Action not permitted
Modal body text goes here.
Modal Title
Modal Body
cve-2015-3107
Vulnerability from cvelistv5
{ containers: { adp: [ { providerMetadata: { dateUpdated: "2024-08-06T05:39:31.131Z", orgId: "af854a3a-2127-422b-91ae-364da2661108", shortName: "CVE", }, references: [ { tags: [ "x_refsource_CONFIRM", "x_transferred", ], url: "https://helpx.adobe.com/security/products/flash-player/apsb15-11.html", }, { name: "37850", tags: [ "exploit", "x_refsource_EXPLOIT-DB", "x_transferred", ], url: "https://www.exploit-db.com/exploits/37850/", }, { name: "75087", tags: [ "vdb-entry", "x_refsource_BID", "x_transferred", ], url: "http://www.securityfocus.com/bid/75087", }, { name: "1032519", tags: [ "vdb-entry", "x_refsource_SECTRACK", "x_transferred", ], url: "http://www.securitytracker.com/id/1032519", }, { name: "GLSA-201508-01", tags: [ "vendor-advisory", "x_refsource_GENTOO", "x_transferred", ], url: "https://security.gentoo.org/glsa/201508-01", }, { name: "openSUSE-SU-2015:1047", tags: [ "vendor-advisory", "x_refsource_SUSE", "x_transferred", ], url: "http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00009.html", }, { name: "GLSA-201506-01", tags: [ "vendor-advisory", "x_refsource_GENTOO", "x_transferred", ], url: "https://security.gentoo.org/glsa/201506-01", }, { name: "SUSE-SU-2015:1043", tags: [ "vendor-advisory", "x_refsource_SUSE", "x_transferred", ], url: "http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00005.html", }, { name: "openSUSE-SU-2015:1061", tags: [ "vendor-advisory", "x_refsource_SUSE", "x_transferred", ], url: "http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00011.html", }, { name: "RHSA-2015:1086", tags: [ "vendor-advisory", "x_refsource_REDHAT", "x_transferred", ], url: "http://rhn.redhat.com/errata/RHSA-2015-1086.html", }, { name: "openSUSE-SU-2015:1781", tags: [ "vendor-advisory", "x_refsource_SUSE", "x_transferred", ], url: "http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00018.html", }, ], title: "CVE Program Container", }, ], cna: { affected: [ { product: "n/a", vendor: "n/a", versions: [ { status: "affected", version: "n/a", }, ], }, ], datePublic: "2015-06-09T00:00:00", descriptions: [ { lang: "en", value: "Use-after-free vulnerability in Adobe Flash Player before 13.0.0.292 and 14.x through 18.x before 18.0.0.160 on Windows and OS X and before 11.2.202.466 on Linux, Adobe AIR before 18.0.0.144 on Windows and before 18.0.0.143 on OS X and Android, Adobe AIR SDK before 18.0.0.144 on Windows and before 18.0.0.143 on OS X, and Adobe AIR SDK & Compiler before 18.0.0.144 on Windows and before 18.0.0.143 on OS X allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-3103 and CVE-2015-3106.", }, ], problemTypes: [ { descriptions: [ { description: "n/a", lang: "en", type: "text", }, ], }, ], providerMetadata: { dateUpdated: "2017-09-16T09:57:01", orgId: "078d4453-3bcd-4900-85e6-15281da43538", shortName: "adobe", }, references: [ { tags: [ "x_refsource_CONFIRM", ], url: "https://helpx.adobe.com/security/products/flash-player/apsb15-11.html", }, { name: "37850", tags: [ "exploit", "x_refsource_EXPLOIT-DB", ], url: "https://www.exploit-db.com/exploits/37850/", }, { name: "75087", tags: [ "vdb-entry", "x_refsource_BID", ], url: "http://www.securityfocus.com/bid/75087", }, { name: "1032519", tags: [ "vdb-entry", "x_refsource_SECTRACK", ], url: "http://www.securitytracker.com/id/1032519", }, { name: "GLSA-201508-01", tags: [ "vendor-advisory", "x_refsource_GENTOO", ], url: "https://security.gentoo.org/glsa/201508-01", }, { name: "openSUSE-SU-2015:1047", tags: [ "vendor-advisory", "x_refsource_SUSE", ], url: "http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00009.html", }, { name: "GLSA-201506-01", tags: [ "vendor-advisory", "x_refsource_GENTOO", ], url: "https://security.gentoo.org/glsa/201506-01", }, { name: "SUSE-SU-2015:1043", tags: [ "vendor-advisory", "x_refsource_SUSE", ], url: "http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00005.html", }, { name: "openSUSE-SU-2015:1061", tags: [ "vendor-advisory", "x_refsource_SUSE", ], url: "http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00011.html", }, { name: "RHSA-2015:1086", tags: [ "vendor-advisory", "x_refsource_REDHAT", ], url: "http://rhn.redhat.com/errata/RHSA-2015-1086.html", }, { name: "openSUSE-SU-2015:1781", tags: [ "vendor-advisory", "x_refsource_SUSE", ], url: "http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00018.html", }, ], x_legacyV4Record: { CVE_data_meta: { ASSIGNER: "psirt@adobe.com", ID: "CVE-2015-3107", STATE: "PUBLIC", }, affects: { vendor: { vendor_data: [ { product: { product_data: [ { product_name: "n/a", version: { version_data: [ { version_value: "n/a", }, ], }, }, ], }, vendor_name: "n/a", }, ], }, }, data_format: "MITRE", data_type: "CVE", data_version: "4.0", description: { description_data: [ { lang: "eng", value: "Use-after-free vulnerability in Adobe Flash Player before 13.0.0.292 and 14.x through 18.x before 18.0.0.160 on Windows and OS X and before 11.2.202.466 on Linux, Adobe AIR before 18.0.0.144 on Windows and before 18.0.0.143 on OS X and Android, Adobe AIR SDK before 18.0.0.144 on Windows and before 18.0.0.143 on OS X, and Adobe AIR SDK & Compiler before 18.0.0.144 on Windows and before 18.0.0.143 on OS X allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-3103 and CVE-2015-3106.", }, ], }, problemtype: { problemtype_data: [ { description: [ { lang: "eng", value: "n/a", }, ], }, ], }, references: { reference_data: [ { name: "https://helpx.adobe.com/security/products/flash-player/apsb15-11.html", refsource: "CONFIRM", url: "https://helpx.adobe.com/security/products/flash-player/apsb15-11.html", }, { name: "37850", refsource: "EXPLOIT-DB", url: "https://www.exploit-db.com/exploits/37850/", }, { name: "75087", refsource: "BID", url: "http://www.securityfocus.com/bid/75087", }, { name: "1032519", refsource: "SECTRACK", url: "http://www.securitytracker.com/id/1032519", }, { name: "GLSA-201508-01", refsource: "GENTOO", url: "https://security.gentoo.org/glsa/201508-01", }, { name: "openSUSE-SU-2015:1047", refsource: "SUSE", url: "http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00009.html", }, { name: "GLSA-201506-01", refsource: "GENTOO", url: "https://security.gentoo.org/glsa/201506-01", }, { name: "SUSE-SU-2015:1043", refsource: "SUSE", url: "http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00005.html", }, { name: "openSUSE-SU-2015:1061", refsource: "SUSE", url: "http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00011.html", }, { name: "RHSA-2015:1086", refsource: "REDHAT", url: "http://rhn.redhat.com/errata/RHSA-2015-1086.html", }, { name: "openSUSE-SU-2015:1781", refsource: "SUSE", url: "http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00018.html", }, ], }, }, }, }, cveMetadata: { assignerOrgId: "078d4453-3bcd-4900-85e6-15281da43538", assignerShortName: "adobe", cveId: "CVE-2015-3107", datePublished: "2015-06-10T01:00:00", dateReserved: "2015-04-09T00:00:00", dateUpdated: "2024-08-06T05:39:31.131Z", state: "PUBLISHED", }, dataType: "CVE_RECORD", dataVersion: "5.1", "vulnerability-lookup:meta": { nvd: "{\"cve\":{\"id\":\"CVE-2015-3107\",\"sourceIdentifier\":\"psirt@adobe.com\",\"published\":\"2015-06-10T01:59:48.630\",\"lastModified\":\"2025-04-12T10:46:40.837\",\"vulnStatus\":\"Deferred\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"Use-after-free vulnerability in Adobe Flash Player before 13.0.0.292 and 14.x through 18.x before 18.0.0.160 on Windows and OS X and before 11.2.202.466 on Linux, Adobe AIR before 18.0.0.144 on Windows and before 18.0.0.143 on OS X and Android, Adobe AIR SDK before 18.0.0.144 on Windows and before 18.0.0.143 on OS X, and Adobe AIR SDK & Compiler before 18.0.0.144 on Windows and before 18.0.0.143 on OS X allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-3103 and CVE-2015-3106.\"},{\"lang\":\"es\",\"value\":\"Vulnerabilidad de uso después de liberación en Adobe Flash Player anterior a 13.0.0.292 y 14.x hasta 18.x anterior a 18.0.0.160 en Windows y OS X y anterior a 11.2.202.466 en Linux, Adobe AIR anterior a 18.0.0.144 en Windows y anterior a 18.0.0.143 en OS X y Android, Adobe AIR SDK anterior a 18.0.0.144 en Windows y anterior a 18.0.0.143 en OS X, y Adobe AIR SDK & Compiler anterior a 18.0.0.144 en Windows y anterior a 18.0.0.143 en OS X permite a atacantes ejecutar código arbitrario a través de vectores no especificados, una vulnerabilidad diferente a CVE-2015-3103 y CVE-2015-3106.\"}],\"metrics\":{\"cvssMetricV2\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"2.0\",\"vectorString\":\"AV:N/AC:L/Au:N/C:C/I:C/A:C\",\"baseScore\":10.0,\"accessVector\":\"NETWORK\",\"accessComplexity\":\"LOW\",\"authentication\":\"NONE\",\"confidentialityImpact\":\"COMPLETE\",\"integrityImpact\":\"COMPLETE\",\"availabilityImpact\":\"COMPLETE\"},\"baseSeverity\":\"HIGH\",\"exploitabilityScore\":10.0,\"impactScore\":10.0,\"acInsufInfo\":true,\"obtainAllPrivilege\":false,\"obtainUserPrivilege\":false,\"obtainOtherPrivilege\":false,\"userInteractionRequired\":false}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-416\"},{\"lang\":\"en\",\"value\":\"NVD-CWE-Other\"}]}],\"configurations\":[{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:air:*:*:*:*:*:*:*:*\",\"versionEndIncluding\":\"17.0.0.144\",\"matchCriteriaId\":\"5EA9C9E9-32C6-40F1-920D-970ABA6A94FB\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:google:android:*:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"8255F035-04C8-4158-B301-82101711939C\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:opensuse:evergreen:11.4:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"CCE4D64E-8C4B-4F21-A9B0-90637C85C1D0\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:flash_player:*:*:*:*:*:*:*:*\",\"versionEndIncluding\":\"13.0.0.289\",\"matchCriteriaId\":\"E2E515D4-87A7-4CB5-8C91-0A95BE8F283B\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:flash_player:14.0.0.125:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"D5D7202D-56DF-400B-9F09-E7D9938222D3\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:flash_player:14.0.0.145:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"4D4F0D21-A64B-46C1-9591-96529661DF0B\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:flash_player:14.0.0.176:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"86961019-3B81-458E-949F-A2F006EA55FE\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:flash_player:14.0.0.179:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"25895BE9-71FD-4DE7-90FC-0199470A8738\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:flash_player:15.0.0.152:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"4D55A950-7D48-413C-AD43-6AC64FBE790C\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:flash_player:15.0.0.167:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"F1A22B74-453D-4A8A-B79A-2B3143A0D995\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:flash_player:15.0.0.189:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"3FE4B077-67D1-4B25-976E-715FB6B2A1D1\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:flash_player:15.0.0.223:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"BFC91B68-6B35-47BD-BC02-3F836E772CF3\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:flash_player:15.0.0.239:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"A3BE6004-C30A-46E2-9F25-785E12BBF640\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:flash_player:15.0.0.246:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"CFE8E51F-7A32-41A4-B03A-73E52EB64C04\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:flash_player:16.0.0.235:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"3E13E927-A77C-4681-AFDE-A5A14093234D\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:flash_player:16.0.0.257:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"27629FF0-5EB9-476F-B5B3-115F663AB65E\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:flash_player:16.0.0.287:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"C0AB583F-3EBD-47B6-975E-7754CC32CCA7\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:flash_player:16.0.0.296:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"B58DE1A9-0510-4B65-AB18-75F9263A7818\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:flash_player:17.0.0.134:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"1BC4FAD0-4A54-4EDF-BE39-28138B34E719\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:flash_player:17.0.0.169:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"BE1FBC20-3DE6-4426-9E97-42AFCEF8CEE4\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:flash_player:17.0.0.188:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"40EF2221-DE87-4D8F-B92D-8FD21EEBEABA\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:o:apple:mac_os_x:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"4781BF1E-8A4E-4AFF-9540-23D523EE30DD\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"A2572D17-1DE6-457B-99CC-64AFD54487EA\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:air:*:*:*:*:*:*:*:*\",\"versionEndIncluding\":\"17.0.0.172\",\"matchCriteriaId\":\"A4D3CA52-FE42-4B46-92FF-E8B027F586BF\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:air_sdk:*:*:*:*:*:*:*:*\",\"versionEndIncluding\":\"17.0.0.172\",\"matchCriteriaId\":\"7F5DDA65-B2BF-4299-9A1E-C61BB08A70FB\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:air_sdk_\\\\&_compiler:*:*:*:*:*:*:*:*\",\"versionEndIncluding\":\"17.0.0.172\",\"matchCriteriaId\":\"2E9D89B2-3A2E-406F-8DD4-19078091E7F5\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:o:apple:mac_os_x:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"4781BF1E-8A4E-4AFF-9540-23D523EE30DD\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"A2572D17-1DE6-457B-99CC-64AFD54487EA\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:flash_player:*:*:*:*:*:*:*:*\",\"versionEndIncluding\":\"11.2.202.460\",\"matchCriteriaId\":\"47355444-CF3A-4150-9757-46B5A431865F\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"703AF700-7A70-47E2-BC3A-7FD03B3CA9C1\"}]}]}],\"references\":[{\"url\":\"http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00005.html\",\"source\":\"psirt@adobe.com\"},{\"url\":\"http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00009.html\",\"source\":\"psirt@adobe.com\"},{\"url\":\"http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00011.html\",\"source\":\"psirt@adobe.com\"},{\"url\":\"http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00018.html\",\"source\":\"psirt@adobe.com\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://rhn.redhat.com/errata/RHSA-2015-1086.html\",\"source\":\"psirt@adobe.com\"},{\"url\":\"http://www.securityfocus.com/bid/75087\",\"source\":\"psirt@adobe.com\",\"tags\":[\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"http://www.securitytracker.com/id/1032519\",\"source\":\"psirt@adobe.com\"},{\"url\":\"https://helpx.adobe.com/security/products/flash-player/apsb15-11.html\",\"source\":\"psirt@adobe.com\",\"tags\":[\"Patch\",\"Vendor Advisory\"]},{\"url\":\"https://security.gentoo.org/glsa/201506-01\",\"source\":\"psirt@adobe.com\"},{\"url\":\"https://security.gentoo.org/glsa/201508-01\",\"source\":\"psirt@adobe.com\"},{\"url\":\"https://www.exploit-db.com/exploits/37850/\",\"source\":\"psirt@adobe.com\"},{\"url\":\"http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00005.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00009.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00011.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00018.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://rhn.redhat.com/errata/RHSA-2015-1086.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.securityfocus.com/bid/75087\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"http://www.securitytracker.com/id/1032519\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://helpx.adobe.com/security/products/flash-player/apsb15-11.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\",\"Vendor Advisory\"]},{\"url\":\"https://security.gentoo.org/glsa/201506-01\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://security.gentoo.org/glsa/201508-01\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://www.exploit-db.com/exploits/37850/\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"}]}}", }, }
ghsa-qxgg-wx3x-5qx8
Vulnerability from github
Use-after-free vulnerability in Adobe Flash Player before 13.0.0.292 and 14.x through 18.x before 18.0.0.160 on Windows and OS X and before 11.2.202.466 on Linux, Adobe AIR before 18.0.0.144 on Windows and before 18.0.0.143 on OS X and Android, Adobe AIR SDK before 18.0.0.144 on Windows and before 18.0.0.143 on OS X, and Adobe AIR SDK & Compiler before 18.0.0.144 on Windows and before 18.0.0.143 on OS X allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-3103 and CVE-2015-3106.
{ affected: [], aliases: [ "CVE-2015-3107", ], database_specific: { cwe_ids: [ "CWE-416", ], github_reviewed: false, github_reviewed_at: null, nvd_published_at: "2015-06-10T01:59:00Z", severity: "HIGH", }, details: "Use-after-free vulnerability in Adobe Flash Player before 13.0.0.292 and 14.x through 18.x before 18.0.0.160 on Windows and OS X and before 11.2.202.466 on Linux, Adobe AIR before 18.0.0.144 on Windows and before 18.0.0.143 on OS X and Android, Adobe AIR SDK before 18.0.0.144 on Windows and before 18.0.0.143 on OS X, and Adobe AIR SDK & Compiler before 18.0.0.144 on Windows and before 18.0.0.143 on OS X allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-3103 and CVE-2015-3106.", id: "GHSA-qxgg-wx3x-5qx8", modified: "2025-04-12T12:48:42Z", published: "2022-05-17T01:05:59Z", references: [ { type: "ADVISORY", url: "https://nvd.nist.gov/vuln/detail/CVE-2015-3107", }, { type: "WEB", url: "https://helpx.adobe.com/security/products/flash-player/apsb15-11.html", }, { type: "WEB", url: "https://security.gentoo.org/glsa/201506-01", }, { type: "WEB", url: "https://security.gentoo.org/glsa/201508-01", }, { type: "WEB", url: "https://www.exploit-db.com/exploits/37850", }, { type: "WEB", url: "http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00005.html", }, { type: "WEB", url: "http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00009.html", }, { type: "WEB", url: "http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00011.html", }, { type: "WEB", url: "http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00018.html", }, { type: "WEB", url: "http://rhn.redhat.com/errata/RHSA-2015-1086.html", }, { type: "WEB", url: "http://www.securityfocus.com/bid/75087", }, { type: "WEB", url: "http://www.securitytracker.com/id/1032519", }, ], schema_version: "1.4.0", severity: [], }
var-201506-0073
Vulnerability from variot
Use-after-free vulnerability in Adobe Flash Player before 13.0.0.292 and 14.x through 18.x before 18.0.0.160 on Windows and OS X and before 11.2.202.466 on Linux, Adobe AIR before 18.0.0.144 on Windows and before 18.0.0.143 on OS X and Android, Adobe AIR SDK before 18.0.0.144 on Windows and before 18.0.0.143 on OS X, and Adobe AIR SDK & Compiler before 18.0.0.144 on Windows and before 18.0.0.143 on OS X allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-3103 and CVE-2015-3106. Adobe Flash Player and Adobe AIR Use freed memory (Use-after-free) May allow arbitrary code execution vulnerabilities. This vulnerability CVE-2015-3103 and CVE-2015-3106 Is a different vulnerability. Supplementary information : CWE Vulnerability type by CWE-416: Use-after-free ( Use of freed memory ) Has been identified. http://cwe.mitre.org/data/definitions/416.htmlAn attacker could execute arbitrary code. Failed exploit attempts will likely cause a denial-of-service condition. Adobe Flash Player, Adobe AIR SDK and Adobe AIR SDK & Compiler are all products of American Adobe (Adobe). A use-after-free vulnerability exists in several Adobe products. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1
===================================================================== Red Hat Security Advisory
Synopsis: Critical: flash-plugin security update Advisory ID: RHSA-2015:1086-01 Product: Red Hat Enterprise Linux Supplementary Advisory URL: https://rhn.redhat.com/errata/RHSA-2015-1086.html Issue date: 2015-06-10 CVE Names: CVE-2015-3096 CVE-2015-3098 CVE-2015-3099 CVE-2015-3100 CVE-2015-3102 CVE-2015-3103 CVE-2015-3104 CVE-2015-3105 CVE-2015-3106 CVE-2015-3107 CVE-2015-3108 =====================================================================
- Summary:
An updated Adobe Flash Player package that fixes multiple security issues is now available for Red Hat Enterprise Linux 5 and 6 Supplementary.
Red Hat Product Security has rated this update as having Critical security impact. Common Vulnerability Scoring System (CVSS) base scores, which give detailed severity ratings, are available for each vulnerability from the CVE links in the References section.
- Relevant releases/architectures:
Red Hat Enterprise Linux Desktop Supplementary (v. 5) - i386, x86_64 Red Hat Enterprise Linux Desktop Supplementary (v. 6) - i386, x86_64 Red Hat Enterprise Linux Server Supplementary (v. 5) - i386, x86_64 Red Hat Enterprise Linux Server Supplementary (v. 6) - i386, x86_64 Red Hat Enterprise Linux Workstation Supplementary (v. 6) - i386, x86_64
- Description:
The flash-plugin package contains a Mozilla Firefox compatible Adobe Flash Player web browser plug-in. These vulnerabilities are detailed in the Adobe Security Bulletin APSB15-11 listed in the References section.
Multiple flaws were found in the way flash-plugin displayed certain SWF content. An attacker could use these flaws to create a specially crafted SWF file that would cause flash-plugin to crash or, potentially, execute arbitrary code when the victim loaded a page containing the malicious SWF content. (CVE-2015-3100, CVE-2015-3103, CVE-2015-3104, CVE-2015-3105, CVE-2015-3106, CVE-2015-3107)
Multiple security bypass flaws were found in flash-plugin that could lead to the disclosure of sensitive information. (CVE-2015-3096, CVE-2015-3098, CVE-2015-3099, CVE-2015-3102)
A memory information leak flaw was found in flash-plugin that could allow an attacker to potentially bypass ASLR (Address Space Layout Randomization) protection, and make it easier to exploit other flaws. (CVE-2015-3108)
All users of Adobe Flash Player should install this updated package, which upgrades Flash Player to version 11.2.202.466.
