organizations for reporting the relevant issues and for working with Adobe to help protect our customers:

    Mateusz Jurczyk and Natalie Silvanovich of Google Project Zero (CVE-2017-3061, CVE-2017-3064)
    Anonymously reported via Trend Micro's Zero Day Initiative (CVE-2017-3059)
    Keen Team working with Trend Micro's Zero Day Initiative (CVE-2017-3063)
    b5e4b07ed250ac8014390628445b0d26 working with Trend Micro's Zero Day Initiative (CVE-2017-3060)
    bee13oy of CloverSec Labs working with Trend Micro's Zero Day Initiative (CVE-2017-3058)
    Yuki Chen of 360 Vulcan Team working with Trend Micro's Zero Day Initiative (CVE-2017-3062)

##

Updated version already in tree and stable with cleanup done
Comment 1 Kristian Fiskerstrand (RETIRED) gentoo-dev 2017-04-11 18:24:44 UTC 
*** Bug 615244 has been marked as a duplicate of this bug. ***
Comment 2 Jeroen Roovers (RETIRED) gentoo-dev 2017-04-12 10:16:09 UTC 

*** This bug has been marked as a duplicate of bug 615244 ***