- Solution:
Before applying this update, make sure all previously released errata relevant to your system have been applied.
For details on how to apply this update, refer to:
https://access.redhat.com/articles/11258
- Bugs fixed (https://bugzilla.redhat.com/):
1229879 - CVE-2015-3100 CVE-2015-3103 CVE-2015-3104 CVE-2015-3105 CVE-2015-3106 CVE-2015-3107 flash-plugin: multiple code execution issues fixed in APSB15-11 1230185 - CVE-2015-3096 flash-plugin: cross-site request forgery against JSONP endpoints fixed in APSB15-11 (incomplete fix for CVE-2014-5333) 1230189 - CVE-2015-3098 CVE-2015-3099 CVE-2015-3102 flash-plugin: same-origin-policy bypass fixed in APSB15-11 1230201 - CVE-2015-3108 flash-plugin: information leak leading to ASLR bypass (APSB15-11)
- Package List:
Red Hat Enterprise Linux Desktop Supplementary (v. 5):
i386: flash-plugin-11.2.202.466-1.el5.i386.rpm
x86_64: flash-plugin-11.2.202.466-1.el5.i386.rpm
Red Hat Enterprise Linux Server Supplementary (v. 5):
i386: flash-plugin-11.2.202.466-1.el5.i386.rpm
x86_64: flash-plugin-11.2.202.466-1.el5.i386.rpm
Red Hat Enterprise Linux Desktop Supplementary (v. 6):
i386: flash-plugin-11.2.202.466-1.el6_6.i686.rpm
x86_64: flash-plugin-11.2.202.466-1.el6_6.i686.rpm
Red Hat Enterprise Linux Server Supplementary (v. 6):
i386: flash-plugin-11.2.202.466-1.el6_6.i686.rpm
x86_64: flash-plugin-11.2.202.466-1.el6_6.i686.rpm
Red Hat Enterprise Linux Workstation Supplementary (v. 6):
i386: flash-plugin-11.2.202.466-1.el6_6.i686.rpm
x86_64: flash-plugin-11.2.202.466-1.el6_6.i686.rpm
These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from https://access.redhat.com/security/team/key/
- References:
https://access.redhat.com/security/cve/CVE-2015-3096 https://access.redhat.com/security/cve/CVE-2015-3098 https://access.redhat.com/security/cve/CVE-2015-3099 https://access.redhat.com/security/cve/CVE-2015-3100 https://access.redhat.com/security/cve/CVE-2015-3102 https://access.redhat.com/security/cve/CVE-2015-3103 https://access.redhat.com/security/cve/CVE-2015-3104 https://access.redhat.com/security/cve/CVE-2015-3105 https://access.redhat.com/security/cve/CVE-2015-3106 https://access.redhat.com/security/cve/CVE-2015-3107 https://access.redhat.com/security/cve/CVE-2015-3108 https://access.redhat.com/security/updates/classification/#critical https://helpx.adobe.com/security/products/flash-player/apsb15-11.html
- Contact:
The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/
Copyright 2015 Red Hat, Inc. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1
iD8DBQFVeE7EXlSAg2UNWIIRAlOpAJ9RuYMo4MW/E5iT60nzKf7DrOrZjwCgoZXa u416jfOUFziDYbxIZyHYjaI= =EMNe -----END PGP SIGNATURE-----
-- RHSA-announce mailing list RHSA-announce@redhat.com https://www.redhat.com/mailman/listinfo/rhsa-announce .
Background
The Adobe Flash Player is a renderer for the SWF file format, which is commonly used to provide interactive websites. Please review the CVE identifiers referenced below for details.
Impact
A remote attacker could possibly execute arbitrary code with the privileges of the process, cause a Denial of Service condition, obtain sensitive information, or bypass security restrictions.
Workaround
There is no known workaround at this time.
Resolution
All Adobe Flash Player users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot -v ">=www-plugins/adobe-flash-11.2.202.466"
References
[ 1 ] CVE-2015-3096 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-3096 [ 2 ] CVE-2015-3097 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-3097 [ 3 ] CVE-2015-3098 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-3098 [ 4 ] CVE-2015-3099 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-3099 [ 5 ] CVE-2015-3100 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-3100 [ 6 ] CVE-2015-3101 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-3101 [ 7 ] CVE-2015-3102 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-3102 [ 8 ] CVE-2015-3103 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-3103 [ 9 ] CVE-2015-3104 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-3104 [ 10 ] CVE-2015-3105 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-3105 [ 11 ] CVE-2015-3106 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-3106 [ 12 ] CVE-2015-3107 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-3107 [ 13 ] CVE-2015-3108 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-3108 [ 14 ] CVE-2015-4472 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-4472
Availability
This GLSA and any updates to it are available for viewing at the Gentoo Security Website:
https://security.gentoo.org/glsa/201506-01
Concerns?
Security is a primary focus of Gentoo Linux and ensuring the confidentiality and security of our users' machines is of utmost importance to us. Any security concerns should be addressed to security@gentoo.org or alternatively, you may file a bug at https://bugs.gentoo.org.
License
Copyright 2015 Gentoo Foundation, Inc; referenced text belongs to its owner(s).
The contents of this document are licensed under the Creative Commons - Attribution / Share Alike license.
http://creativecommons.org/licenses/by-sa/2.5
Show details on source website{ "@context": { "@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#", affected_products: { "@id": "https://www.variotdbs.pl/ref/affected_products", }, configurations: { "@id": "https://www.variotdbs.pl/ref/configurations", }, credits: { "@id": "https://www.variotdbs.pl/ref/credits", }, cvss: { "@id": "https://www.variotdbs.pl/ref/cvss/", }, description: { "@id": "https://www.variotdbs.pl/ref/description/", }, exploit_availability: { "@id": "https://www.variotdbs.pl/ref/exploit_availability/", }, external_ids: { "@id": "https://www.variotdbs.pl/ref/external_ids/", }, iot: { "@id": "https://www.variotdbs.pl/ref/iot/", }, iot_taxonomy: { "@id": "https://www.variotdbs.pl/ref/iot_taxonomy/", }, patch: { "@id": "https://www.variotdbs.pl/ref/patch/", }, problemtype_data: { "@id": "https://www.variotdbs.pl/ref/problemtype_data/", }, references: { "@id": "https://www.variotdbs.pl/ref/references/", }, sources: { "@id": "https://www.variotdbs.pl/ref/sources/", }, sources_release_date: { "@id": "https://www.variotdbs.pl/ref/sources_release_date/", }, sources_update_date: { "@id": "https://www.variotdbs.pl/ref/sources_update_date/", }, threat_type: { "@id": "https://www.variotdbs.pl/ref/threat_type/", }, title: { "@id": "https://www.variotdbs.pl/ref/title/", }, type: { "@id": "https://www.variotdbs.pl/ref/type/", }, }, "@id": "https://www.variotdbs.pl/vuln/VAR-201506-0073", affected_products: { "@context": { "@vocab": "https://www.variotdbs.pl/ref/affected_products#", data: { "@container": "@list", }, sources: { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#", }, "@id": "https://www.variotdbs.pl/ref/sources", }, }, data: [ { model: "flash player", scope: "eq", trust: 1.9, vendor: "adobe", version: "17.0.0.188", }, { model: "flash player", scope: "eq", trust: 1.9, vendor: "adobe", version: "17.0.0.169", }, { model: "flash player", scope: "eq", trust: 1.9, vendor: "adobe", version: "17.0.0.134", }, { model: "flash player", scope: "eq", trust: 1.9, vendor: "adobe", version: "16.0.0.296", }, { model: "flash player", scope: "eq", trust: 1.9, vendor: "adobe", version: "16.0.0.287", }, { model: "flash player", scope: "eq", trust: 1.9, vendor: "adobe", version: "14.0.0.125", }, { model: "flash player", scope: "eq", trust: 1.3, vendor: "adobe", version: "16.0.0.257", }, { model: "flash player", scope: "eq", trust: 1.3, vendor: "adobe", version: "15.0.0.246", }, { model: "flash player", scope: "eq", trust: 1.3, vendor: "adobe", version: "15.0.0.239", }, { model: "flash player", scope: "eq", trust: 1.3, vendor: "adobe", version: "15.0.0.223", }, { model: "flash player", scope: "eq", trust: 1.3, vendor: "adobe", version: "15.0.0.189", }, { model: "flash player", scope: "eq", trust: 1.3, vendor: "adobe", version: "15.0.0.152", }, { model: "flash player", scope: "eq", trust: 1.3, vendor: "adobe", version: "14.0.0.145", }, { model: "evergreen", scope: "eq", trust: 1, vendor: "opensuse", version: "11.4", }, { model: "flash player", scope: "eq", trust: 1, vendor: "adobe", version: "14.0.0.176", }, { model: "air", scope: "lte", trust: 1, vendor: "adobe", version: "17.0.0.172", }, { model: "air sdk \\& compiler", scope: "lte", trust: 1, vendor: "adobe", version: "17.0.0.172", }, { model: "flash player", scope: "lte", trust: 1, vendor: "adobe", version: "13.0.0.289", }, { model: "flash player", scope: "lte", trust: 1, vendor: "adobe", version: "11.2.202.460", }, { model: "air", scope: "lte", trust: 1, vendor: "adobe", version: "17.0.0.144", }, { model: "air sdk", scope: "lte", trust: 1, vendor: "adobe", version: "17.0.0.172", }, { model: "android", scope: "eq", trust: 1, vendor: "google", version: "*", }, { model: "flash player", scope: "eq", trust: 1, vendor: "adobe", version: "16.0.0.235", }, { model: "flash player", scope: "eq", trust: 1, vendor: "adobe", version: "14.0.0.179", }, { model: "flash player", scope: "eq", trust: 1, vendor: "adobe", version: "15.0.0.167", }, { model: "flash player", scope: "eq", trust: 0.9, vendor: "adobe", version: "11.2.202.460", }, { model: "air sdk", scope: "eq", trust: 0.9, vendor: "adobe", version: "17.0.0.172", }, { model: "air", scope: "eq", trust: 0.9, vendor: "adobe", version: "17.0.0.172", }, { model: "chrome", scope: null, trust: 0.8, vendor: "google", version: null, }, { model: "air", scope: "lt", trust: 0.8, vendor: "adobe", version: "18.0.0.143 (android)", }, { model: "air", scope: "lt", trust: 0.8, vendor: "adobe", version: "desktop runtime 18.0.0.199 (windows/macintosh)", }, { model: "air sdk", scope: "lt", trust: 0.8, vendor: "adobe", version: "18.0.0.199 (windows/macintosh/android/ios)", }, { model: "air sdk & compiler", scope: "lt", trust: 0.8, vendor: "adobe", version: "18.0.0.199 (windows/macintosh/android/ios)", }, { model: "flash player", scope: "lt", trust: 0.8, vendor: "adobe", version: "11.2.202.508 (linux)", }, { model: "flash player", scope: "lt", trust: 0.8, vendor: "adobe", version: "18.0.0.232 (internet explorer 10/11)", }, { model: "flash player", scope: "lt", trust: 0.8, vendor: "adobe", version: "18.0.0.232 (microsoft edge) :add to", }, { model: "flash player", scope: "lt", trust: 0.8, vendor: "adobe", version: "18.0.0.232 (windows/macintosh edition chrome)", }, { model: "flash player", scope: "lt", trust: 0.8, vendor: "adobe", version: "18.0.0.233 (linux/chrome os edition chrome)", }, { model: "flash player", scope: "lt", trust: 0.8, vendor: "adobe", version: "desktop runtime 18.0.0.232 (windows/macintosh)", }, { model: "flash player", scope: "lt", trust: 0.8, vendor: "adobe", version: "continuous support release 18.0.0.232 (windows/macintosh)", }, { model: "edge", scope: "eq", trust: 0.8, vendor: "microsoft", version: "(windows 10)", }, { model: "internet explorer", scope: "eq", trust: 0.8, vendor: "microsoft", version: "10 (windows 8/windows server 2012/windows rt)", }, { model: "internet explorer", scope: "eq", trust: 0.8, vendor: "microsoft", version: "11 (windows 8.1/windows server 2012 r2/windows rt 8.1/windows 10)", }, { model: "air sdk \\& compiler", scope: "eq", trust: 0.6, vendor: "adobe", version: "17.0.0.172", }, { model: "opensuse evergreen", scope: "eq", trust: 0.3, vendor: "suse", version: "11.4", }, { model: "enterprise linux workstation supplementary", scope: "eq", trust: 0.3, vendor: "redhat", version: "6", }, { model: "enterprise linux supplementary server", scope: "eq", trust: 0.3, vendor: "redhat", version: "5", }, { model: "enterprise linux server supplementary", scope: "eq", trust: 0.3, vendor: "redhat", version: "6", }, { model: "enterprise linux desktop supplementary", scope: "eq", trust: 0.3, vendor: "redhat", version: "6", }, { model: "enterprise linux desktop supplementary client", scope: "eq", trust: 0.3, vendor: "redhat", version: "5", }, { model: "internet explorer", scope: "eq", trust: 0.3, vendor: "microsoft", version: "11", }, { model: "internet explorer", scope: "eq", trust: 0.3, vendor: "microsoft", version: "10", }, { model: "linux", scope: null, trust: 0.3, vendor: "gentoo", version: null, }, { model: "flash player", scope: "eq", trust: 0.3, vendor: "adobe", version: "16.0235", }, { model: "flash player", scope: "eq", trust: 0.3, vendor: "adobe", version: "14.0179", }, { model: "flash player", scope: "eq", trust: 0.3, vendor: "adobe", version: "14.0177", }, { model: "flash player", scope: "eq", trust: 0.3, vendor: "adobe", version: "14.0176", }, { model: "flash player", scope: "eq", trust: 0.3, vendor: "adobe", version: "13.0259", }, { model: "flash player", scope: "eq", trust: 0.3, vendor: "adobe", version: "13.0252", }, { model: "flash player", scope: "eq", trust: 0.3, vendor: "adobe", version: "13.0214", }, { model: "flash player", scope: "eq", trust: 0.3, vendor: "adobe", version: "13.0182", }, { model: "flash player", scope: "eq", trust: 0.3, vendor: "adobe", version: "12.070", }, { model: "flash player", scope: "eq", trust: 0.3, vendor: "adobe", version: "11.7.700275", }, { model: "flash player", scope: "eq", trust: 0.3, vendor: "adobe", version: "11.7.700232", }, { model: "flash player", scope: "eq", trust: 0.3, vendor: "adobe", version: "11.7.700169", }, { model: "flash player", scope: "eq", trust: 0.3, vendor: "adobe", version: "11.6.602105", }, { model: "flash player", scope: "eq", trust: 0.3, vendor: "adobe", version: "11.5.502131", }, { model: "flash player", scope: "eq", trust: 0.3, vendor: "adobe", version: "11.5.502124", }, { model: "flash player", scope: "eq", trust: 0.3, vendor: "adobe", version: "11.5.502118", }, { model: "flash player", scope: "eq", trust: 0.3, vendor: "adobe", version: "11.5.50080", }, { model: "flash player", scope: "eq", trust: 0.3, vendor: "adobe", version: "11.4.400231", }, { model: "flash player", scope: "eq", trust: 0.3, vendor: "adobe", version: "11.3.300271", }, { model: "flash player", scope: "eq", trust: 0.3, vendor: "adobe", version: "11.3.300270", }, { model: "flash player", scope: "eq", trust: 0.3, vendor: "adobe", version: "11.3.300268", }, { model: "flash player", scope: "eq", trust: 0.3, vendor: "adobe", version: "11.3.300265", }, { model: "flash player", scope: "eq", trust: 0.3, vendor: "adobe", version: "11.3.300262", }, { model: "flash player", scope: "eq", trust: 0.3, vendor: "adobe", version: "11.3.300257", }, { model: "flash player", scope: "eq", trust: 0.3, vendor: "adobe", version: "11.3.300250", }, { model: "flash player", scope: "eq", trust: 0.3, vendor: "adobe", version: "11.3.300231", }, { model: "flash player", scope: "eq", trust: 0.3, vendor: "adobe", version: "11.3.300214", }, { model: "flash player", scope: "eq", trust: 0.3, vendor: "adobe", version: "11.2.20295", }, { model: "flash player", scope: "eq", trust: 0.3, vendor: "adobe", version: "11.2.202425", }, { model: "flash player", scope: "eq", trust: 0.3, vendor: "adobe", version: "11.2.202418", }, { model: "flash player", scope: "eq", trust: 0.3, vendor: "adobe", version: "11.2.202400", }, { model: "flash player", scope: "eq", trust: 0.3, vendor: "adobe", version: "11.2.202359", }, { model: "flash player", scope: "eq", trust: 0.3, vendor: "adobe", version: "11.2.202350", }, { model: "flash player", scope: "eq", trust: 0.3, vendor: "adobe", version: "11.2.202346", }, { model: "flash player", scope: "eq", trust: 0.3, vendor: "adobe", version: "11.2.202341", }, { model: "flash player", scope: "eq", trust: 0.3, vendor: "adobe", version: "11.2.202297", }, { model: "flash player", scope: "eq", trust: 0.3, vendor: "adobe", version: "11.2.202280", }, { model: "flash player", scope: "eq", trust: 0.3, vendor: "adobe", version: "11.2.202238", }, { model: "flash player", scope: "eq", trust: 0.3, vendor: "adobe", version: "11.2.202236", }, { model: "flash player", scope: "eq", trust: 0.3, vendor: "adobe", version: "11.2.202221", }, { model: "flash player", scope: "eq", trust: 0.3, vendor: "adobe", version: "11.2.202197", }, { model: "flash player", scope: "eq", trust: 0.3, vendor: "adobe", version: "11.2.202160", }, { model: "flash player", scope: "eq", trust: 0.3, vendor: "adobe", version: "11.1.11569", }, { model: "flash player", scope: "eq", trust: 0.3, vendor: "adobe", version: "11.1.11554", }, { model: "flash player", scope: "eq", trust: 0.3, vendor: "adobe", version: "11.1.11164", }, { model: "flash player", scope: "eq", trust: 0.3, vendor: "adobe", version: "11.1.11150", }, { model: "flash player", scope: "eq", trust: 0.3, vendor: "adobe", version: "11.0.198", }, { model: "flash player", scope: "eq", trust: 0.3, vendor: "adobe", version: "11.0.160", }, { model: "flash player", scope: "eq", trust: 0.3, vendor: "adobe", version: "11.0.1129", }, { model: "flash player", scope: "eq", trust: 0.3, vendor: "adobe", version: "10.1.53.64", }, { model: "flash player", scope: "eq", trust: 0.3, vendor: "adobe", version: "10.1.51.66", }, { model: "flash player", scope: "eq", trust: 0.3, vendor: "adobe", version: "10.0.452", }, { model: "flash player", scope: "eq", trust: 0.3, vendor: "adobe", version: "10.0.3218", }, { model: "flash player", scope: "eq", trust: 0.3, vendor: "adobe", version: "10.0.22.87", }, { model: "flash player", scope: "eq", trust: 0.3, vendor: "adobe", version: "10.0.15.3", }, { model: "flash player", scope: "eq", trust: 0.3, vendor: "adobe", version: "10.0.12.36", }, { model: "flash player", scope: "eq", trust: 0.3, vendor: "adobe", version: "10.0.12.35", }, { model: "flash player", scope: "eq", trust: 0.3, vendor: "adobe", version: "9.0.262", }, { model: "flash player", scope: "eq", trust: 0.3, vendor: "adobe", version: "9.0.2460", }, { model: "flash player", scope: "eq", trust: 0.3, vendor: "adobe", version: "9.0.152.0", }, { model: "flash player", scope: "eq", trust: 0.3, vendor: "adobe", version: "9.0.151.0", }, { model: "flash player", scope: "eq", trust: 0.3, vendor: "adobe", version: "9.0.124.0", }, { model: "flash player", scope: "eq", trust: 0.3, vendor: "adobe", version: "9.0.9.0", }, { model: "flash player", scope: "eq", trust: 0.3, vendor: "adobe", version: "9.0.8.0", }, { model: "flash player", scope: "eq", trust: 0.3, vendor: "adobe", version: "9.0.48.0", }, { model: "flash player", scope: "eq", trust: 0.3, vendor: "adobe", version: "9.0.47.0", }, { model: "flash player", scope: "eq", trust: 0.3, vendor: "adobe", version: "9.0.45.0", }, { model: "flash player", scope: "eq", trust: 0.3, vendor: "adobe", version: "9.0.31.0", }, { model: "flash player", scope: "eq", trust: 0.3, vendor: "adobe", version: "9.0.289.0", }, { model: "flash player", scope: "eq", trust: 0.3, vendor: "adobe", version: "9.0.283.0", }, { model: "flash player", scope: "eq", trust: 0.3, vendor: "adobe", version: "9.0.280", }, { model: "flash player", scope: "eq", trust: 0.3, vendor: "adobe", version: "9.0.28.0", }, { model: "flash player", scope: "eq", trust: 0.3, vendor: "adobe", version: "9.0.277.0", }, { model: "flash player", scope: "eq", trust: 0.3, vendor: "adobe", version: "9.0.262.0", }, { model: "flash player", scope: "eq", trust: 0.3, vendor: "adobe", version: "9.0.260.0", }, { model: "flash player", scope: "eq", trust: 0.3, vendor: "adobe", version: "9.0.246.0", }, { model: "flash player", scope: "eq", trust: 0.3, vendor: "adobe", version: "9.0.159.0", }, { model: "flash player", scope: "eq", trust: 0.3, vendor: "adobe", version: "9.0.155.0", }, { model: "flash player", scope: "eq", trust: 0.3, vendor: "adobe", version: "9.0.115.0", }, { model: "flash player", scope: "eq", trust: 0.3, vendor: "adobe", version: "9.0", }, { model: "flash player", scope: "eq", trust: 0.3, vendor: "adobe", version: "9", }, { model: "flash player", scope: "eq", trust: 0.3, vendor: "adobe", version: "8.0.35.0", }, { model: "flash player", scope: "eq", trust: 0.3, vendor: "adobe", version: "8.0.34.0", }, { model: "flash player", scope: "eq", trust: 0.3, vendor: "adobe", version: "8", }, { model: "flash player", scope: "eq", trust: 0.3, vendor: "adobe", version: "7.0.73.0", }, { model: "flash player", scope: "eq", trust: 0.3, vendor: "adobe", version: "7.0.70.0", }, { model: "flash player", scope: "eq", trust: 0.3, vendor: "adobe", version: "7.0.69.0", }, { model: "flash player", scope: "eq", trust: 0.3, vendor: "adobe", version: "7.0.68.0", }, { model: "flash player", scope: "eq", trust: 0.3, vendor: "adobe", version: "7.0.67.0", }, { model: "flash player", scope: "eq", trust: 0.3, vendor: "adobe", version: "7.0.66.0", }, { model: "flash player", scope: "eq", trust: 0.3, vendor: "adobe", version: "7.0.61.0", }, { model: "flash player", scope: "eq", trust: 0.3, vendor: "adobe", version: "7.0.60.0", }, { model: "flash player", scope: "eq", trust: 0.3, vendor: "adobe", version: "7.0.53.0", }, { model: "flash player", scope: "eq", trust: 0.3, vendor: "adobe", version: "7.0.24.0", }, { model: "flash player", scope: "eq", trust: 0.3, vendor: "adobe", version: "7.0.19.0", }, { model: "flash player", scope: "eq", trust: 0.3, vendor: "adobe", version: "7.0.14.0", }, { model: "flash player", scope: "eq", trust: 0.3, vendor: "adobe", version: "7", }, { model: "flash player", scope: "eq", trust: 0.3, vendor: "adobe", version: "6.0.79", }, { model: "flash player", scope: "eq", trust: 0.3, vendor: "adobe", version: "6.0.21.0", }, { model: "flash player", scope: "eq", trust: 0.3, vendor: "adobe", version: "3", }, { model: "flash player", scope: "eq", trust: 0.3, vendor: "adobe", version: "2", }, { model: "flash player", scope: "eq", trust: 0.3, vendor: "adobe", version: "18.0.0.209", }, { model: "flash player", scope: "eq", trust: 0.3, vendor: "adobe", version: "18.0.0.204", }, { model: "flash player", scope: "eq", trust: 0.3, vendor: "adobe", version: "18.0.0.203", }, { model: "flash player", scope: "eq", trust: 0.3, vendor: "adobe", version: "18.0.0.194", }, { model: "flash player", scope: "eq", trust: 0.3, vendor: "adobe", version: "18.0.0.161", }, { model: "flash player", scope: "eq", trust: 0.3, vendor: "adobe", version: "18.0.0.160", }, { model: "flash player", scope: "eq", trust: 0.3, vendor: "adobe", version: "18.0.0.143", }, { model: "flash player", scope: "eq", trust: 0.3, vendor: "adobe", version: "16.0.0.305", }, { model: "flash player", scope: "eq", trust: 0.3, vendor: "adobe", version: "16.0.0.291", }, { model: "flash player", scope: "eq", trust: 0.3, vendor: "adobe", version: "15.0.0.242", }, { model: "flash player", scope: "eq", trust: 0.3, vendor: "adobe", version: "13.0.0.309", }, { model: "flash player", scope: "eq", trust: 0.3, vendor: "adobe", version: "13.0.0.302", }, { model: "flash player", scope: "eq", trust: 0.3, vendor: "adobe", version: "13.0.0.296", }, { model: "flash player", scope: "eq", trust: 0.3, vendor: "adobe", version: "13.0.0.292", }, { model: "flash player", scope: "eq", trust: 0.3, vendor: "adobe", version: "13.0.0.289", }, { model: "flash player", scope: "eq", trust: 0.3, vendor: "adobe", version: "13.0.0.281", }, { model: "flash player", scope: "eq", trust: 0.3, vendor: "adobe", version: "13.0.0.277", }, { model: "flash player", scope: "eq", trust: 0.3, vendor: "adobe", version: "13.0.0.269", }, { model: "flash player", scope: "eq", trust: 0.3, vendor: "adobe", version: "13.0.0.264", }, { model: "flash player", scope: "eq", trust: 0.3, vendor: "adobe", version: "13.0.0.262", }, { model: "flash player", scope: "eq", trust: 0.3, vendor: "adobe", version: "13.0.0.260", }, { model: "flash player", scope: "eq", trust: 0.3, vendor: "adobe", version: "13.0.0.258", }, { model: "flash player", scope: "eq", trust: 0.3, vendor: "adobe", version: "13.0.0.250", }, { model: "flash player", scope: "eq", trust: 0.3, vendor: "adobe", version: "13.0.0.244", }, { model: "flash player", scope: "eq", trust: 0.3, vendor: "adobe", version: "13.0.0.241", }, { model: "flash player", scope: "eq", trust: 0.3, vendor: "adobe", version: "13.0.0.231", }, { model: "flash player", scope: "eq", trust: 0.3, vendor: "adobe", version: "13.0.0.223", }, { model: "flash player", scope: "eq", trust: 0.3, vendor: "adobe", version: "13.0.0.206", }, { model: "flash player", scope: "eq", trust: 0.3, vendor: "adobe", version: "13.0.0.201", }, { model: "flash player", scope: "eq", trust: 0.3, vendor: "adobe", version: "12.0.0.77", }, { model: "flash player", scope: "eq", trust: 0.3, vendor: "adobe", version: "12.0.0.44", }, { model: "flash player", scope: "eq", trust: 0.3, vendor: "adobe", version: "12.0.0.43", }, { model: "flash player", scope: "eq", trust: 0.3, vendor: "adobe", version: "12.0.0.41", }, { model: "flash player", scope: "eq", trust: 0.3, vendor: "adobe", version: "12.0.0.38", }, { model: "flash player", scope: "eq", trust: 0.3, vendor: "adobe", version: "12", }, { model: "flash player", scope: "eq", trust: 0.3, vendor: "adobe", version: "11.9.900.170", }, { model: "flash player", scope: "eq", trust: 0.3, vendor: "adobe", version: "11.9.900.152", }, { model: "flash player", scope: "eq", trust: 0.3, vendor: "adobe", version: "11.9.900.117", }, { model: "flash player", scope: "eq", trust: 0.3, vendor: "adobe", version: "11.8.800.97", }, { model: "flash player", scope: "eq", trust: 0.3, vendor: "adobe", version: "11.8.800.94", }, { model: "flash player", scope: "eq", trust: 0.3, vendor: "adobe", version: "11.8.800.170", }, { model: "flash player", scope: "eq", trust: 0.3, vendor: "adobe", version: "11.8.800.168", }, { model: "flash player", scope: "eq", trust: 0.3, vendor: "adobe", version: "11.7.700.279", }, { model: "flash player", scope: "eq", trust: 0.3, vendor: "adobe", version: "11.7.700.272", }, { model: "flash player", scope: "eq", trust: 0.3, vendor: "adobe", version: "11.7.700.269", }, { model: "flash player", scope: "eq", trust: 0.3, vendor: "adobe", version: "11.7.700.261", }, { model: "flash player", scope: "eq", trust: 0.3, vendor: "adobe", version: "11.7.700.260", }, { model: "flash player", scope: "eq", trust: 0.3, vendor: "adobe", version: "11.7.700.257", }, { model: "flash player", scope: "eq", trust: 0.3, vendor: "adobe", version: "11.7.700.252", }, { model: "flash player", scope: "eq", trust: 0.3, vendor: "adobe", version: "11.7.700.242", }, { model: "flash player", scope: "eq", trust: 0.3, vendor: "adobe", version: "11.7.700.225", }, { model: "flash player", scope: "eq", trust: 0.3, vendor: "adobe", version: "11.7.700.224", }, { model: "flash player", scope: "eq", trust: 0.3, vendor: "adobe", version: "11.7.700.203", }, { model: "flash player", scope: "eq", trust: 0.3, vendor: "adobe", version: "11.7.700.202", }, { model: "flash player", scope: "eq", trust: 0.3, vendor: "adobe", version: "11.6.602.180", }, { model: "flash player", scope: "eq", trust: 0.3, vendor: "adobe", version: "11.6.602.171", }, { model: "flash player", scope: "eq", trust: 0.3, vendor: "adobe", version: "11.6.602.168", }, { model: "flash player", scope: "eq", trust: 0.3, vendor: "adobe", version: "11.6.602.167", }, { model: "flash player", scope: "eq", trust: 0.3, vendor: "adobe", version: "11.5.502.149", }, { model: "flash player", scope: "eq", trust: 0.3, vendor: "adobe", version: "11.5.502.146", }, { model: "flash player", scope: "eq", trust: 0.3, vendor: "adobe", version: "11.5.502.136", }, { model: "flash player", scope: "eq", trust: 0.3, vendor: "adobe", version: "11.5.502.135", }, { model: "flash player", scope: "eq", trust: 0.3, vendor: "adobe", version: "11.5.502.110", }, { model: "flash player", scope: "eq", trust: 0.3, vendor: "adobe", version: "11.4.402.287", }, { model: "flash player", scope: "eq", trust: 0.3, vendor: "adobe", version: "11.4.402.278", }, { model: "flash player", scope: "eq", trust: 0.3, vendor: "adobe", version: "11.4.402.265", }, { model: "flash player", scope: "eq", trust: 0.3, vendor: "adobe", version: "11.3.378.5", }, { model: "flash player", scope: "eq", trust: 0.3, vendor: "adobe", version: "11.3.31.230", }, { model: "flash player", scope: "eq", trust: 0.3, vendor: "adobe", version: "11.3.300.273", }, { model: "flash player", scope: "eq", trust: 0.3, vendor: "adobe", version: "11.2.202.491", }, { model: "flash player", scope: "eq", trust: 0.3, vendor: "adobe", version: "11.2.202.481", }, { model: "flash player", scope: "eq", trust: 0.3, vendor: "adobe", version: "11.2.202.468", }, { model: "flash player", scope: "eq", trust: 0.3, vendor: "adobe", version: "11.2.202.466", }, { model: "flash player", scope: "eq", trust: 0.3, vendor: "adobe", version: "11.2.202.457", }, { model: "flash player", scope: "eq", trust: 0.3, vendor: "adobe", version: "11.2.202.451", }, { model: "flash player", scope: "eq", trust: 0.3, vendor: "adobe", version: "11.2.202.442", }, { model: "flash player", scope: "eq", trust: 0.3, vendor: "adobe", version: "11.2.202.440", }, { model: "flash player", scope: "eq", trust: 0.3, vendor: "adobe", version: "11.2.202.438", }, { model: "flash player", scope: "eq", trust: 0.3, vendor: "adobe", version: "11.2.202.429", }, { model: "flash player", scope: "eq", trust: 0.3, vendor: "adobe", version: "11.2.202.424", }, { model: "flash player", scope: "eq", trust: 0.3, vendor: "adobe", version: "11.2.202.411", }, { model: "flash player", scope: "eq", trust: 0.3, vendor: "adobe", version: "11.2.202.406", }, { model: "flash player", scope: "eq", trust: 0.3, vendor: "adobe", version: "11.2.202.394", }, { model: "flash player", scope: "eq", trust: 0.3, vendor: "adobe", version: "11.2.202.378", }, { model: "flash player", scope: "eq", trust: 0.3, vendor: "adobe", version: "11.2.202.356", }, { model: "flash player", scope: "eq", trust: 0.3, vendor: "adobe", version: "11.2.202.336", }, { model: "flash player", scope: "eq", trust: 0.3, vendor: "adobe", version: "11.2.202.335", }, { model: "flash player", scope: "eq", trust: 0.3, vendor: "adobe", version: "11.2.202.332", }, { model: "flash player", scope: "eq", trust: 0.3, vendor: "adobe", version: "11.2.202.327", }, { model: "flash player", scope: "eq", trust: 0.3, vendor: "adobe", version: "11.2.202.310", }, { model: "flash player", scope: "eq", trust: 0.3, vendor: "adobe", version: "11.2.202.291", }, { model: "flash player", scope: "eq", trust: 0.3, vendor: "adobe", version: "11.2.202.285", }, { model: "flash player", scope: "eq", trust: 0.3, vendor: "adobe", version: "11.2.202.275", }, { model: "flash player", scope: "eq", trust: 0.3, vendor: "adobe", version: "11.2.202.273", }, { model: "flash player", scope: "eq", trust: 0.3, vendor: "adobe", version: "11.2.202.270", }, { model: "flash player", scope: "eq", trust: 0.3, vendor: "adobe", version: "11.2.202.262", }, { model: "flash player", scope: "eq", trust: 0.3, vendor: "adobe", version: "11.2.202.261", }, { model: "flash player", scope: "eq", trust: 0.3, vendor: "adobe", version: "11.2.202.258", }, { model: "flash player", scope: "eq", trust: 0.3, vendor: "adobe", version: "11.2.202.251", }, { model: "flash player", scope: "eq", trust: 0.3, vendor: "adobe", version: "11.2.202.243", }, { model: "flash player", scope: "eq", trust: 0.3, vendor: "adobe", version: "11.2.202.238", }, { model: "flash player", scope: "eq", trust: 0.3, vendor: "adobe", version: "11.2.202.235", }, { model: "flash player", scope: "eq", trust: 0.3, vendor: "adobe", version: "11.2.202.233", }, { model: "flash player", scope: "eq", trust: 0.3, vendor: "adobe", version: "11.2.202.229", }, { model: "flash player", scope: "eq", trust: 0.3, vendor: "adobe", version: "11.2.202.228", }, { model: "flash player", scope: "eq", trust: 0.3, vendor: "adobe", version: "11.2.202.223", }, { model: "flash player", scope: "eq", trust: 0.3, vendor: "adobe", version: "11.1.115.81", }, { model: "flash player", scope: "eq", trust: 0.3, vendor: "adobe", version: "11.1.115.8", }, { model: "flash player", scope: "eq", trust: 0.3, vendor: "adobe", version: "11.1.115.7", }, { model: "flash player", scope: "eq", trust: 0.3, vendor: "adobe", version: "11.1.115.63", }, { model: "flash player", scope: "eq", trust: 0.3, vendor: "adobe", version: "11.1.115.6", }, { model: "flash player", scope: "eq", trust: 0.3, vendor: "adobe", version: "11.1.115.59", }, { model: "flash player", scope: "eq", trust: 0.3, vendor: "adobe", version: "11.1.115.58", }, { model: "flash player", scope: "eq", trust: 0.3, vendor: "adobe", version: "11.1.115.48", }, { model: "flash player", scope: "eq", trust: 0.3, vendor: "adobe", version: "11.1.115.34", }, { model: "flash player", scope: "eq", trust: 0.3, vendor: "adobe", version: "11.1.115.11", }, { model: "flash player", scope: "eq", trust: 0.3, vendor: "adobe", version: "11.1.112.61", }, { model: "flash player", scope: "eq", trust: 0.3, vendor: "adobe", version: "11.1.111.9", }, { model: "flash player", scope: "eq", trust: 0.3, vendor: "adobe", version: "11.1.111.8", }, { model: "flash player", scope: "eq", trust: 0.3, vendor: "adobe", version: "11.1.111.73", }, { model: "flash player", scope: "eq", trust: 0.3, vendor: "adobe", version: "11.1.111.7", }, { model: "flash player", scope: "eq", trust: 0.3, vendor: "adobe", version: "11.1.111.6", }, { model: "flash player", scope: "eq", trust: 0.3, vendor: "adobe", version: "11.1.111.54", }, { model: "flash player", scope: "eq", trust: 0.3, vendor: "adobe", version: "11.1.111.5", }, { model: "flash player", scope: "eq", trust: 0.3, vendor: "adobe", version: "11.1.111.44", }, { model: "flash player", scope: "eq", trust: 0.3, vendor: "adobe", version: "11.1.111.10", }, { model: "flash player", scope: "eq", trust: 0.3, vendor: "adobe", version: "11.1.102.63", }, { model: "flash player", scope: "eq", trust: 0.3, vendor: "adobe", version: "11.1.102.62", }, { model: "flash player", scope: "eq", trust: 0.3, vendor: "adobe", version: "11.1.102.59", }, { model: "flash player", scope: "eq", trust: 0.3, vendor: "adobe", version: "11.1.102.55", }, { model: "flash player", scope: "eq", trust: 0.3, vendor: "adobe", version: "11.1.102.228", }, { model: "flash player", scope: "eq", trust: 0.3, vendor: "adobe", version: "11.1", }, { model: "flash player", scope: "eq", trust: 0.3, vendor: "adobe", version: "11.0.1.153", }, { model: "flash player", scope: "eq", trust: 0.3, vendor: "adobe", version: "11.0.1.152", }, { model: "flash player", scope: "eq", trust: 0.3, vendor: "adobe", version: "11", }, { model: "flash player", scope: "eq", trust: 0.3, vendor: "adobe", version: "10.3.186.7", }, { model: "flash player", scope: "eq", trust: 0.3, vendor: "adobe", version: "10.3.186.6", }, { model: "flash player", scope: "eq", trust: 0.3, vendor: "adobe", version: "10.3.186.3", }, { model: "flash player", scope: "eq", trust: 0.3, vendor: "adobe", version: "10.3.186.2", }, { model: "flash player", scope: "eq", trust: 0.3, vendor: "adobe", version: "10.3.185.25", }, { model: "flash player", scope: "eq", trust: 0.3, vendor: "adobe", version: "10.3.185.24", }, { model: "flash player", scope: "eq", trust: 0.3, vendor: "adobe", version: "10.3.185.23", }, { model: "flash player", scope: "eq", trust: 0.3, vendor: "adobe", version: "10.3.185.22", }, { model: "flash player", scope: "eq", trust: 0.3, vendor: "adobe", version: "10.3.185.21", }, { model: "flash player", scope: "eq", trust: 0.3, vendor: "adobe", version: "10.3.183.86", }, { model: "flash player", scope: "eq", trust: 0.3, vendor: "adobe", version: "10.3.183.75", }, { model: "flash player", scope: "eq", trust: 0.3, vendor: "adobe", version: "10.3.183.7", }, { model: "flash player", scope: "eq", trust: 0.3, vendor: "adobe", version: "10.3.183.68", }, { model: "flash player", scope: "eq", trust: 0.3, vendor: "adobe", version: "10.3.183.67", }, { model: "flash player", scope: "eq", trust: 0.3, vendor: "adobe", version: "10.3.183.63", }, { model: "flash player", scope: "eq", trust: 0.3, vendor: "adobe", version: "10.3.183.61", }, { model: "flash player", scope: "eq", trust: 0.3, vendor: "adobe", version: "10.3.183.51", }, { model: "flash player", scope: "eq", trust: 0.3, vendor: "adobe", version: "10.3.183.50", }, { model: "flash player", scope: "eq", trust: 0.3, vendor: "adobe", version: "10.3.183.5", }, { model: "flash player", scope: "eq", trust: 0.3, vendor: "adobe", version: "10.3.183.48", }, { model: "flash player", scope: "eq", trust: 0.3, vendor: "adobe", version: "10.3.183.43", }, { model: "flash player", scope: "eq", trust: 0.3, vendor: "adobe", version: "10.3.183.4", }, { model: "flash player", scope: "eq", trust: 0.3, vendor: "adobe", version: "10.3.183.29", }, { model: "flash player", scope: "eq", trust: 0.3, vendor: "adobe", version: "10.3.183.25", }, { model: "flash player", scope: "eq", trust: 0.3, vendor: "adobe", version: "10.3.183.23", }, { model: "flash player", scope: "eq", trust: 0.3, vendor: "adobe", version: "10.3.183.20", }, { model: "flash player", scope: "eq", trust: 0.3, vendor: "adobe", version: "10.3.183.19", }, { model: "flash player", scope: "eq", trust: 0.3, vendor: "adobe", version: "10.3.183.18", }, { model: "flash player", scope: "eq", trust: 0.3, vendor: "adobe", version: "10.3.183.16", }, { model: "flash player", scope: "eq", trust: 0.3, vendor: "adobe", version: "10.3.183.15", }, { model: "flash player", scope: "eq", trust: 0.3, vendor: "adobe", version: "10.3.183.11", }, { model: "flash player", scope: "eq", trust: 0.3, vendor: "adobe", version: "10.3.183.10", }, { model: "flash player", scope: "eq", trust: 0.3, vendor: "adobe", version: "10.3.181.34", }, { model: "flash player", scope: "eq", trust: 0.3, vendor: "adobe", version: "10.3.181.26", }, { model: "flash player", scope: "eq", trust: 0.3, vendor: "adobe", version: "10.3.181.23", }, { model: "flash player", scope: "eq", trust: 0.3, vendor: "adobe", version: "10.3.181.22", }, { model: "flash player", scope: "eq", trust: 0.3, vendor: "adobe", version: "10.3.181.16", }, { model: "flash player", scope: "eq", trust: 0.3, vendor: "adobe", version: "10.3.181.14", }, { model: "flash player", scope: "eq", trust: 0.3, vendor: "adobe", version: "10.2.159.1", }, { model: "flash player", scope: "eq", trust: 0.3, vendor: "adobe", version: "10.2.157.51", }, { model: "flash player", scope: "eq", trust: 0.3, vendor: "adobe", version: "10.2.156.12", }, { model: "flash player", scope: "eq", trust: 0.3, vendor: "adobe", version: "10.2.154.28", }, { model: "flash player", scope: "eq", trust: 0.3, vendor: "adobe", version: "10.2.154.27", }, { model: "flash player", scope: "eq", trust: 0.3, vendor: "adobe", version: "10.2.154.25", }, { model: "flash player", scope: "eq", trust: 0.3, vendor: "adobe", version: "10.2.154.24", }, { model: "flash player", scope: "eq", trust: 0.3, vendor: "adobe", version: "10.2.154.18", }, { model: "flash player", scope: "eq", trust: 0.3, vendor: "adobe", version: "10.2.154.13", }, { model: "flash player", scope: "eq", trust: 0.3, vendor: "adobe", version: "10.2.153.1", }, { model: "flash player", scope: "eq", trust: 0.3, vendor: "adobe", version: "10.2.152.33", }, { model: "flash player", scope: "eq", trust: 0.3, vendor: "adobe", version: "10.2.152.32", }, { model: "flash player", scope: "eq", trust: 0.3, vendor: "adobe", version: "10.2.152.26", }, { model: "flash player", scope: "eq", trust: 0.3, vendor: "adobe", version: "10.2.152.21", }, { model: "flash player", scope: "eq", trust: 0.3, vendor: "adobe", version: "10.2.152", }, { model: "flash player", scope: "eq", trust: 0.3, vendor: "adobe", version: "10.1.95.2", }, { model: "flash player", scope: "eq", trust: 0.3, vendor: "adobe", version: "10.1.95.1", }, { model: "flash player", scope: "eq", trust: 0.3, vendor: "adobe", version: "10.1.92.8", }, { model: "flash player", scope: "eq", trust: 0.3, vendor: "adobe", version: "10.1.92.10", }, { model: "flash player", scope: "eq", trust: 0.3, vendor: "adobe", version: "10.1.85.3", }, { model: "flash player", scope: "eq", trust: 0.3, vendor: "adobe", version: "10.1.82.76", }, { model: "flash player", scope: "eq", trust: 0.3, vendor: "adobe", version: "10.1.52.15", }, { model: "flash player", scope: "eq", trust: 0.3, vendor: "adobe", version: "10.1.52.14.1", }, { model: "flash player", scope: "eq", trust: 0.3, vendor: "adobe", version: "10.1.52.14", }, { model: "flash player", scope: "eq", trust: 0.3, vendor: "adobe", version: "10.1.106.17", }, { model: "flash player", scope: "eq", trust: 0.3, vendor: "adobe", version: "10.1.106.16", }, { model: "flash player", scope: "eq", trust: 0.3, vendor: "adobe", version: "10.1.105.6", }, { model: "flash player", scope: "eq", trust: 0.3, vendor: "adobe", version: "10.1.102.65", }, { model: "flash player", scope: "eq", trust: 0.3, vendor: "adobe", version: "10.1.102.64", }, { model: "flash player", scope: "eq", trust: 0.3, vendor: "adobe", version: "10.1", }, { model: "flash player", scope: "eq", trust: 0.3, vendor: "adobe", version: "10.0.42.34", }, { model: "flash player", scope: "eq", trust: 0.3, vendor: "adobe", version: "10.0.32.18", }, { model: "flash player", scope: "eq", trust: 0.3, vendor: "adobe", version: "10.0.2.54", }, { model: "flash player", scope: "eq", trust: 0.3, vendor: "adobe", version: "10", }, { model: "air sdk", scope: "eq", trust: 0.3, vendor: "adobe", version: "15.0356", }, { model: "air sdk", scope: "eq", trust: 0.3, vendor: "adobe", version: "14.0178", }, { model: "air sdk", scope: "eq", trust: 0.3, vendor: "adobe", version: "13.083", }, { model: "air sdk", scope: "eq", trust: 0.3, vendor: "adobe", version: "13.0111", }, { model: "air sdk", scope: "eq", trust: 0.3, vendor: "adobe", version: "4.0.0.1390", }, { model: "air sdk", scope: "eq", trust: 0.3, vendor: "adobe", version: "3.9.0.1380", }, { model: "air sdk", scope: "eq", trust: 0.3, vendor: "adobe", version: "17.0.0.144", }, { model: "air sdk", scope: "eq", trust: 0.3, vendor: "adobe", version: "16.0.0.272", }, { model: "air sdk", scope: "eq", trust: 0.3, vendor: "adobe", version: "15.0.0.302", }, { model: "air sdk", scope: "eq", trust: 0.3, vendor: "adobe", version: "15.0.0.249", }, { model: "air sdk", scope: "eq", trust: 0.3, vendor: "adobe", version: "14.0.0.179", }, { model: "air sdk", scope: "eq", trust: 0.3, vendor: "adobe", version: "14.0.0.137", }, { model: "air sdk", scope: "eq", trust: 0.3, vendor: "adobe", version: "14.0.0.110", }, { model: "air for android", scope: "eq", trust: 0.3, vendor: "adobe", version: "13.083", }, { model: "air for android", scope: "eq", trust: 0.3, vendor: "adobe", version: "4.0.0.1390", }, { model: "air for android", scope: "eq", trust: 0.3, vendor: "adobe", version: "3.9.0.1380", }, { model: "air for android", scope: "eq", trust: 0.3, vendor: "adobe", version: "17.0.0.144", }, { model: "air for android", scope: "eq", trust: 0.3, vendor: "adobe", version: "15.0.0.356", }, { model: "air for android", scope: "eq", trust: 0.3, vendor: "adobe", version: "15.0.0.293", }, { model: "air", scope: "eq", trust: 0.3, vendor: "adobe", version: "3.7.0.16600", }, { model: "air", scope: "eq", trust: 0.3, vendor: "adobe", version: "3.7.0.15300", }, { model: "air", scope: "eq", trust: 0.3, vendor: "adobe", version: "15.0356", }, { model: "air", scope: "eq", trust: 0.3, vendor: "adobe", version: "14.0179", }, { model: "air", scope: "eq", trust: 0.3, vendor: "adobe", version: "14.0178", }, { model: "air", scope: "eq", trust: 0.3, vendor: "adobe", version: "13.083", }, { model: "air", scope: "eq", trust: 0.3, vendor: "adobe", version: "13.0111", }, { model: "air", scope: "eq", trust: 0.3, vendor: "adobe", version: "4.01628", }, { model: "air", scope: "eq", trust: 0.3, vendor: "adobe", version: "3.71860", }, { model: "air", scope: "eq", trust: 0.3, vendor: "adobe", version: "3.71660", }, { model: "air", scope: "eq", trust: 0.3, vendor: "adobe", version: "3.71530", }, { model: "air", scope: "eq", trust: 0.3, vendor: "adobe", version: "3.33610", }, { model: "air", scope: "eq", trust: 0.3, vendor: "adobe", version: "2.0.4", }, { model: "air", scope: "eq", trust: 0.3, vendor: "adobe", version: "2.0.3", }, { model: "air", scope: "eq", trust: 0.3, vendor: "adobe", version: "1.5.3.9130", }, { model: "air", scope: "eq", trust: 0.3, vendor: "adobe", version: "1.5.3.9120", }, { model: "air", scope: "eq", trust: 0.3, vendor: "adobe", version: "1.5.3", }, { model: "air", scope: "eq", trust: 0.3, vendor: "adobe", version: "1.5.2", }, { model: "air", scope: "eq", trust: 0.3, vendor: "adobe", version: "1.5.1", }, { model: "air", scope: "eq", trust: 0.3, vendor: "adobe", version: "4.0.0.1390", }, { model: "air", scope: "eq", trust: 0.3, vendor: "adobe", version: "4", }, { model: "air", scope: "eq", trust: 0.3, vendor: "adobe", version: "3.9.0.1380", }, { model: "air", scope: "eq", trust: 0.3, vendor: "adobe", version: "3.9.0.1210", }, { model: "air", scope: "eq", trust: 0.3, vendor: "adobe", version: "3.9.0.1060", }, { model: "air", scope: "eq", trust: 0.3, vendor: "adobe", version: "3.9.0.1030", }, { model: "air", scope: "eq", trust: 0.3, vendor: "adobe", version: "3.8.0.910", }, { model: "air", scope: "eq", trust: 0.3, vendor: "adobe", version: "3.8.0.870", }, { model: "air", scope: "eq", trust: 0.3, vendor: "adobe", version: "3.8.0.1430", }, { model: "air", scope: "eq", trust: 0.3, vendor: "adobe", version: "3.7.0.2100", }, { model: "air", scope: "eq", trust: 0.3, vendor: "adobe", version: "3.7.0.2090", }, { model: "air", scope: "eq", trust: 0.3, vendor: "adobe", version: "3.6.0.6090", }, { model: "air", scope: "eq", trust: 0.3, vendor: "adobe", version: "3.6.0.599", }, { model: "air", scope: "eq", trust: 0.3, vendor: "adobe", version: "3.6.0.597", }, { model: "air", scope: "eq", trust: 0.3, vendor: "adobe", version: "3.5.0.890", }, { model: "air", scope: "eq", trust: 0.3, vendor: "adobe", version: "3.5.0.880", }, { model: "air", scope: "eq", trust: 0.3, vendor: "adobe", version: "3.5.0.600", }, { model: "air", scope: "eq", trust: 0.3, vendor: "adobe", version: "3.5.0.1060", }, { model: "air", scope: "eq", trust: 0.3, vendor: "adobe", version: "3.4.0.2710", }, { model: "air", scope: "eq", trust: 0.3, vendor: "adobe", version: "3.4.0.2540", }, { model: "air", scope: "eq", trust: 0.3, vendor: "adobe", version: "3.3.0.3690", }, { model: "air", scope: "eq", trust: 0.3, vendor: "adobe", version: "3.3.0.3670", }, { model: "air", scope: "eq", trust: 0.3, vendor: "adobe", version: "3.3.0.3650", }, { model: "air", scope: "eq", trust: 0.3, vendor: "adobe", version: "3.2.0.2080", }, { model: "air", scope: "eq", trust: 0.3, vendor: "adobe", version: "3.2.0.2070", }, { model: "air", scope: "eq", trust: 0.3, vendor: "adobe", version: "3.2.0.207", }, { model: "air", scope: "eq", trust: 0.3, vendor: "adobe", version: "3.1.0.4880", }, { model: "air", scope: "eq", trust: 0.3, vendor: "adobe", version: "3.1.0.488", }, { model: "air", scope: "eq", trust: 0.3, vendor: "adobe", version: "3.1.0.485", }, { model: "air", scope: "eq", trust: 0.3, vendor: "adobe", version: "3.0.0.4080", }, { model: "air", scope: "eq", trust: 0.3, vendor: "adobe", version: "3.0.0.408", }, { model: "air", scope: "eq", trust: 0.3, vendor: "adobe", version: "3.0", }, { model: "air", scope: "eq", trust: 0.3, vendor: "adobe", version: "2.7.1.19610", }, { model: "air", scope: "eq", trust: 0.3, vendor: "adobe", version: "2.7.1.1961", }, { model: "air", scope: "eq", trust: 0.3, vendor: "adobe", version: "2.7.1", }, { model: "air", scope: "eq", trust: 0.3, vendor: "adobe", version: "2.7.0.19530", }, { model: "air", scope: "eq", trust: 0.3, vendor: "adobe", version: "2.7.0.1953", }, { model: "air", scope: "eq", trust: 0.3, vendor: "adobe", version: "2.7.0.19480", }, { model: "air", scope: "eq", trust: 0.3, vendor: "adobe", version: "2.7.0.1948", }, { model: "air", scope: "eq", trust: 0.3, vendor: "adobe", version: "2.7", }, { model: "air", scope: "eq", trust: 0.3, vendor: "adobe", version: "2.6.19140", }, { model: "air", scope: "eq", trust: 0.3, vendor: "adobe", version: "2.6.19120", }, { model: "air", scope: "eq", trust: 0.3, vendor: "adobe", version: "2.6.0.19140", }, { model: "air", scope: "eq", trust: 0.3, vendor: "adobe", version: "2.6.0.19120", }, { model: "air", scope: "eq", trust: 0.3, vendor: "adobe", version: "2.6", }, { model: "air", scope: "eq", trust: 0.3, vendor: "adobe", version: "2.5.1.17730", }, { model: "air", scope: "eq", trust: 0.3, vendor: "adobe", version: "2.5.1", }, { model: "air", scope: "eq", trust: 0.3, vendor: "adobe", version: "2.5.0.16600", }, { model: "air", scope: "eq", trust: 0.3, vendor: "adobe", version: "2.0.3.13070", }, { model: "air", scope: "eq", trust: 0.3, vendor: "adobe", version: "2.0.2.12610", }, { model: "air", scope: "eq", trust: 0.3, vendor: "adobe", version: "2.0.2", }, { model: "air", scope: "eq", trust: 0.3, vendor: "adobe", version: "17.0.0.144", }, { model: "air", scope: "eq", trust: 0.3, vendor: "adobe", version: "16.0.0.272", }, { model: "air", scope: "eq", trust: 0.3, vendor: "adobe", version: "16.0.0.245", }, { model: "air", scope: "eq", trust: 0.3, vendor: "adobe", version: "15.0.0.293", }, { model: "air", scope: "eq", trust: 0.3, vendor: "adobe", version: "15.0.0.252", }, { model: "air", scope: "eq", trust: 0.3, vendor: "adobe", version: "15.0.0.249", }, { model: "air", scope: "eq", trust: 0.3, vendor: "adobe", version: "14.0.0.137", }, { model: "air", scope: "eq", trust: 0.3, vendor: "adobe", version: "14.0.0.110", }, { model: "air", scope: "eq", trust: 0.3, vendor: "adobe", version: "1.5.1.8210", }, { model: "air", scope: "eq", trust: 0.3, vendor: "adobe", version: "1.5.0.7220", }, { model: "air", scope: "eq", trust: 0.3, vendor: "adobe", version: "1.5", }, { model: "air", scope: "eq", trust: 0.3, vendor: "adobe", version: "1.1.0.5790", }, { model: "air", scope: "eq", trust: 0.3, vendor: "adobe", version: "1.1", }, { model: "air", scope: "eq", trust: 0.3, vendor: "adobe", version: "1.01", }, { model: "air", scope: "eq", trust: 0.3, vendor: "adobe", version: "1.0.8.4990", }, { model: "air", scope: "eq", trust: 0.3, vendor: "adobe", version: "1.0.4990", }, { model: "air", scope: "eq", trust: 0.3, vendor: "adobe", version: "1.0.1", }, { model: "air", scope: "eq", trust: 0.3, vendor: "adobe", version: "1.0", }, { model: "flash player", scope: "ne", trust: 0.3, vendor: "adobe", version: "18.0.0.233", }, { model: "flash player", scope: "ne", trust: 0.3, vendor: "adobe", version: "18.0.0.232", }, { model: "flash player", scope: "ne", trust: 0.3, vendor: "adobe", version: "11.2.202.508", }, { model: "air for android", scope: "ne", trust: 0.3, vendor: "adobe", version: "18.0.0.143", }, ], sources: [ { db: "BID", id: "75087", }, { db: "JVNDB", id: "JVNDB-2015-002988", }, { db: "CNNVD", id: "CNNVD-201506-190", }, { db: "NVD", id: "CVE-2015-3107", }, ], }, configurations: { "@context": { "@vocab": "https://www.variotdbs.pl/ref/configurations#", children: { "@container": "@list", }, cpe_match: { "@container": "@list", }, data: { "@container": "@list", }, nodes: { "@container": "@list", }, }, data: [ { CVE_data_version: "4.0", nodes: [ { cpe_match: [ { cpe22Uri: "cpe:/a:google:chrome", vulnerable: true, }, { cpe22Uri: "cpe:/a:adobe:adobe_air", vulnerable: true, }, { cpe22Uri: "cpe:/a:adobe:adobe_air_sdk", vulnerable: true, }, { cpe22Uri: "cpe:/a:adobe:adobe_air_sdk_and_compiler", vulnerable: true, }, { cpe22Uri: "cpe:/a:adobe:flash_player", vulnerable: true, }, { cpe22Uri: "cpe:/a:microsoft:edge", vulnerable: true, }, { cpe22Uri: "cpe:/a:microsoft:internet_explorer", vulnerable: true, }, ], operator: "OR", }, ], }, ], sources: [ { db: "JVNDB", id: "JVNDB-2015-002988", }, ], }, credits: { "@context": { "@vocab": "https://www.variotdbs.pl/ref/credits#", sources: { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#", }, }, }, data: "Wen Guanxing from Venustech ADLAB, Natalie Silvanovich of Google Project Zero and bilou (working with the Chromium Vulnerability Reward Program)", sources: [ { db: "BID", id: "75087", }, ], trust: 0.3, }, cve: "CVE-2015-3107", cvss: { "@context": { cvssV2: { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#", }, "@id": "https://www.variotdbs.pl/ref/cvss/cvssV2", }, cvssV3: { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#", }, "@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/", }, severity: { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/cvss/severity#", }, "@id": "https://www.variotdbs.pl/ref/cvss/severity", }, sources: { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#", }, "@id": "https://www.variotdbs.pl/ref/sources", }, }, data: [ { cvssV2: [ { accessComplexity: "LOW", accessVector: "NETWORK", authentication: "NONE", author: "nvd@nist.gov", availabilityImpact: "COMPLETE", baseScore: 10, confidentialityImpact: "COMPLETE", exploitabilityScore: 10, id: "CVE-2015-3107", impactScore: 10, integrityImpact: "COMPLETE", severity: "HIGH", trust: 1.9, vectorString: "AV:N/AC:L/Au:N/C:C/I:C/A:C", version: "2.0", }, { accessComplexity: "LOW", accessVector: "NETWORK", authentication: "NONE", author: "VULHUB", availabilityImpact: "COMPLETE", baseScore: 10, confidentialityImpact: "COMPLETE", exploitabilityScore: 10, id: "VHN-81068", impactScore: 10, integrityImpact: "COMPLETE", severity: "HIGH", trust: 0.1, vectorString: "AV:N/AC:L/AU:N/C:C/I:C/A:C", version: "2.0", }, ], cvssV3: [], severity: [ { author: "nvd@nist.gov", id: "CVE-2015-3107", trust: 1, value: "HIGH", }, { author: "NVD", id: "CVE-2015-3107", trust: 0.8, value: "High", }, { author: "CNNVD", id: "CNNVD-201506-190", trust: 0.6, value: "CRITICAL", }, { author: "VULHUB", id: "VHN-81068", trust: 0.1, value: "HIGH", }, { author: "VULMON", id: "CVE-2015-3107", trust: 0.1, value: "HIGH", }, ], }, ], sources: [ { db: "VULHUB", id: "VHN-81068", }, { db: "VULMON", id: "CVE-2015-3107", }, { db: "JVNDB", id: "JVNDB-2015-002988", }, { db: "CNNVD", id: "CNNVD-201506-190", }, { db: "NVD", id: "CVE-2015-3107", }, ], }, description: { "@context": { "@vocab": "https://www.variotdbs.pl/ref/description#", sources: { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#", }, }, }, data: "Use-after-free vulnerability in Adobe Flash Player before 13.0.0.292 and 14.x through 18.x before 18.0.0.160 on Windows and OS X and before 11.2.202.466 on Linux, Adobe AIR before 18.0.0.144 on Windows and before 18.0.0.143 on OS X and Android, Adobe AIR SDK before 18.0.0.144 on Windows and before 18.0.0.143 on OS X, and Adobe AIR SDK & Compiler before 18.0.0.144 on Windows and before 18.0.0.143 on OS X allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-3103 and CVE-2015-3106. Adobe Flash Player and Adobe AIR Use freed memory (Use-after-free) May allow arbitrary code execution vulnerabilities. This vulnerability CVE-2015-3103 and CVE-2015-3106 Is a different vulnerability. Supplementary information : CWE Vulnerability type by CWE-416: Use-after-free ( Use of freed memory ) Has been identified. http://cwe.mitre.org/data/definitions/416.htmlAn attacker could execute arbitrary code. Failed exploit attempts will likely cause a denial-of-service condition. Adobe Flash Player, Adobe AIR SDK and Adobe AIR SDK & Compiler are all products of American Adobe (Adobe). A use-after-free vulnerability exists in several Adobe products. -----BEGIN PGP SIGNED MESSAGE-----\nHash: SHA1\n\n=====================================================================\n Red Hat Security Advisory\n\nSynopsis: Critical: flash-plugin security update\nAdvisory ID: RHSA-2015:1086-01\nProduct: Red Hat Enterprise Linux Supplementary\nAdvisory URL: https://rhn.redhat.com/errata/RHSA-2015-1086.html\nIssue date: 2015-06-10\nCVE Names: CVE-2015-3096 CVE-2015-3098 CVE-2015-3099 \n CVE-2015-3100 CVE-2015-3102 CVE-2015-3103 \n CVE-2015-3104 CVE-2015-3105 CVE-2015-3106 \n CVE-2015-3107 CVE-2015-3108 \n=====================================================================\n\n1. Summary:\n\nAn updated Adobe Flash Player package that fixes multiple security issues\nis now available for Red Hat Enterprise Linux 5 and 6 Supplementary. \n\nRed Hat Product Security has rated this update as having Critical security\nimpact. Common Vulnerability Scoring System (CVSS) base scores, which give\ndetailed severity ratings, are available for each vulnerability from the\nCVE links in the References section. \n\n2. Relevant releases/architectures:\n\nRed Hat Enterprise Linux Desktop Supplementary (v. 5) - i386, x86_64\nRed Hat Enterprise Linux Desktop Supplementary (v. 6) - i386, x86_64\nRed Hat Enterprise Linux Server Supplementary (v. 5) - i386, x86_64\nRed Hat Enterprise Linux Server Supplementary (v. 6) - i386, x86_64\nRed Hat Enterprise Linux Workstation Supplementary (v. 6) - i386, x86_64\n\n3. Description:\n\nThe flash-plugin package contains a Mozilla Firefox compatible Adobe Flash\nPlayer web browser plug-in. These\nvulnerabilities are detailed in the Adobe Security Bulletin APSB15-11\nlisted in the References section. \n\nMultiple flaws were found in the way flash-plugin displayed certain SWF\ncontent. An attacker could use these flaws to create a specially crafted\nSWF file that would cause flash-plugin to crash or, potentially, execute\narbitrary code when the victim loaded a page containing the malicious SWF\ncontent. (CVE-2015-3100, CVE-2015-3103, CVE-2015-3104, CVE-2015-3105,\nCVE-2015-3106, CVE-2015-3107)\n\nMultiple security bypass flaws were found in flash-plugin that could lead\nto the disclosure of sensitive information. (CVE-2015-3096, CVE-2015-3098,\nCVE-2015-3099, CVE-2015-3102)\n\nA memory information leak flaw was found in flash-plugin that could\nallow an attacker to potentially bypass ASLR (Address Space Layout\nRandomization) protection, and make it easier to exploit other flaws. \n(CVE-2015-3108)\n\nAll users of Adobe Flash Player should install this updated package, which\nupgrades Flash Player to version 11.2.202.466. \n\n4. Solution:\n\nBefore applying this update, make sure all previously released errata\nrelevant to your system have been applied. \n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258\n\n5. Bugs fixed (https://bugzilla.redhat.com/):\n\n1229879 - CVE-2015-3100 CVE-2015-3103 CVE-2015-3104 CVE-2015-3105 CVE-2015-3106 CVE-2015-3107 flash-plugin: multiple code execution issues fixed in APSB15-11\n1230185 - CVE-2015-3096 flash-plugin: cross-site request forgery against JSONP endpoints fixed in APSB15-11 (incomplete fix for CVE-2014-5333)\n1230189 - CVE-2015-3098 CVE-2015-3099 CVE-2015-3102 flash-plugin: same-origin-policy bypass fixed in APSB15-11\n1230201 - CVE-2015-3108 flash-plugin: information leak leading to ASLR bypass (APSB15-11)\n\n6. Package List:\n\nRed Hat Enterprise Linux Desktop Supplementary (v. 5):\n\ni386:\nflash-plugin-11.2.202.466-1.el5.i386.rpm\n\nx86_64:\nflash-plugin-11.2.202.466-1.el5.i386.rpm\n\nRed Hat Enterprise Linux Server Supplementary (v. 5):\n\ni386:\nflash-plugin-11.2.202.466-1.el5.i386.rpm\n\nx86_64:\nflash-plugin-11.2.202.466-1.el5.i386.rpm\n\nRed Hat Enterprise Linux Desktop Supplementary (v. 6):\n\ni386:\nflash-plugin-11.2.202.466-1.el6_6.i686.rpm\n\nx86_64:\nflash-plugin-11.2.202.466-1.el6_6.i686.rpm\n\nRed Hat Enterprise Linux Server Supplementary (v. 6):\n\ni386:\nflash-plugin-11.2.202.466-1.el6_6.i686.rpm\n\nx86_64:\nflash-plugin-11.2.202.466-1.el6_6.i686.rpm\n\nRed Hat Enterprise Linux Workstation Supplementary (v. 6):\n\ni386:\nflash-plugin-11.2.202.466-1.el6_6.i686.rpm\n\nx86_64:\nflash-plugin-11.2.202.466-1.el6_6.i686.rpm\n\nThese packages are GPG signed by Red Hat for security. Our key and\ndetails on how to verify the signature are available from\nhttps://access.redhat.com/security/team/key/\n\n7. References:\n\nhttps://access.redhat.com/security/cve/CVE-2015-3096\nhttps://access.redhat.com/security/cve/CVE-2015-3098\nhttps://access.redhat.com/security/cve/CVE-2015-3099\nhttps://access.redhat.com/security/cve/CVE-2015-3100\nhttps://access.redhat.com/security/cve/CVE-2015-3102\nhttps://access.redhat.com/security/cve/CVE-2015-3103\nhttps://access.redhat.com/security/cve/CVE-2015-3104\nhttps://access.redhat.com/security/cve/CVE-2015-3105\nhttps://access.redhat.com/security/cve/CVE-2015-3106\nhttps://access.redhat.com/security/cve/CVE-2015-3107\nhttps://access.redhat.com/security/cve/CVE-2015-3108\nhttps://access.redhat.com/security/updates/classification/#critical\nhttps://helpx.adobe.com/security/products/flash-player/apsb15-11.html\n\n8. Contact:\n\nThe Red Hat security contact is <secalert@redhat.com>. More contact\ndetails at https://access.redhat.com/security/team/contact/\n\nCopyright 2015 Red Hat, Inc. \n-----BEGIN PGP SIGNATURE-----\nVersion: GnuPG v1\n\niD8DBQFVeE7EXlSAg2UNWIIRAlOpAJ9RuYMo4MW/E5iT60nzKf7DrOrZjwCgoZXa\nu416jfOUFziDYbxIZyHYjaI=\n=EMNe\n-----END PGP SIGNATURE-----\n\n\n--\nRHSA-announce mailing list\nRHSA-announce@redhat.com\nhttps://www.redhat.com/mailman/listinfo/rhsa-announce\n. \n\nBackground\n==========\n\nThe Adobe Flash Player is a renderer for the SWF file format, which is\ncommonly used to provide interactive websites. \nPlease review the CVE identifiers referenced below for details. \n\nImpact\n======\n\nA remote attacker could possibly execute arbitrary code with the\nprivileges of the process, cause a Denial of Service condition, obtain\nsensitive information, or bypass security restrictions. \n\nWorkaround\n==========\n\nThere is no known workaround at this time. \n\nResolution\n==========\n\nAll Adobe Flash Player users should upgrade to the latest version:\n\n # emerge --sync\n # emerge --ask --oneshot -v \">=www-plugins/adobe-flash-11.2.202.466\"\n\nReferences\n==========\n\n[ 1 ] CVE-2015-3096\n http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-3096\n[ 2 ] CVE-2015-3097\n http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-3097\n[ 3 ] CVE-2015-3098\n http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-3098\n[ 4 ] CVE-2015-3099\n http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-3099\n[ 5 ] CVE-2015-3100\n http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-3100\n[ 6 ] CVE-2015-3101\n http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-3101\n[ 7 ] CVE-2015-3102\n http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-3102\n[ 8 ] CVE-2015-3103\n http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-3103\n[ 9 ] CVE-2015-3104\n http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-3104\n[ 10 ] CVE-2015-3105\n http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-3105\n[ 11 ] CVE-2015-3106\n http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-3106\n[ 12 ] CVE-2015-3107\n http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-3107\n[ 13 ] CVE-2015-3108\n http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-3108\n[ 14 ] CVE-2015-4472\n http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-4472\n\nAvailability\n============\n\nThis GLSA and any updates to it are available for viewing at\nthe Gentoo Security Website:\n\n https://security.gentoo.org/glsa/201506-01\n\nConcerns?\n=========\n\nSecurity is a primary focus of Gentoo Linux and ensuring the\nconfidentiality and security of our users' machines is of utmost\nimportance to us. Any security concerns should be addressed to\nsecurity@gentoo.org or alternatively, you may file a bug at\nhttps://bugs.gentoo.org. \n\nLicense\n=======\n\nCopyright 2015 Gentoo Foundation, Inc; referenced text\nbelongs to its owner(s). \n\nThe contents of this document are licensed under the\nCreative Commons - Attribution / Share Alike license. \n\nhttp://creativecommons.org/licenses/by-sa/2.5\n\n\n", sources: [ { db: "NVD", id: "CVE-2015-3107", }, { db: "JVNDB", id: "JVNDB-2015-002988", }, { db: "BID", id: "75087", }, { db: "VULHUB", id: "VHN-81068", }, { db: "VULMON", id: "CVE-2015-3107", }, { db: "PACKETSTORM", id: "133099", }, { db: "PACKETSTORM", id: "132252", }, { db: "PACKETSTORM", id: "132396", }, ], trust: 2.34, }, exploit_availability: { "@context": { "@vocab": "https://www.variotdbs.pl/ref/exploit_availability#", data: { "@container": "@list", }, sources: { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#", }, }, }, data: [ { reference: "https://www.scap.org.cn/vuln/vhn-81068", trust: 0.1, type: "unknown", }, { reference: "https://vulmon.com/exploitdetails?qidtp=exploitdb&qid=37850", trust: 0.1, type: "exploit", }, ], sources: [ { db: "VULHUB", id: "VHN-81068", }, { db: "VULMON", id: "CVE-2015-3107", }, ], }, external_ids: { "@context": { "@vocab": "https://www.variotdbs.pl/ref/external_ids#", data: { "@container": "@list", }, sources: { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#", }, }, }, data: [ { db: "NVD", id: "CVE-2015-3107", trust: 3.2, }, { db: "BID", id: "75087", trust: 1.5, }, { db: "SECTRACK", id: "1032519", trust: 1.2, }, { db: "EXPLOIT-DB", id: "37850", trust: 1.2, }, { db: "JVNDB", id: "JVNDB-2015-002988", trust: 0.8, }, { db: "CNNVD", id: "CNNVD-201506-190", trust: 0.7, }, { db: "PACKETSTORM", id: "133099", trust: 0.2, }, { db: "PACKETSTORM", id: "133177", trust: 0.1, }, { db: "VULHUB", id: "VHN-81068", trust: 0.1, }, { db: "VULMON", id: "CVE-2015-3107", trust: 0.1, }, { db: "PACKETSTORM", id: "132252", trust: 0.1, }, { db: "PACKETSTORM", id: "132396", trust: 0.1, }, ], sources: [ { db: "VULHUB", id: "VHN-81068", }, { db: "VULMON", id: "CVE-2015-3107", }, { db: "BID", id: "75087", }, { db: "JVNDB", id: "JVNDB-2015-002988", }, { db: "PACKETSTORM", id: "133099", }, { db: "PACKETSTORM", id: "132252", }, { db: "PACKETSTORM", id: "132396", }, { db: "CNNVD", id: "CNNVD-201506-190", }, { db: "NVD", id: "CVE-2015-3107", }, ], }, id: "VAR-201506-0073", iot: { "@context": { "@vocab": "https://www.variotdbs.pl/ref/iot#", sources: { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#", }, }, }, data: true, sources: [ { db: "VULHUB", id: "VHN-81068", }, ], trust: 0.01, }, last_update_date: "2024-11-23T21:13:13.952000Z", patch: { "@context": { "@vocab": "https://www.variotdbs.pl/ref/patch#", data: { "@container": "@list", }, sources: { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#", }, }, }, data: [ { title: "APSB15-11", trust: 0.8, url: "http://helpx.adobe.com/security/products/flash-player/apsb15-11.html", }, { title: "APSB15-19", trust: 0.8, url: "https://helpx.adobe.com/security/products/flash-player/apsb15-19.html", }, { title: "APSB15-11", trust: 0.8, url: "http://helpx.adobe.com/jp/security/products/flash-player/apsb15-11.html", }, { title: "APSB15-19", trust: 0.8, url: "https://helpx.adobe.com/jp/security/products/flash-player/apsb15-19.html", }, { title: "Chrome Releases", trust: 0.8, url: "http://googlechromereleases.blogspot.jp/", }, { title: "Google Chrome を更新する", trust: 0.8, url: "https://support.google.com/chrome/answer/95414?hl=ja", }, { title: "Google Chrome", trust: 0.8, url: "https://www.google.com/intl/ja/chrome/browser/features.html", }, { title: "Update for Vulnerabilities in Adobe Flash Player in Internet Explorer and Microsoft Edge (2755801)", trust: 0.8, url: "https://technet.microsoft.com/en-us/library/security/2755801", }, { title: "Internet Explorer および Microsoft Edge 上の Adobe Flash Player の脆弱性に対応する更新プログラム (2755801)", trust: 0.8, url: "https://technet.microsoft.com/ja-jp/library/security/2755801", }, { title: "アドビ システムズ社 Adobe Flash Player の脆弱性に関するお知らせ (2015年6月11日)", trust: 0.8, url: "http://www.fmworld.net/biz/common/adobe/20150611f.html", }, { title: "アドビ システムズ社 Adobe Flash Player の脆弱性に関するお知らせ (2015年8月13日)", trust: 0.8, url: "http://www.fmworld.net/biz/common/adobe/20150813f.html", }, { title: "Red Hat: CVE-2015-3107", trust: 0.1, url: "https://vulmon.com/vendoradvisory?qidtp=red_hat_cve_database&qid=CVE-2015-3107", }, { title: "CVE-Study", trust: 0.1, url: "https://github.com/thdusdl1219/CVE-Study ", }, ], sources: [ { db: "VULMON", id: "CVE-2015-3107", }, { db: "JVNDB", id: "JVNDB-2015-002988", }, ], }, problemtype_data: { "@context": { "@vocab": "https://www.variotdbs.pl/ref/problemtype_data#", sources: { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#", }, }, }, data: [ { problemtype: "CWE-416", trust: 1.1, }, { problemtype: "NVD-CWE-Other", trust: 1, }, { problemtype: "CWE-Other", trust: 0.8, }, ], sources: [ { db: "VULHUB", id: "VHN-81068", }, { db: "JVNDB", id: "JVNDB-2015-002988", }, { db: "NVD", id: "CVE-2015-3107", }, ], }, references: { "@context": { "@vocab": "https://www.variotdbs.pl/ref/references#", data: { "@container": "@list", }, sources: { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#", }, }, }, data: [ { trust: 1.9, url: "https://helpx.adobe.com/security/products/flash-player/apsb15-11.html", }, { trust: 1.3, url: "https://www.exploit-db.com/exploits/37850/", }, { trust: 1.3, url: "https://security.gentoo.org/glsa/201506-01", }, { trust: 1.3, url: "https://security.gentoo.org/glsa/201508-01", }, { trust: 1.3, url: "http://rhn.redhat.com/errata/rhsa-2015-1086.html", }, { trust: 1.2, url: "http://www.securityfocus.com/bid/75087", }, { trust: 1.2, url: "http://www.securitytracker.com/id/1032519", }, { trust: 1.2, url: "http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00005.html", }, { trust: 1.2, url: "http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00009.html", }, { trust: 1.2, url: "http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00011.html", }, { trust: 1.2, url: "http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00018.html", }, { trust: 0.8, url: "http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2015-3107", }, { trust: 0.8, url: "http://www.ipa.go.jp/security/ciadr/vul/20150812-adobeflashplayer.html", }, { trust: 0.8, url: "http://www.ipa.go.jp/security/ciadr/vul/20150610-adobeflashplayer.html", }, { trust: 0.8, url: "http://www.jpcert.or.jp/at/2015/at150017.html", }, { trust: 0.8, url: "http://www.jpcert.or.jp/at/2015/at150029.html", }, { trust: 0.8, url: "http://web.nvd.nist.gov/view/vuln/detail?vulnid=cve-2015-3107", }, { trust: 0.8, url: "http://www.npa.go.jp/cyberpolice/topics/?seq=16444", }, { trust: 0.8, url: "http://www.npa.go.jp/cyberpolice/topics/?seq=16704", }, { trust: 0.3, url: "http://www.adobe.com", }, { trust: 0.3, url: "https://nvd.nist.gov/vuln/detail/cve-2015-3107", }, { trust: 0.2, url: "https://security.gentoo.org/", }, { trust: 0.2, url: "http://creativecommons.org/licenses/by-sa/2.5", }, { trust: 0.2, url: "http://nvd.nist.gov/nvd.cfm?cvename=cve-2015-3107", }, { trust: 0.2, url: "https://bugs.gentoo.org.", }, { trust: 0.2, url: "https://nvd.nist.gov/vuln/detail/cve-2015-3102", }, { trust: 0.2, url: "https://nvd.nist.gov/vuln/detail/cve-2015-3096", }, { trust: 0.2, url: "https://nvd.nist.gov/vuln/detail/cve-2015-3103", }, { trust: 0.2, url: "https://nvd.nist.gov/vuln/detail/cve-2015-3099", }, { trust: 0.2, url: "https://nvd.nist.gov/vuln/detail/cve-2015-3106", }, { trust: 0.2, url: "https://nvd.nist.gov/vuln/detail/cve-2015-3104", }, { trust: 0.2, url: "https://nvd.nist.gov/vuln/detail/cve-2015-3105", }, { trust: 0.2, url: "https://nvd.nist.gov/vuln/detail/cve-2015-3108", }, { trust: 0.2, url: "https://nvd.nist.gov/vuln/detail/cve-2015-3098", }, { trust: 0.2, url: "https://nvd.nist.gov/vuln/detail/cve-2015-3100", }, { trust: 0.1, url: "https://cwe.mitre.org/data/definitions/.html", }, { trust: 0.1, url: "https://cwe.mitre.org/data/definitions/416.html", }, { trust: 0.1, url: "http://tools.cisco.com/security/center/viewalert.x?alertid=40667", }, { trust: 0.1, url: "https://nvd.nist.gov", }, { trust: 0.1, url: "https://nvd.nist.gov/vuln/detail/cve-2015-5540", }, { trust: 0.1, url: "http://nvd.nist.gov/nvd.cfm?cvename=cve-2015-5551", }, { trust: 0.1, url: "http://nvd.nist.gov/nvd.cfm?cvename=cve-2015-5134", }, { trust: 0.1, url: "http://nvd.nist.gov/nvd.cfm?cvename=cve-2015-5557", }, { trust: 0.1, url: "http://nvd.nist.gov/nvd.cfm?cvename=cve-2015-5560", }, { trust: 0.1, url: "https://nvd.nist.gov/vuln/detail/cve-2015-5134", }, { trust: 0.1, url: "https://nvd.nist.gov/vuln/detail/cve-2015-5550", }, { trust: 0.1, url: "http://nvd.nist.gov/nvd.cfm?cvename=cve-2015-5561", }, { trust: 0.1, url: "http://nvd.nist.gov/nvd.cfm?cvename=cve-2015-5548", }, { trust: 0.1, url: "http://nvd.nist.gov/nvd.cfm?cvename=cve-2015-5130", }, { trust: 0.1, url: "http://nvd.nist.gov/nvd.cfm?cvename=cve-2015-5131", }, { trust: 0.1, url: "https://nvd.nist.gov/vuln/detail/cve-2015-5123", }, { trust: 0.1, url: "http://nvd.nist.gov/nvd.cfm?cvename=cve-2015-5123", }, { trust: 0.1, url: "http://nvd.nist.gov/nvd.cfm?cvename=cve-2015-5563", }, { trust: 0.1, url: "https://nvd.nist.gov/vuln/detail/cve-2015-5553", }, { trust: 0.1, url: "https://nvd.nist.gov/vuln/detail/cve-2015-5132", }, { trust: 0.1, url: "http://nvd.nist.gov/nvd.cfm?cvename=cve-2015-5550", }, { trust: 0.1, url: "http://nvd.nist.gov/nvd.cfm?cvename=cve-2015-5129", }, { trust: 0.1, url: "https://nvd.nist.gov/vuln/detail/cve-2015-5556", }, { trust: 0.1, url: "http://nvd.nist.gov/nvd.cfm?cvename=cve-2015-5564", }, { trust: 0.1, url: "https://nvd.nist.gov/vuln/detail/cve-2015-5125", }, { trust: 0.1, url: "http://nvd.nist.gov/nvd.cfm?cvename=cve-2015-5552", }, { trust: 0.1, url: "http://nvd.nist.gov/nvd.cfm?cvename=cve-2015-5554", }, { trust: 0.1, url: "https://nvd.nist.gov/vuln/detail/cve-2015-5545", }, { trust: 0.1, url: "https://nvd.nist.gov/vuln/detail/cve-2015-5554", }, { trust: 0.1, url: "https://nvd.nist.gov/vuln/detail/cve-2015-5131", }, { trust: 0.1, url: "http://nvd.nist.gov/nvd.cfm?cvename=cve-2015-5133", }, { trust: 0.1, url: "https://nvd.nist.gov/vuln/detail/cve-2015-5124", }, { trust: 0.1, url: "https://nvd.nist.gov/vuln/detail/cve-2015-5129", }, { trust: 0.1, url: "http://nvd.nist.gov/nvd.cfm?cvename=cve-2015-5544", }, { trust: 0.1, url: "https://nvd.nist.gov/vuln/detail/cve-2015-5539", }, { trust: 0.1, url: "http://nvd.nist.gov/nvd.cfm?cvename=cve-2015-5547", }, { trust: 0.1, url: "http://nvd.nist.gov/nvd.cfm?cvename=cve-2015-5122", }, { trust: 0.1, url: "http://nvd.nist.gov/nvd.cfm?cvename=cve-2015-5125", }, { trust: 0.1, url: "https://nvd.nist.gov/vuln/detail/cve-2015-5133", }, { trust: 0.1, url: "https://nvd.nist.gov/vuln/detail/cve-2015-5546", }, { trust: 0.1, url: "https://nvd.nist.gov/vuln/detail/cve-2015-5555", }, { trust: 0.1, url: "https://nvd.nist.gov/vuln/detail/cve-2015-5551", }, { trust: 0.1, url: "https://nvd.nist.gov/vuln/detail/cve-2015-5122", }, { trust: 0.1, url: "http://nvd.nist.gov/nvd.cfm?cvename=cve-2015-5553", }, { trust: 0.1, url: "http://nvd.nist.gov/nvd.cfm?cvename=cve-2015-5562", }, { trust: 0.1, url: "https://nvd.nist.gov/vuln/detail/cve-2015-5544", }, { trust: 0.1, url: "https://nvd.nist.gov/vuln/detail/cve-2015-5127", }, { trust: 0.1, url: "http://nvd.nist.gov/nvd.cfm?cvename=cve-2015-5132", }, { trust: 0.1, url: "https://nvd.nist.gov/vuln/detail/cve-2015-5552", }, { trust: 0.1, url: "http://nvd.nist.gov/nvd.cfm?cvename=cve-2015-5541", }, { trust: 0.1, url: "https://nvd.nist.gov/vuln/detail/cve-2015-5547", }, { trust: 0.1, url: "https://nvd.nist.gov/vuln/detail/cve-2015-5548", }, { trust: 0.1, url: "http://nvd.nist.gov/nvd.cfm?cvename=cve-2015-5556", }, { trust: 0.1, url: "https://nvd.nist.gov/vuln/detail/cve-2015-5549", }, { trust: 0.1, url: "http://nvd.nist.gov/nvd.cfm?cvename=cve-2015-5127", }, { trust: 0.1, url: "http://nvd.nist.gov/nvd.cfm?cvename=cve-2015-5539", }, { trust: 0.1, url: "http://nvd.nist.gov/nvd.cfm?cvename=cve-2015-5540", }, { trust: 0.1, url: "http://nvd.nist.gov/nvd.cfm?cvename=cve-2015-5558", }, { trust: 0.1, url: "http://nvd.nist.gov/nvd.cfm?cvename=cve-2015-5124", }, { trust: 0.1, url: "http://nvd.nist.gov/nvd.cfm?cvename=cve-2015-5545", }, { trust: 0.1, url: "http://nvd.nist.gov/nvd.cfm?cvename=cve-2015-5546", }, { trust: 0.1, url: "http://nvd.nist.gov/nvd.cfm?cvename=cve-2015-5559", }, { trust: 0.1, url: "https://nvd.nist.gov/vuln/detail/cve-2015-5130", }, { trust: 0.1, url: "https://nvd.nist.gov/vuln/detail/cve-2015-5541", }, { trust: 0.1, url: "http://nvd.nist.gov/nvd.cfm?cvename=cve-2015-5555", }, { trust: 0.1, url: "http://nvd.nist.gov/nvd.cfm?cvename=cve-2015-5965", }, { trust: 0.1, url: "http://nvd.nist.gov/nvd.cfm?cvename=cve-2015-5549", }, { trust: 0.1, url: "https://access.redhat.com/security/cve/cve-2015-3099", }, { trust: 0.1, url: "https://access.redhat.com/security/updates/classification/#critical", }, { trust: 0.1, url: "https://access.redhat.com/security/cve/cve-2015-3106", }, { trust: 0.1, url: "https://access.redhat.com/security/cve/cve-2015-3100", }, { trust: 0.1, url: "https://access.redhat.com/security/cve/cve-2015-3096", }, { trust: 0.1, url: "https://access.redhat.com/security/cve/cve-2015-3103", }, { trust: 0.1, url: "https://access.redhat.com/security/cve/cve-2015-3107", }, { trust: 0.1, url: "https://access.redhat.com/articles/11258", }, { trust: 0.1, url: "https://access.redhat.com/security/team/contact/", }, { trust: 0.1, url: "https://www.redhat.com/mailman/listinfo/rhsa-announce", }, { trust: 0.1, url: "https://access.redhat.com/security/cve/cve-2015-3104", }, { trust: 0.1, url: "https://access.redhat.com/security/cve/cve-2015-3098", }, { trust: 0.1, url: "https://access.redhat.com/security/cve/cve-2015-3108", }, { trust: 0.1, url: "https://bugzilla.redhat.com/):", }, { trust: 0.1, url: "https://access.redhat.com/security/cve/cve-2015-3105", }, { trust: 0.1, url: "https://access.redhat.com/security/cve/cve-2015-3102", }, { trust: 0.1, url: "https://access.redhat.com/security/team/key/", }, { trust: 0.1, url: "http://nvd.nist.gov/nvd.cfm?cvename=cve-2015-3108", }, { trust: 0.1, url: "http://nvd.nist.gov/nvd.cfm?cvename=cve-2015-4472", }, { trust: 0.1, url: "http://nvd.nist.gov/nvd.cfm?cvename=cve-2015-3106", }, { trust: 0.1, url: "http://nvd.nist.gov/nvd.cfm?cvename=cve-2015-3101", }, { trust: 0.1, url: "https://nvd.nist.gov/vuln/detail/cve-2015-3101", }, { trust: 0.1, url: "http://nvd.nist.gov/nvd.cfm?cvename=cve-2015-3096", }, { trust: 0.1, url: "http://nvd.nist.gov/nvd.cfm?cvename=cve-2015-3105", }, { trust: 0.1, url: "https://nvd.nist.gov/vuln/detail/cve-2015-3097", }, { trust: 0.1, url: "http://nvd.nist.gov/nvd.cfm?cvename=cve-2015-3103", }, { trust: 0.1, url: "http://nvd.nist.gov/nvd.cfm?cvename=cve-2015-3102", }, { trust: 0.1, url: "http://nvd.nist.gov/nvd.cfm?cvename=cve-2015-3100", }, { trust: 0.1, url: "http://nvd.nist.gov/nvd.cfm?cvename=cve-2015-3097", }, { trust: 0.1, url: "http://nvd.nist.gov/nvd.cfm?cvename=cve-2015-3098", }, { trust: 0.1, url: "http://nvd.nist.gov/nvd.cfm?cvename=cve-2015-3099", }, { trust: 0.1, url: "http://nvd.nist.gov/nvd.cfm?cvename=cve-2015-3104", }, { trust: 0.1, url: "https://nvd.nist.gov/vuln/detail/cve-2015-4472", }, ], sources: [ { db: "VULHUB", id: "VHN-81068", }, { db: "VULMON", id: "CVE-2015-3107", }, { db: "BID", id: "75087", }, { db: "JVNDB", id: "JVNDB-2015-002988", }, { db: "PACKETSTORM", id: "133099", }, { db: "PACKETSTORM", id: "132252", }, { db: "PACKETSTORM", id: "132396", }, { db: "CNNVD", id: "CNNVD-201506-190", }, { db: "NVD", id: "CVE-2015-3107", }, ], }, sources: { "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#", data: { "@container": "@list", }, }, data: [ { db: "VULHUB", id: "VHN-81068", }, { db: "VULMON", id: "CVE-2015-3107", }, { db: "BID", id: "75087", }, { db: "JVNDB", id: "JVNDB-2015-002988", }, { db: "PACKETSTORM", id: "133099", }, { db: "PACKETSTORM", id: "132252", }, { db: "PACKETSTORM", id: "132396", }, { db: "CNNVD", id: "CNNVD-201506-190", }, { db: "NVD", id: "CVE-2015-3107", }, ], }, sources_release_date: { "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources_release_date#", data: { "@container": "@list", }, }, data: [ { date: "2015-06-10T00:00:00", db: "VULHUB", id: "VHN-81068", }, { date: "2015-06-10T00:00:00", db: "VULMON", id: "CVE-2015-3107", }, { date: "2015-06-09T00:00:00", db: "BID", id: "75087", }, { date: "2015-06-11T00:00:00", db: "JVNDB", id: "JVNDB-2015-002988", }, { date: "2015-08-17T15:41:19", db: "PACKETSTORM", id: "133099", }, { date: "2015-06-10T23:41:17", db: "PACKETSTORM", id: "132252", }, { date: "2015-06-21T13:13:00", db: "PACKETSTORM", id: "132396", }, { date: "2015-06-10T00:00:00", db: "CNNVD", id: "CNNVD-201506-190", }, { date: "2015-06-10T01:59:48.630000", db: "NVD", id: "CVE-2015-3107", }, ], }, sources_update_date: { "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources_update_date#", data: { "@container": "@list", }, }, data: [ { date: "2017-09-17T00:00:00", db: "VULHUB", id: "VHN-81068", }, { date: "2017-09-17T00:00:00", db: "VULMON", id: "CVE-2015-3107", }, { date: "2015-11-03T20:08:00", db: "BID", id: "75087", }, { date: "2015-08-17T00:00:00", db: "JVNDB", id: "JVNDB-2015-002988", }, { date: "2015-06-10T00:00:00", db: "CNNVD", id: "CNNVD-201506-190", }, { date: "2024-11-21T02:28:41.080000", db: "NVD", id: "CVE-2015-3107", }, ], }, threat_type: { "@context": { "@vocab": "https://www.variotdbs.pl/ref/threat_type#", sources: { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#", }, }, }, data: "remote", sources: [ { db: "PACKETSTORM", id: "133099", }, { db: "PACKETSTORM", id: "132396", }, { db: "CNNVD", id: "CNNVD-201506-190", }, ], trust: 0.8, }, title: { "@context": { "@vocab": "https://www.variotdbs.pl/ref/title#", sources: { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#", }, }, }, data: "Adobe Flash Player and Adobe AIR Vulnerable to arbitrary code execution", sources: [ { db: "JVNDB", id: "JVNDB-2015-002988", }, ], trust: 0.8, }, type: { "@context": { "@vocab": "https://www.variotdbs.pl/ref/type#", sources: { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#", }, }, }, data: "Unknown", sources: [ { db: "BID", id: "75087", }, ], trust: 0.3, }, }
suse-su-2015:1064-1
Vulnerability from csaf_suse
Notes
{ document: { aggregate_severity: { namespace: "https://www.suse.com/support/security/rating/", text: "moderate", }, category: "csaf_security_advisory", csaf_version: "2.0", distribution: { text: "Copyright 2024 SUSE LLC. All rights reserved.", tlp: { label: "WHITE", url: "https://www.first.org/tlp/", }, }, lang: "en", notes: [ { category: "summary", text: "Security update for flash-player", title: "Title of the patch", }, { category: "description", text: "\nflash-player was updated to version 11.2.202.418 to fix 18 security issues:\n\n * Memory corruption vulnerabilities that could lead to code execution\n (CVE-2014-0576, CVE-2014-0581, CVE-2014-8440, CVE-2014-8441).\n * Use-after-free vulnerabilities that could lead to code execution\n (CVE-2014-0573, CVE-2014-0588, CVE-2014-8438).\n * A double free vulnerability that could lead to code execution\n (CVE-2014-0574).\n * Type confusion vulnerabilities that could lead to code execution\n (CVE-2014-0577, CVE-2014-0584, CVE-2014-0585, CVE-2014-0586,\n CVE-2014-0590).\n * Heap buffer overflow vulnerabilities that could lead to code\n execution (CVE-2014-0582, CVE-2014-0589).\n * An information disclosure vulnerability that could be exploited to\n disclose session tokens (CVE-2014-8437).\n * A heap buffer overflow vulnerability that could be exploited to\n perform privilege escalation from low to medium integrity level\n (CVE-2014-0583).\n * A permission issue that could be exploited to perform privilege\n escalation from low to medium integrity level (CVE-2014-8442).\n\nFurther information can be found at \nhttp://helpx.adobe.com/security/products/flash-player/apsb14-24.html\n<http://helpx.adobe.com/security/products/flash-player/apsb14-24.html> .\n\nSecurity Issues:\n\n * CVE-2014-0576\n <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0576>\n * CVE-2014-0581\n <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0581>\n * CVE-2014-8440\n <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8440>\n * CVE-2014-8441\n <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8441>\n * CVE-2014-0573\n <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0573>\n * CVE-2014-0588\n <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0588>\n * CVE-2014-8438\n <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8438>\n * CVE-2014-0574\n <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0574>\n * CVE-2014-0577\n <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0577>\n * CVE-2014-0584\n <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0584>\n * CVE-2014-0585\n <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0585>\n * CVE-2014-0586\n <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0586>\n * CVE-2014-0590\n <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0590>\n * CVE-2014-0582\n <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0582>\n * CVE-2014-0589\n <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0589>\n * CVE-2014-8437\n <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8437>\n * CVE-2014-0583\n <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0583>\n * CVE-2014-8442\n <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8442>\n\n", title: "Description of the patch", }, { category: "details", text: "sledsp3-flash-player", title: "Patchnames", }, { category: "legal_disclaimer", text: "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).", title: "Terms of use", }, ], publisher: { category: "vendor", contact_details: "https://www.suse.com/support/security/contact/", name: "SUSE Product Security Team", namespace: "https://www.suse.com/", }, references: [ { category: "external", summary: "SUSE ratings", url: "https://www.suse.com/support/security/rating/", }, { category: "self", summary: "URL of this CSAF notice", url: "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2015_1064-1.json", }, { category: "self", summary: "URL for SUSE-SU-2015:1064-1", url: "https://www.suse.com/support/update/announcement/2015/suse-su-20151064-1/", }, { category: "self", summary: "E-Mail link for SUSE-SU-2015:1064-1", url: "https://lists.suse.com/pipermail/sle-security-updates/2015-June/001440.html", }, { category: "self", summary: "SUSE Bug 824512", url: "https://bugzilla.suse.com/824512", }, { category: "self", summary: "SUSE Bug 828810", url: "https://bugzilla.suse.com/828810", }, { category: "self", summary: "SUSE Bug 839897", url: "https://bugzilla.suse.com/839897", }, { category: "self", summary: "SUSE Bug 850220", url: "https://bugzilla.suse.com/850220", }, { category: "self", summary: "SUSE Bug 854881", url: "https://bugzilla.suse.com/854881", }, { category: "self", summary: "SUSE Bug 856386", url: "https://bugzilla.suse.com/856386", }, { category: "self", summary: "SUSE Bug 858822", url: "https://bugzilla.suse.com/858822", }, { category: "self", summary: "SUSE Bug 862288", url: "https://bugzilla.suse.com/862288", }, { category: "self", summary: "SUSE Bug 865021", url: "https://bugzilla.suse.com/865021", }, { category: "self", summary: "SUSE Bug 867808", url: "https://bugzilla.suse.com/867808", }, { category: "self", summary: "SUSE Bug 872692", url: "https://bugzilla.suse.com/872692", }, { category: "self", summary: "SUSE Bug 875577", url: "https://bugzilla.suse.com/875577", }, { category: "self", summary: "SUSE Bug 877649", url: "https://bugzilla.suse.com/877649", }, { category: "self", summary: "SUSE Bug 882187", url: "https://bugzilla.suse.com/882187", }, { category: "self", summary: "SUSE Bug 886472", url: "https://bugzilla.suse.com/886472", }, { category: "self", summary: "SUSE Bug 891688", url: "https://bugzilla.suse.com/891688", }, { category: "self", summary: "SUSE Bug 895856", url: "https://bugzilla.suse.com/895856", }, { category: "self", summary: "SUSE Bug 901334", url: "https://bugzilla.suse.com/901334", }, { category: "self", summary: "SUSE Bug 905032", url: "https://bugzilla.suse.com/905032", }, { category: "self", summary: "SUSE Bug 907257", url: "https://bugzilla.suse.com/907257", }, { category: "self", summary: "SUSE Bug 909219", url: "https://bugzilla.suse.com/909219", }, { category: "self", summary: "SUSE Bug 913057", url: "https://bugzilla.suse.com/913057", }, { category: "self", summary: "SUSE Bug 914333", url: "https://bugzilla.suse.com/914333", }, { category: "self", summary: "SUSE Bug 914463", url: "https://bugzilla.suse.com/914463", }, { category: "self", summary: "SUSE Bug 915918", url: "https://bugzilla.suse.com/915918", }, { category: "self", summary: "SUSE Bug 922033", url: "https://bugzilla.suse.com/922033", }, { category: "self", summary: "SUSE Bug 927089", url: "https://bugzilla.suse.com/927089", }, { category: "self", summary: "SUSE Bug 930677", url: "https://bugzilla.suse.com/930677", }, { category: "self", summary: "SUSE Bug 934088", url: "https://bugzilla.suse.com/934088", }, { category: "self", summary: "SUSE Bug 935701", url: "https://bugzilla.suse.com/935701", }, { category: "self", summary: "SUSE CVE CVE-2013-3343 page", url: "https://www.suse.com/security/cve/CVE-2013-3343/", }, { category: "self", summary: "SUSE CVE CVE-2013-3344 page", url: "https://www.suse.com/security/cve/CVE-2013-3344/", }, { category: "self", summary: "SUSE CVE CVE-2013-3345 page", url: "https://www.suse.com/security/cve/CVE-2013-3345/", }, { category: "self", summary: "SUSE CVE CVE-2013-3347 page", url: "https://www.suse.com/security/cve/CVE-2013-3347/", }, { category: "self", summary: "SUSE CVE CVE-2013-3361 page", url: "https://www.suse.com/security/cve/CVE-2013-3361/", }, { category: "self", summary: "SUSE CVE CVE-2013-3362 page", url: "https://www.suse.com/security/cve/CVE-2013-3362/", }, { category: "self", summary: "SUSE CVE CVE-2013-3363 page", url: "https://www.suse.com/security/cve/CVE-2013-3363/", }, { category: "self", summary: "SUSE CVE CVE-2013-5324 page", url: "https://www.suse.com/security/cve/CVE-2013-5324/", }, { category: "self", summary: "SUSE CVE CVE-2013-5329 page", url: "https://www.suse.com/security/cve/CVE-2013-5329/", }, { category: "self", summary: "SUSE CVE CVE-2013-5330 page", url: "https://www.suse.com/security/cve/CVE-2013-5330/", }, { category: "self", summary: "SUSE CVE CVE-2013-5331 page", url: "https://www.suse.com/security/cve/CVE-2013-5331/", }, { category: "self", summary: "SUSE CVE CVE-2013-5332 page", url: "https://www.suse.com/security/cve/CVE-2013-5332/", }, { category: "self", summary: "SUSE CVE CVE-2014-0491 page", url: "https://www.suse.com/security/cve/CVE-2014-0491/", }, { category: "self", summary: "SUSE CVE CVE-2014-0492 page", url: "https://www.suse.com/security/cve/CVE-2014-0492/", }, { category: "self", summary: "SUSE CVE CVE-2014-0497 page", url: "https://www.suse.com/security/cve/CVE-2014-0497/", }, { category: "self", summary: "SUSE CVE CVE-2014-0498 page", url: "https://www.suse.com/security/cve/CVE-2014-0498/", }, { category: "self", summary: "SUSE CVE CVE-2014-0499 page", url: "https://www.suse.com/security/cve/CVE-2014-0499/", }, { category: "self", summary: "SUSE CVE CVE-2014-0502 page", url: "https://www.suse.com/security/cve/CVE-2014-0502/", }, { category: "self", summary: "SUSE CVE CVE-2014-0503 page", url: "https://www.suse.com/security/cve/CVE-2014-0503/", }, { category: "self", summary: "SUSE CVE CVE-2014-0504 page", url: "https://www.suse.com/security/cve/CVE-2014-0504/", }, { category: "self", summary: "SUSE CVE CVE-2014-0506 page", url: "https://www.suse.com/security/cve/CVE-2014-0506/", }, { category: "self", summary: "SUSE CVE CVE-2014-0507 page", url: "https://www.suse.com/security/cve/CVE-2014-0507/", }, { category: "self", summary: "SUSE CVE CVE-2014-0508 page", url: "https://www.suse.com/security/cve/CVE-2014-0508/", }, { category: "self", summary: "SUSE CVE CVE-2014-0509 page", url: "https://www.suse.com/security/cve/CVE-2014-0509/", }, { category: "self", summary: "SUSE CVE CVE-2014-0510 page", url: "https://www.suse.com/security/cve/CVE-2014-0510/", }, { category: "self", summary: "SUSE CVE CVE-2014-0515 page", url: "https://www.suse.com/security/cve/CVE-2014-0515/", }, { category: "self", summary: "SUSE CVE CVE-2014-0516 page", url: "https://www.suse.com/security/cve/CVE-2014-0516/", }, { category: "self", summary: "SUSE CVE CVE-2014-0517 page", url: "https://www.suse.com/security/cve/CVE-2014-0517/", }, { category: "self", summary: "SUSE CVE CVE-2014-0518 page", url: "https://www.suse.com/security/cve/CVE-2014-0518/", }, { category: "self", summary: "SUSE CVE CVE-2014-0519 page", url: "https://www.suse.com/security/cve/CVE-2014-0519/", }, { category: "self", summary: "SUSE CVE CVE-2014-0520 page", url: "https://www.suse.com/security/cve/CVE-2014-0520/", }, { category: "self", summary: "SUSE CVE CVE-2014-0531 page", url: "https://www.suse.com/security/cve/CVE-2014-0531/", }, { category: "self", summary: "SUSE CVE CVE-2014-0532 page", url: "https://www.suse.com/security/cve/CVE-2014-0532/", }, { category: "self", summary: "SUSE CVE CVE-2014-0533 page", url: "https://www.suse.com/security/cve/CVE-2014-0533/", }, { category: "self", summary: "SUSE CVE CVE-2014-0534 page", url: "https://www.suse.com/security/cve/CVE-2014-0534/", }, { category: "self", summary: "SUSE CVE CVE-2014-0535 page", url: "https://www.suse.com/security/cve/CVE-2014-0535/", }, { category: "self", summary: "SUSE CVE CVE-2014-0536 page", url: "https://www.suse.com/security/cve/CVE-2014-0536/", }, { category: "self", summary: "SUSE CVE CVE-2014-0537 page", url: "https://www.suse.com/security/cve/CVE-2014-0537/", }, { category: "self", summary: "SUSE CVE CVE-2014-0538 page", url: "https://www.suse.com/security/cve/CVE-2014-0538/", }, { category: "self", summary: "SUSE CVE CVE-2014-0539 page", url: "https://www.suse.com/security/cve/CVE-2014-0539/", }, { category: "self", summary: "SUSE CVE CVE-2014-0540 page", url: "https://www.suse.com/security/cve/CVE-2014-0540/", }, { category: "self", summary: "SUSE CVE CVE-2014-0541 page", url: "https://www.suse.com/security/cve/CVE-2014-0541/", }, { category: "self", summary: "SUSE CVE CVE-2014-0542 page", url: "https://www.suse.com/security/cve/CVE-2014-0542/", }, { category: "self", summary: "SUSE CVE CVE-2014-0543 page", url: "https://www.suse.com/security/cve/CVE-2014-0543/", }, { category: "self", summary: "SUSE CVE CVE-2014-0544 page", url: "https://www.suse.com/security/cve/CVE-2014-0544/", }, { category: "self", summary: "SUSE CVE CVE-2014-0545 page", url: "https://www.suse.com/security/cve/CVE-2014-0545/", }, { category: "self", summary: "SUSE CVE CVE-2014-0547 page", url: "https://www.suse.com/security/cve/CVE-2014-0547/", }, { category: "self", summary: "SUSE CVE CVE-2014-0548 page", url: "https://www.suse.com/security/cve/CVE-2014-0548/", }, { category: "self", summary: "SUSE CVE CVE-2014-0549 page", url: "https://www.suse.com/security/cve/CVE-2014-0549/", }, { category: "self", summary: "SUSE CVE CVE-2014-0550 page", url: "https://www.suse.com/security/cve/CVE-2014-0550/", }, { category: "self", summary: "SUSE CVE CVE-2014-0551 page", url: "https://www.suse.com/security/cve/CVE-2014-0551/", }, { category: "self", summary: "SUSE CVE CVE-2014-0552 page", url: "https://www.suse.com/security/cve/CVE-2014-0552/", }, { category: "self", summary: "SUSE CVE CVE-2014-0553 page", url: "https://www.suse.com/security/cve/CVE-2014-0553/", }, { category: "self", summary: "SUSE CVE CVE-2014-0554 page", url: "https://www.suse.com/security/cve/CVE-2014-0554/", }, { category: "self", summary: "SUSE CVE CVE-2014-0555 page", url: "https://www.suse.com/security/cve/CVE-2014-0555/", }, { category: "self", summary: "SUSE CVE CVE-2014-0556 page", url: "https://www.suse.com/security/cve/CVE-2014-0556/", }, { category: "self", summary: "SUSE CVE CVE-2014-0557 page", url: "https://www.suse.com/security/cve/CVE-2014-0557/", }, { category: "self", summary: "SUSE CVE CVE-2014-0558 page", url: "https://www.suse.com/security/cve/CVE-2014-0558/", }, { category: "self", summary: "SUSE CVE CVE-2014-0559 page", url: "https://www.suse.com/security/cve/CVE-2014-0559/", }, { category: "self", summary: "SUSE CVE CVE-2014-0564 page", url: "https://www.suse.com/security/cve/CVE-2014-0564/", }, { category: "self", summary: "SUSE CVE CVE-2014-0569 page", url: "https://www.suse.com/security/cve/CVE-2014-0569/", }, { category: "self", summary: "SUSE CVE CVE-2014-0573 page", url: "https://www.suse.com/security/cve/CVE-2014-0573/", }, { category: "self", summary: "SUSE CVE CVE-2014-0574 page", url: "https://www.suse.com/security/cve/CVE-2014-0574/", }, { category: "self", summary: "SUSE CVE CVE-2014-0576 page", url: "https://www.suse.com/security/cve/CVE-2014-0576/", }, { category: "self", summary: "SUSE CVE CVE-2014-0577 page", url: "https://www.suse.com/security/cve/CVE-2014-0577/", }, { category: "self", summary: "SUSE CVE CVE-2014-0580 page", url: "https://www.suse.com/security/cve/CVE-2014-0580/", }, { category: "self", summary: "SUSE CVE CVE-2014-0581 page", url: "https://www.suse.com/security/cve/CVE-2014-0581/", }, { category: "self", summary: "SUSE CVE CVE-2014-0582 page", url: "https://www.suse.com/security/cve/CVE-2014-0582/", }, { category: "self", summary: "SUSE CVE CVE-2014-0583 page", url: "https://www.suse.com/security/cve/CVE-2014-0583/", }, { category: "self", summary: "SUSE CVE CVE-2014-0584 page", url: "https://www.suse.com/security/cve/CVE-2014-0584/", }, { category: "self", summary: "SUSE CVE CVE-2014-0585 page", url: "https://www.suse.com/security/cve/CVE-2014-0585/", }, { category: "self", summary: "SUSE CVE CVE-2014-0586 page", url: "https://www.suse.com/security/cve/CVE-2014-0586/", }, { category: "self", summary: "SUSE CVE CVE-2014-0587 page", url: "https://www.suse.com/security/cve/CVE-2014-0587/", }, { category: "self", summary: "SUSE CVE CVE-2014-0588 page", url: "https://www.suse.com/security/cve/CVE-2014-0588/", }, { category: "self", summary: "SUSE CVE CVE-2014-0589 page", url: "https://www.suse.com/security/cve/CVE-2014-0589/", }, { category: "self", summary: "SUSE CVE CVE-2014-0590 page", url: "https://www.suse.com/security/cve/CVE-2014-0590/", }, { category: "self", summary: "SUSE CVE CVE-2014-4671 page", url: "https://www.suse.com/security/cve/CVE-2014-4671/", }, { category: "self", summary: "SUSE CVE CVE-2014-8437 page", url: "https://www.suse.com/security/cve/CVE-2014-8437/", }, { category: "self", summary: "SUSE CVE CVE-2014-8438 page", url: "https://www.suse.com/security/cve/CVE-2014-8438/", }, { category: "self", summary: "SUSE CVE CVE-2014-8439 page", url: "https://www.suse.com/security/cve/CVE-2014-8439/", }, { category: "self", summary: "SUSE CVE CVE-2014-8440 page", url: "https://www.suse.com/security/cve/CVE-2014-8440/", }, { category: "self", summary: "SUSE CVE CVE-2014-8441 page", url: "https://www.suse.com/security/cve/CVE-2014-8441/", }, { category: "self", summary: "SUSE CVE CVE-2014-8442 page", url: "https://www.suse.com/security/cve/CVE-2014-8442/", }, { category: "self", summary: "SUSE CVE CVE-2014-8443 page", url: "https://www.suse.com/security/cve/CVE-2014-8443/", }, { category: "self", summary: "SUSE CVE CVE-2014-9162 page", url: "https://www.suse.com/security/cve/CVE-2014-9162/", }, { category: "self", summary: "SUSE CVE CVE-2014-9163 page", url: "https://www.suse.com/security/cve/CVE-2014-9163/", }, { category: "self", summary: "SUSE CVE CVE-2014-9164 page", url: "https://www.suse.com/security/cve/CVE-2014-9164/", }, { category: "self", summary: "SUSE CVE CVE-2015-0301 page", url: "https://www.suse.com/security/cve/CVE-2015-0301/", }, { category: "self", summary: "SUSE CVE CVE-2015-0302 page", url: "https://www.suse.com/security/cve/CVE-2015-0302/", }, { category: "self", summary: "SUSE CVE CVE-2015-0303 page", url: "https://www.suse.com/security/cve/CVE-2015-0303/", }, { category: "self", summary: "SUSE CVE CVE-2015-0304 page", url: "https://www.suse.com/security/cve/CVE-2015-0304/", }, { category: "self", summary: "SUSE CVE CVE-2015-0305 page", url: "https://www.suse.com/security/cve/CVE-2015-0305/", }, { category: "self", summary: "SUSE CVE CVE-2015-0306 page", url: "https://www.suse.com/security/cve/CVE-2015-0306/", }, { category: "self", summary: "SUSE CVE CVE-2015-0307 page", url: "https://www.suse.com/security/cve/CVE-2015-0307/", }, { category: "self", summary: "SUSE CVE CVE-2015-0308 page", url: "https://www.suse.com/security/cve/CVE-2015-0308/", }, { category: "self", summary: "SUSE CVE CVE-2015-0309 page", url: "https://www.suse.com/security/cve/CVE-2015-0309/", }, { category: "self", summary: "SUSE CVE CVE-2015-0310 page", url: "https://www.suse.com/security/cve/CVE-2015-0310/", }, { category: "self", summary: "SUSE CVE CVE-2015-0311 page", url: "https://www.suse.com/security/cve/CVE-2015-0311/", }, { category: "self", summary: "SUSE CVE CVE-2015-0313 page", url: "https://www.suse.com/security/cve/CVE-2015-0313/", }, { category: "self", summary: "SUSE CVE CVE-2015-0314 page", url: "https://www.suse.com/security/cve/CVE-2015-0314/", }, { category: "self", summary: "SUSE CVE CVE-2015-0315 page", url: "https://www.suse.com/security/cve/CVE-2015-0315/", }, { category: "self", summary: "SUSE CVE CVE-2015-0316 page", url: "https://www.suse.com/security/cve/CVE-2015-0316/", }, { category: "self", summary: "SUSE CVE CVE-2015-0317 page", url: "https://www.suse.com/security/cve/CVE-2015-0317/", }, { category: "self", summary: "SUSE CVE CVE-2015-0318 page", url: "https://www.suse.com/security/cve/CVE-2015-0318/", }, { category: "self", summary: "SUSE CVE CVE-2015-0319 page", url: "https://www.suse.com/security/cve/CVE-2015-0319/", }, { category: "self", summary: "SUSE CVE CVE-2015-0320 page", url: "https://www.suse.com/security/cve/CVE-2015-0320/", }, { category: "self", summary: "SUSE CVE CVE-2015-0321 page", url: "https://www.suse.com/security/cve/CVE-2015-0321/", }, { category: "self", summary: "SUSE CVE CVE-2015-0322 page", url: "https://www.suse.com/security/cve/CVE-2015-0322/", }, { category: "self", summary: "SUSE CVE CVE-2015-0323 page", url: "https://www.suse.com/security/cve/CVE-2015-0323/", }, { category: "self", summary: "SUSE CVE CVE-2015-0324 page", url: "https://www.suse.com/security/cve/CVE-2015-0324/", }, { category: "self", summary: "SUSE CVE CVE-2015-0325 page", url: "https://www.suse.com/security/cve/CVE-2015-0325/", }, { category: "self", summary: "SUSE CVE CVE-2015-0326 page", url: "https://www.suse.com/security/cve/CVE-2015-0326/", }, { category: "self", summary: "SUSE CVE CVE-2015-0327 page", url: "https://www.suse.com/security/cve/CVE-2015-0327/", }, { category: "self", summary: "SUSE CVE CVE-2015-0328 page", url: "https://www.suse.com/security/cve/CVE-2015-0328/", }, { category: "self", summary: "SUSE CVE CVE-2015-0329 page", url: "https://www.suse.com/security/cve/CVE-2015-0329/", }, { category: "self", summary: "SUSE CVE CVE-2015-0330 page", url: "https://www.suse.com/security/cve/CVE-2015-0330/", }, { category: "self", summary: "SUSE CVE CVE-2015-0332 page", url: "https://www.suse.com/security/cve/CVE-2015-0332/", }, { category: "self", summary: "SUSE CVE CVE-2015-0333 page", url: "https://www.suse.com/security/cve/CVE-2015-0333/", }, { category: "self", summary: "SUSE CVE CVE-2015-0334 page", url: "https://www.suse.com/security/cve/CVE-2015-0334/", }, { category: "self", summary: "SUSE CVE CVE-2015-0335 page", url: "https://www.suse.com/security/cve/CVE-2015-0335/", }, { category: "self", summary: "SUSE CVE CVE-2015-0336 page", url: "https://www.suse.com/security/cve/CVE-2015-0336/", }, { category: "self", summary: "SUSE CVE CVE-2015-0337 page", url: "https://www.suse.com/security/cve/CVE-2015-0337/", }, { category: "self", summary: "SUSE CVE CVE-2015-0338 page", url: "https://www.suse.com/security/cve/CVE-2015-0338/", }, { category: "self", summary: "SUSE CVE CVE-2015-0339 page", url: "https://www.suse.com/security/cve/CVE-2015-0339/", }, { category: "self", summary: "SUSE CVE CVE-2015-0340 page", url: "https://www.suse.com/security/cve/CVE-2015-0340/", }, { category: "self", summary: "SUSE CVE CVE-2015-0341 page", url: "https://www.suse.com/security/cve/CVE-2015-0341/", }, { category: "self", summary: "SUSE CVE CVE-2015-0342 page", url: "https://www.suse.com/security/cve/CVE-2015-0342/", }, { category: "self", summary: "SUSE CVE CVE-2015-0346 page", url: "https://www.suse.com/security/cve/CVE-2015-0346/", }, { category: "self", summary: "SUSE CVE CVE-2015-0347 page", url: "https://www.suse.com/security/cve/CVE-2015-0347/", }, { category: "self", summary: "SUSE CVE CVE-2015-0348 page", url: "https://www.suse.com/security/cve/CVE-2015-0348/", }, { category: "self", summary: "SUSE CVE CVE-2015-0349 page", url: "https://www.suse.com/security/cve/CVE-2015-0349/", }, { category: "self", summary: "SUSE CVE CVE-2015-0350 page", url: "https://www.suse.com/security/cve/CVE-2015-0350/", }, { category: "self", summary: "SUSE CVE CVE-2015-0351 page", url: "https://www.suse.com/security/cve/CVE-2015-0351/", }, { category: "self", summary: "SUSE CVE CVE-2015-0352 page", url: "https://www.suse.com/security/cve/CVE-2015-0352/", }, { category: "self", summary: "SUSE CVE CVE-2015-0353 page", url: "https://www.suse.com/security/cve/CVE-2015-0353/", }, { category: "self", summary: "SUSE CVE CVE-2015-0354 page", url: "https://www.suse.com/security/cve/CVE-2015-0354/", }, { category: "self", summary: "SUSE CVE CVE-2015-0355 page", url: "https://www.suse.com/security/cve/CVE-2015-0355/", }, { category: "self", summary: "SUSE CVE CVE-2015-0356 page", url: "https://www.suse.com/security/cve/CVE-2015-0356/", }, { category: "self", summary: "SUSE CVE CVE-2015-0357 page", url: "https://www.suse.com/security/cve/CVE-2015-0357/", }, { category: "self", summary: "SUSE CVE CVE-2015-0358 page", url: "https://www.suse.com/security/cve/CVE-2015-0358/", }, { category: "self", summary: "SUSE CVE CVE-2015-0359 page", url: "https://www.suse.com/security/cve/CVE-2015-0359/", }, { category: "self", summary: "SUSE CVE CVE-2015-0360 page", url: "https://www.suse.com/security/cve/CVE-2015-0360/", }, { category: "self", summary: "SUSE CVE CVE-2015-3038 page", url: "https://www.suse.com/security/cve/CVE-2015-3038/", }, { category: "self", summary: "SUSE CVE CVE-2015-3039 page", url: "https://www.suse.com/security/cve/CVE-2015-3039/", }, { category: "self", summary: "SUSE CVE CVE-2015-3040 page", url: "https://www.suse.com/security/cve/CVE-2015-3040/", }, { category: "self", summary: "SUSE CVE CVE-2015-3041 page", url: "https://www.suse.com/security/cve/CVE-2015-3041/", }, { category: "self", summary: "SUSE CVE CVE-2015-3042 page", url: "https://www.suse.com/security/cve/CVE-2015-3042/", }, { category: "self", summary: "SUSE CVE CVE-2015-3043 page", url: "https://www.suse.com/security/cve/CVE-2015-3043/", }, { category: "self", summary: "SUSE CVE CVE-2015-3044 page", url: "https://www.suse.com/security/cve/CVE-2015-3044/", }, { category: "self", summary: "SUSE CVE CVE-2015-3077 page", url: "https://www.suse.com/security/cve/CVE-2015-3077/", }, { category: "self", summary: "SUSE CVE CVE-2015-3078 page", url: "https://www.suse.com/security/cve/CVE-2015-3078/", }, { category: "self", summary: "SUSE CVE CVE-2015-3079 page", url: "https://www.suse.com/security/cve/CVE-2015-3079/", }, { category: "self", summary: "SUSE CVE CVE-2015-3080 page", url: "https://www.suse.com/security/cve/CVE-2015-3080/", }, { category: "self", summary: "SUSE CVE CVE-2015-3081 page", url: "https://www.suse.com/security/cve/CVE-2015-3081/", }, { category: "self", summary: "SUSE CVE CVE-2015-3082 page", url: "https://www.suse.com/security/cve/CVE-2015-3082/", }, { category: "self", summary: "SUSE CVE CVE-2015-3083 page", url: "https://www.suse.com/security/cve/CVE-2015-3083/", }, { category: "self", summary: "SUSE CVE CVE-2015-3084 page", url: "https://www.suse.com/security/cve/CVE-2015-3084/", }, { category: "self", summary: "SUSE CVE CVE-2015-3085 page", url: "https://www.suse.com/security/cve/CVE-2015-3085/", }, { category: "self", summary: "SUSE CVE CVE-2015-3086 page", url: "https://www.suse.com/security/cve/CVE-2015-3086/", }, { category: "self", summary: "SUSE CVE CVE-2015-3087 page", url: "https://www.suse.com/security/cve/CVE-2015-3087/", }, { category: "self", summary: "SUSE CVE CVE-2015-3088 page", url: "https://www.suse.com/security/cve/CVE-2015-3088/", }, { category: "self", summary: "SUSE CVE CVE-2015-3089 page", url: "https://www.suse.com/security/cve/CVE-2015-3089/", }, { category: "self", summary: "SUSE CVE CVE-2015-3090 page", url: "https://www.suse.com/security/cve/CVE-2015-3090/", }, { category: "self", summary: "SUSE CVE CVE-2015-3091 page", url: "https://www.suse.com/security/cve/CVE-2015-3091/", }, { category: "self", summary: "SUSE CVE CVE-2015-3092 page", url: "https://www.suse.com/security/cve/CVE-2015-3092/", }, { category: "self", summary: "SUSE CVE CVE-2015-3093 page", url: "https://www.suse.com/security/cve/CVE-2015-3093/", }, { category: "self", summary: "SUSE CVE CVE-2015-3096 page", url: "https://www.suse.com/security/cve/CVE-2015-3096/", }, { category: "self", summary: "SUSE CVE CVE-2015-3098 page", url: "https://www.suse.com/security/cve/CVE-2015-3098/", }, { category: "self", summary: "SUSE CVE CVE-2015-3099 page", url: "https://www.suse.com/security/cve/CVE-2015-3099/", }, { category: "self", summary: "SUSE CVE CVE-2015-3100 page", url: "https://www.suse.com/security/cve/CVE-2015-3100/", }, { category: "self", summary: "SUSE CVE CVE-2015-3102 page", url: "https://www.suse.com/security/cve/CVE-2015-3102/", }, { category: "self", summary: "SUSE CVE CVE-2015-3103 page", url: "https://www.suse.com/security/cve/CVE-2015-3103/", }, { category: "self", summary: "SUSE CVE CVE-2015-3106 page", url: "https://www.suse.com/security/cve/CVE-2015-3106/", }, { category: "self", summary: "SUSE CVE CVE-2015-3107 page", url: "https://www.suse.com/security/cve/CVE-2015-3107/", }, { category: "self", summary: "SUSE CVE CVE-2015-3108 page", url: "https://www.suse.com/security/cve/CVE-2015-3108/", }, { category: "self", summary: "SUSE CVE CVE-2015-3113 page", url: "https://www.suse.com/security/cve/CVE-2015-3113/", }, ], title: "Security update for flash-player", tracking: { current_release_date: "2014-11-14T12:52:02Z", generator: { date: "2014-11-14T12:52:02Z", engine: { name: "cve-database.git:bin/generate-csaf.pl", version: "1", }, }, id: "SUSE-SU-2015:1064-1", initial_release_date: "2014-11-14T12:52:02Z", revision_history: [ { date: "2014-11-14T12:52:02Z", number: "1", summary: "Current version", }, ], status: "final", version: "1", }, }, product_tree: { branches: [ { branches: [ { branches: [ { category: "product_version", name: "flash-player-11.2.202.418-0.3.1.i586", product: { name: "flash-player-11.2.202.418-0.3.1.i586", product_id: "flash-player-11.2.202.418-0.3.1.i586", }, }, { category: "product_version", name: "flash-player-gnome-11.2.202.418-0.3.1.i586", product: { name: "flash-player-gnome-11.2.202.418-0.3.1.i586", product_id: "flash-player-gnome-11.2.202.418-0.3.1.i586", }, }, { category: "product_version", name: "flash-player-kde4-11.2.202.418-0.3.1.i586", product: { name: "flash-player-kde4-11.2.202.418-0.3.1.i586", product_id: "flash-player-kde4-11.2.202.418-0.3.1.i586", }, }, ], category: "architecture", name: "i586", }, { branches: [ { category: "product_version", name: "flash-player-11.2.202.418-0.3.1.x86_64", product: { name: "flash-player-11.2.202.418-0.3.1.x86_64", product_id: "flash-player-11.2.202.418-0.3.1.x86_64", }, }, { category: "product_version", name: "flash-player-gnome-11.2.202.418-0.3.1.x86_64", product: { name: "flash-player-gnome-11.2.202.418-0.3.1.x86_64", product_id: "flash-player-gnome-11.2.202.418-0.3.1.x86_64", }, }, { category: "product_version", name: "flash-player-kde4-11.2.202.418-0.3.1.x86_64", product: { name: "flash-player-kde4-11.2.202.418-0.3.1.x86_64", product_id: "flash-player-kde4-11.2.202.418-0.3.1.x86_64", }, }, ], category: "architecture", name: "x86_64", }, { branches: [ { category: "product_name", name: "SUSE Linux Enterprise Desktop 11 SP3", product: { name: "SUSE Linux Enterprise Desktop 11 SP3", product_id: "SUSE Linux Enterprise Desktop 11 SP3", product_identification_helper: { cpe: "cpe:/o:suse:suse_sled:11:sp3", }, }, }, ], category: "product_family", name: "SUSE Linux Enterprise", }, ], category: "vendor", name: "SUSE", }, ], relationships: [ { category: "default_component_of", full_product_name: { name: "flash-player-11.2.202.418-0.3.1.i586 as component of SUSE Linux Enterprise Desktop 11 SP3", product_id: "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", }, product_reference: "flash-player-11.2.202.418-0.3.1.i586", relates_to_product_reference: "SUSE Linux Enterprise Desktop 11 SP3", }, { category: "default_component_of", full_product_name: { name: "flash-player-11.2.202.418-0.3.1.x86_64 as component of SUSE Linux Enterprise Desktop 11 SP3", product_id: "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", }, product_reference: "flash-player-11.2.202.418-0.3.1.x86_64", relates_to_product_reference: "SUSE Linux Enterprise Desktop 11 SP3", }, { category: "default_component_of", full_product_name: { name: "flash-player-gnome-11.2.202.418-0.3.1.i586 as component of SUSE Linux Enterprise Desktop 11 SP3", product_id: "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", }, product_reference: "flash-player-gnome-11.2.202.418-0.3.1.i586", relates_to_product_reference: "SUSE Linux Enterprise Desktop 11 SP3", }, { category: "default_component_of", full_product_name: { name: "flash-player-gnome-11.2.202.418-0.3.1.x86_64 as component of SUSE Linux Enterprise Desktop 11 SP3", product_id: "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", }, product_reference: "flash-player-gnome-11.2.202.418-0.3.1.x86_64", relates_to_product_reference: "SUSE Linux Enterprise Desktop 11 SP3", }, { category: "default_component_of", full_product_name: { name: "flash-player-kde4-11.2.202.418-0.3.1.i586 as component of SUSE Linux Enterprise Desktop 11 SP3", product_id: "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", }, product_reference: "flash-player-kde4-11.2.202.418-0.3.1.i586", relates_to_product_reference: "SUSE Linux Enterprise Desktop 11 SP3", }, { category: "default_component_of", full_product_name: { name: "flash-player-kde4-11.2.202.418-0.3.1.x86_64 as component of SUSE Linux Enterprise Desktop 11 SP3", product_id: "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", }, product_reference: "flash-player-kde4-11.2.202.418-0.3.1.x86_64", relates_to_product_reference: "SUSE Linux Enterprise Desktop 11 SP3", }, ], }, vulnerabilities: [ { cve: "CVE-2013-3343", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2013-3343", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 10.3.183.90 and 11.x before 11.7.700.224 on Windows, before 10.3.183.90 and 11.x before 11.7.700.225 on Mac OS X, before 10.3.183.90 and 11.x before 11.2.202.291 on Linux, before 11.1.111.59 on Android 2.x and 3.x, and before 11.1.115.63 on Android 4.x; Adobe AIR before 3.7.0.2090 on Windows and Android and before 3.7.0.2100 on Mac OS X; and Adobe AIR SDK & Compiler before 3.7.0.2090 on Windows and before 3.7.0.2100 on Mac OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2013-3343", url: "https://www.suse.com/security/cve/CVE-2013-3343", }, { category: "external", summary: "SUSE Bug 824512 for CVE-2013-3343", url: "https://bugzilla.suse.com/824512", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2013-3343", }, { cve: "CVE-2013-3344", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2013-3344", }, ], notes: [ { category: "general", text: "Heap-based buffer overflow in Adobe Flash Player before 11.7.700.232 and 11.8.x before 11.8.800.94 on Windows and Mac OS X, before 11.2.202.297 on Linux, before 11.1.111.64 on Android 2.x and 3.x, and before 11.1.115.69 on Android 4.x allows attackers to execute arbitrary code via unspecified vectors.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2013-3344", url: "https://www.suse.com/security/cve/CVE-2013-3344", }, { category: "external", summary: "SUSE Bug 828810 for CVE-2013-3344", url: "https://bugzilla.suse.com/828810", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2013-3344", }, { cve: "CVE-2013-3345", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2013-3345", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 11.7.700.232 and 11.8.x before 11.8.800.94 on Windows and Mac OS X, before 11.2.202.297 on Linux, before 11.1.111.64 on Android 2.x and 3.x, and before 11.1.115.69 on Android 4.x allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2013-3345", url: "https://www.suse.com/security/cve/CVE-2013-3345", }, { category: "external", summary: "SUSE Bug 828810 for CVE-2013-3345", url: "https://bugzilla.suse.com/828810", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "low", }, ], title: "CVE-2013-3345", }, { cve: "CVE-2013-3347", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2013-3347", }, ], notes: [ { category: "general", text: "Integer overflow in Adobe Flash Player before 11.7.700.232 and 11.8.x before 11.8.800.94 on Windows and Mac OS X, before 11.2.202.297 on Linux, before 11.1.111.64 on Android 2.x and 3.x, and before 11.1.115.69 on Android 4.x allows attackers to execute arbitrary code via PCM data that is not properly handled during resampling.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2013-3347", url: "https://www.suse.com/security/cve/CVE-2013-3347", }, { category: "external", summary: "SUSE Bug 828810 for CVE-2013-3347", url: "https://bugzilla.suse.com/828810", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2013-3347", }, { cve: "CVE-2013-3361", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2013-3361", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 11.7.700.242 and 11.8.x before 11.8.800.168 on Windows and Mac OS X, before 11.2.202.310 on Linux, before 11.1.111.73 on Android 2.x and 3.x, and before 11.1.115.81 on Android 4.x; Adobe AIR before 3.8.0.1430; and Adobe AIR SDK & Compiler before 3.8.0.1430 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2013-3362, CVE-2013-3363, and CVE-2013-5324.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2013-3361", url: "https://www.suse.com/security/cve/CVE-2013-3361", }, { category: "external", summary: "SUSE Bug 839897 for CVE-2013-3361", url: "https://bugzilla.suse.com/839897", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2013-3361", }, { cve: "CVE-2013-3362", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2013-3362", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 11.7.700.242 and 11.8.x before 11.8.800.168 on Windows and Mac OS X, before 11.2.202.310 on Linux, before 11.1.111.73 on Android 2.x and 3.x, and before 11.1.115.81 on Android 4.x; Adobe AIR before 3.8.0.1430; and Adobe AIR SDK & Compiler before 3.8.0.1430 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2013-3361, CVE-2013-3363, and CVE-2013-5324.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2013-3362", url: "https://www.suse.com/security/cve/CVE-2013-3362", }, { category: "external", summary: "SUSE Bug 839897 for CVE-2013-3362", url: "https://bugzilla.suse.com/839897", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2013-3362", }, { cve: "CVE-2013-3363", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2013-3363", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 11.7.700.242 and 11.8.x before 11.8.800.168 on Windows and Mac OS X, before 11.2.202.310 on Linux, before 11.1.111.73 on Android 2.x and 3.x, and before 11.1.115.81 on Android 4.x; Adobe AIR before 3.8.0.1430; and Adobe AIR SDK & Compiler before 3.8.0.1430 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2013-3361, CVE-2013-3362, and CVE-2013-5324.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2013-3363", url: "https://www.suse.com/security/cve/CVE-2013-3363", }, { category: "external", summary: "SUSE Bug 839897 for CVE-2013-3363", url: "https://bugzilla.suse.com/839897", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2013-3363", }, { cve: "CVE-2013-5324", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2013-5324", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 11.7.700.242 and 11.8.x before 11.8.800.168 on Windows and Mac OS X, before 11.2.202.310 on Linux, before 11.1.111.73 on Android 2.x and 3.x, and before 11.1.115.81 on Android 4.x; Adobe AIR before 3.8.0.1430; and Adobe AIR SDK & Compiler before 3.8.0.1430 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2013-3361, CVE-2013-3362, and CVE-2013-3363.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2013-5324", url: "https://www.suse.com/security/cve/CVE-2013-5324", }, { category: "external", summary: "SUSE Bug 839897 for CVE-2013-5324", url: "https://bugzilla.suse.com/839897", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2013-5324", }, { cve: "CVE-2013-5329", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2013-5329", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 11.7.700.252 and 11.8.x and 11.9.x before 11.9.900.152 on Windows and Mac OS X and before 11.2.202.327 on Linux, Adobe AIR before 3.9.0.1210, Adobe AIR SDK before 3.9.0.1210, and Adobe AIR SDK & Compiler before 3.9.0.1210 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2013-5330.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2013-5329", url: "https://www.suse.com/security/cve/CVE-2013-5329", }, { category: "external", summary: "SUSE Bug 850220 for CVE-2013-5329", url: "https://bugzilla.suse.com/850220", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "important", }, ], title: "CVE-2013-5329", }, { cve: "CVE-2013-5330", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2013-5330", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 11.7.700.252 and 11.8.x and 11.9.x before 11.9.900.152 on Windows and Mac OS X and before 11.2.202.327 on Linux, Adobe AIR before 3.9.0.1210, Adobe AIR SDK before 3.9.0.1210, and Adobe AIR SDK & Compiler before 3.9.0.1210 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2013-5329.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2013-5330", url: "https://www.suse.com/security/cve/CVE-2013-5330", }, { category: "external", summary: "SUSE Bug 850220 for CVE-2013-5330", url: "https://bugzilla.suse.com/850220", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "important", }, ], title: "CVE-2013-5330", }, { cve: "CVE-2013-5331", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2013-5331", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 11.7.700.257 and 11.8.x and 11.9.x before 11.9.900.170 on Windows and Mac OS X and before 11.2.202.332 on Linux, Adobe AIR before 3.9.0.1380, Adobe AIR SDK before 3.9.0.1380, and Adobe AIR SDK & Compiler before 3.9.0.1380 allow remote attackers to execute arbitrary code via crafted .swf content that leverages an unspecified \"type confusion,\" as exploited in the wild in December 2013.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2013-5331", url: "https://www.suse.com/security/cve/CVE-2013-5331", }, { category: "external", summary: "SUSE Bug 854881 for CVE-2013-5331", url: "https://bugzilla.suse.com/854881", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2013-5331", }, { cve: "CVE-2013-5332", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2013-5332", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 11.7.700.257 and 11.8.x and 11.9.x before 11.9.900.170 on Windows and Mac OS X and before 11.2.202.332 on Linux, Adobe AIR before 3.9.0.1380, Adobe AIR SDK before 3.9.0.1380, and Adobe AIR SDK & Compiler before 3.9.0.1380 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2013-5332", url: "https://www.suse.com/security/cve/CVE-2013-5332", }, { category: "external", summary: "SUSE Bug 854881 for CVE-2013-5332", url: "https://bugzilla.suse.com/854881", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2013-5332", }, { cve: "CVE-2014-0491", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0491", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 11.7.700.260 and 11.8.x and 11.9.x before 12.0.0.38 on Windows and Mac OS X and before 11.2.202.335 on Linux, Adobe AIR before 4.0.0.1390, Adobe AIR SDK before 4.0.0.1390, and Adobe AIR SDK & Compiler before 4.0.0.1390 allow attackers to bypass unspecified protection mechanisms via unknown vectors.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0491", url: "https://www.suse.com/security/cve/CVE-2014-0491", }, { category: "external", summary: "SUSE Bug 858822 for CVE-2014-0491", url: "https://bugzilla.suse.com/858822", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2014-0491", }, { cve: "CVE-2014-0492", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0492", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 11.7.700.260 and 11.8.x and 11.9.x before 12.0.0.38 on Windows and Mac OS X and before 11.2.202.335 on Linux, Adobe AIR before 4.0.0.1390, Adobe AIR SDK before 4.0.0.1390, and Adobe AIR SDK & Compiler before 4.0.0.1390 allow attackers to defeat the ASLR protection mechanism by leveraging an \"address leak.\"", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0492", url: "https://www.suse.com/security/cve/CVE-2014-0492", }, { category: "external", summary: "SUSE Bug 858822 for CVE-2014-0492", url: "https://bugzilla.suse.com/858822", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2014-0492", }, { cve: "CVE-2014-0497", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0497", }, ], notes: [ { category: "general", text: "Integer underflow in Adobe Flash Player before 11.7.700.261 and 11.8.x through 12.0.x before 12.0.0.44 on Windows and Mac OS X, and before 11.2.202.336 on Linux, allows remote attackers to execute arbitrary code via unspecified vectors.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0497", url: "https://www.suse.com/security/cve/CVE-2014-0497", }, { category: "external", summary: "SUSE Bug 862288 for CVE-2014-0497", url: "https://bugzilla.suse.com/862288", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 9.8, baseSeverity: "CRITICAL", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2014-0497", }, { cve: "CVE-2014-0498", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0498", }, ], notes: [ { category: "general", text: "Stack-based buffer overflow in Adobe Flash Player before 11.7.700.269 and 11.8.x through 12.0.x before 12.0.0.70 on Windows and Mac OS X and before 11.2.202.341 on Linux, Adobe AIR before 4.0.0.1628 on Android, Adobe AIR SDK before 4.0.0.1628, and Adobe AIR SDK & Compiler before 4.0.0.1628 allows attackers to execute arbitrary code via unspecified vectors.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0498", url: "https://www.suse.com/security/cve/CVE-2014-0498", }, { category: "external", summary: "SUSE Bug 865021 for CVE-2014-0498", url: "https://bugzilla.suse.com/865021", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2014-0498", }, { cve: "CVE-2014-0499", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0499", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 11.7.700.269 and 11.8.x through 12.0.x before 12.0.0.70 on Windows and Mac OS X and before 11.2.202.341 on Linux, Adobe AIR before 4.0.0.1628 on Android, Adobe AIR SDK before 4.0.0.1628, and Adobe AIR SDK & Compiler before 4.0.0.1628 do not prevent access to address information, which makes it easier for attackers to bypass the ASLR protection mechanism via unspecified vectors.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0499", url: "https://www.suse.com/security/cve/CVE-2014-0499", }, { category: "external", summary: "SUSE Bug 865021 for CVE-2014-0499", url: "https://bugzilla.suse.com/865021", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2014-0499", }, { cve: "CVE-2014-0502", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0502", }, ], notes: [ { category: "general", text: "Double free vulnerability in Adobe Flash Player before 11.7.700.269 and 11.8.x through 12.0.x before 12.0.0.70 on Windows and Mac OS X and before 11.2.202.341 on Linux, Adobe AIR before 4.0.0.1628 on Android, Adobe AIR SDK before 4.0.0.1628, and Adobe AIR SDK & Compiler before 4.0.0.1628 allows remote attackers to execute arbitrary code via unspecified vectors, as exploited in the wild in February 2014.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0502", url: "https://www.suse.com/security/cve/CVE-2014-0502", }, { category: "external", summary: "SUSE Bug 865021 for CVE-2014-0502", url: "https://bugzilla.suse.com/865021", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 8.8, baseSeverity: "HIGH", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2014-0502", }, { cve: "CVE-2014-0503", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0503", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 11.7.700.272 and 11.8.x through 12.0.x before 12.0.0.77 on Windows and OS X, and before 11.2.202.346 on Linux, allows remote attackers to bypass the Same Origin Policy via unspecified vectors.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0503", url: "https://www.suse.com/security/cve/CVE-2014-0503", }, { category: "external", summary: "SUSE Bug 867808 for CVE-2014-0503", url: "https://bugzilla.suse.com/867808", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2014-0503", }, { cve: "CVE-2014-0504", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0504", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 11.7.700.272 and 11.8.x through 12.0.x before 12.0.0.77 on Windows and OS X, and before 11.2.202.346 on Linux, allows attackers to read the clipboard via unspecified vectors.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0504", url: "https://www.suse.com/security/cve/CVE-2014-0504", }, { category: "external", summary: "SUSE Bug 867808 for CVE-2014-0504", url: "https://bugzilla.suse.com/867808", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2014-0504", }, { cve: "CVE-2014-0506", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0506", }, ], notes: [ { category: "general", text: "Use-after-free vulnerability in Adobe Flash Player before 11.7.700.275 and 11.8.x through 13.0.x before 13.0.0.182 on Windows and OS X and before 11.2.202.350 on Linux, Adobe AIR before 13.0.0.83 on Android, Adobe AIR SDK before 13.0.0.83, and Adobe AIR SDK & Compiler before 13.0.0.83 allows remote attackers to execute arbitrary code, and possibly bypass an Internet Explorer sandbox protection mechanism, via unspecified vectors, as demonstrated by VUPEN during a Pwn2Own competition at CanSecWest 2014.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0506", url: "https://www.suse.com/security/cve/CVE-2014-0506", }, { category: "external", summary: "SUSE Bug 872692 for CVE-2014-0506", url: "https://bugzilla.suse.com/872692", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2014-0506", }, { cve: "CVE-2014-0507", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0507", }, ], notes: [ { category: "general", text: "Buffer overflow in Adobe Flash Player before 11.7.700.275 and 11.8.x through 13.0.x before 13.0.0.182 on Windows and OS X and before 11.2.202.350 on Linux, Adobe AIR before 13.0.0.83 on Android, Adobe AIR SDK before 13.0.0.83, and Adobe AIR SDK & Compiler before 13.0.0.83 allows attackers to execute arbitrary code via unspecified vectors.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0507", url: "https://www.suse.com/security/cve/CVE-2014-0507", }, { category: "external", summary: "SUSE Bug 872692 for CVE-2014-0507", url: "https://bugzilla.suse.com/872692", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2014-0507", }, { cve: "CVE-2014-0508", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0508", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 11.7.700.275 and 11.8.x through 13.0.x before 13.0.0.182 on Windows and OS X and before 11.2.202.350 on Linux, Adobe AIR before 13.0.0.83 on Android, Adobe AIR SDK before 13.0.0.83, and Adobe AIR SDK & Compiler before 13.0.0.83 allow attackers to bypass intended access restrictions and obtain sensitive information via unspecified vectors.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0508", url: "https://www.suse.com/security/cve/CVE-2014-0508", }, { category: "external", summary: "SUSE Bug 872692 for CVE-2014-0508", url: "https://bugzilla.suse.com/872692", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "moderate", }, ], title: "CVE-2014-0508", }, { cve: "CVE-2014-0509", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0509", }, ], notes: [ { category: "general", text: "Cross-site scripting (XSS) vulnerability in Adobe Flash Player before 11.7.700.275 and 11.8.x through 13.0.x before 13.0.0.182 on Windows and OS X and before 11.2.202.350 on Linux, Adobe AIR before 13.0.0.83 on Android, Adobe AIR SDK before 13.0.0.83, and Adobe AIR SDK & Compiler before 13.0.0.83 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0509", url: "https://www.suse.com/security/cve/CVE-2014-0509", }, { category: "external", summary: "SUSE Bug 872692 for CVE-2014-0509", url: "https://bugzilla.suse.com/872692", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "moderate", }, ], title: "CVE-2014-0509", }, { cve: "CVE-2014-0510", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0510", }, ], notes: [ { category: "general", text: "Heap-based buffer overflow in Adobe Flash Player 12.0.0.77 allows remote attackers to execute arbitrary code and bypass a sandbox protection mechanism via unspecified vectors, as demonstrated by Zeguang Zhao and Liang Chen during a Pwn2Own competition at CanSecWest 2014.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0510", url: "https://www.suse.com/security/cve/CVE-2014-0510", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2014-0510", }, { cve: "CVE-2014-0515", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0515", }, ], notes: [ { category: "general", text: "Buffer overflow in Adobe Flash Player before 11.7.700.279 and 11.8.x through 13.0.x before 13.0.0.206 on Windows and OS X, and before 11.2.202.356 on Linux, allows remote attackers to execute arbitrary code via unspecified vectors, as exploited in the wild in April 2014.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0515", url: "https://www.suse.com/security/cve/CVE-2014-0515", }, { category: "external", summary: "SUSE Bug 875577 for CVE-2014-0515", url: "https://bugzilla.suse.com/875577", }, { category: "external", summary: "SUSE Bug 886454 for CVE-2014-0515", url: "https://bugzilla.suse.com/886454", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2014-0515", }, { cve: "CVE-2014-0516", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0516", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.214 on Windows and OS X and before 11.2.202.359 on Linux, Adobe AIR SDK before 13.0.0.111, and Adobe AIR SDK & Compiler before 13.0.0.111 allow remote attackers to bypass the Same Origin Policy via unspecified vectors.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0516", url: "https://www.suse.com/security/cve/CVE-2014-0516", }, { category: "external", summary: "SUSE Bug 877649 for CVE-2014-0516", url: "https://bugzilla.suse.com/877649", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "important", }, ], title: "CVE-2014-0516", }, { cve: "CVE-2014-0517", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0517", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.214 on Windows and OS X and before 11.2.202.359 on Linux, Adobe AIR SDK before 13.0.0.111, and Adobe AIR SDK & Compiler before 13.0.0.111 allow attackers to bypass intended access restrictions via unspecified vectors, a different vulnerability than CVE-2014-0518, CVE-2014-0519, and CVE-2014-0520.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0517", url: "https://www.suse.com/security/cve/CVE-2014-0517", }, { category: "external", summary: "SUSE Bug 877649 for CVE-2014-0517", url: "https://bugzilla.suse.com/877649", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "important", }, ], title: "CVE-2014-0517", }, { cve: "CVE-2014-0518", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0518", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.214 on Windows and OS X and before 11.2.202.359 on Linux, Adobe AIR SDK before 13.0.0.111, and Adobe AIR SDK & Compiler before 13.0.0.111 allow attackers to bypass intended access restrictions via unspecified vectors, a different vulnerability than CVE-2014-0517, CVE-2014-0519, and CVE-2014-0520.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0518", url: "https://www.suse.com/security/cve/CVE-2014-0518", }, { category: "external", summary: "SUSE Bug 877649 for CVE-2014-0518", url: "https://bugzilla.suse.com/877649", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "important", }, ], title: "CVE-2014-0518", }, { cve: "CVE-2014-0519", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0519", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.214 on Windows and OS X and before 11.2.202.359 on Linux, Adobe AIR SDK before 13.0.0.111, and Adobe AIR SDK & Compiler before 13.0.0.111 allow attackers to bypass intended access restrictions via unspecified vectors, a different vulnerability than CVE-2014-0517, CVE-2014-0518, and CVE-2014-0520.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0519", url: "https://www.suse.com/security/cve/CVE-2014-0519", }, { category: "external", summary: "SUSE Bug 877649 for CVE-2014-0519", url: "https://bugzilla.suse.com/877649", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "important", }, ], title: "CVE-2014-0519", }, { cve: "CVE-2014-0520", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0520", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.214 on Windows and OS X and before 11.2.202.359 on Linux, Adobe AIR SDK before 13.0.0.111, and Adobe AIR SDK & Compiler before 13.0.0.111 allow attackers to bypass intended access restrictions via unspecified vectors, a different vulnerability than CVE-2014-0517, CVE-2014-0518, and CVE-2014-0519.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0520", url: "https://www.suse.com/security/cve/CVE-2014-0520", }, { category: "external", summary: "SUSE Bug 877649 for CVE-2014-0520", url: "https://bugzilla.suse.com/877649", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "important", }, ], title: "CVE-2014-0520", }, { cve: "CVE-2014-0531", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0531", }, ], notes: [ { category: "general", text: "Cross-site scripting (XSS) vulnerability in Adobe Flash Player before 13.0.0.223 and 14.x before 14.0.0.125 on Windows and OS X and before 11.2.202.378 on Linux, Adobe AIR before 14.0.0.110, Adobe AIR SDK before 14.0.0.110, and Adobe AIR SDK & Compiler before 14.0.0.110 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2014-0532 and CVE-2014-0533.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0531", url: "https://www.suse.com/security/cve/CVE-2014-0531", }, { category: "external", summary: "SUSE Bug 882187 for CVE-2014-0531", url: "https://bugzilla.suse.com/882187", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2014-0531", }, { cve: "CVE-2014-0532", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0532", }, ], notes: [ { category: "general", text: "Cross-site scripting (XSS) vulnerability in Adobe Flash Player before 13.0.0.223 and 14.x before 14.0.0.125 on Windows and OS X and before 11.2.202.378 on Linux, Adobe AIR before 14.0.0.110, Adobe AIR SDK before 14.0.0.110, and Adobe AIR SDK & Compiler before 14.0.0.110 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2014-0531 and CVE-2014-0533.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0532", url: "https://www.suse.com/security/cve/CVE-2014-0532", }, { category: "external", summary: "SUSE Bug 882187 for CVE-2014-0532", url: "https://bugzilla.suse.com/882187", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2014-0532", }, { cve: "CVE-2014-0533", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0533", }, ], notes: [ { category: "general", text: "Cross-site scripting (XSS) vulnerability in Adobe Flash Player before 13.0.0.223 and 14.x before 14.0.0.125 on Windows and OS X and before 11.2.202.378 on Linux, Adobe AIR before 14.0.0.110, Adobe AIR SDK before 14.0.0.110, and Adobe AIR SDK & Compiler before 14.0.0.110 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2014-0531 and CVE-2014-0532.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0533", url: "https://www.suse.com/security/cve/CVE-2014-0533", }, { category: "external", summary: "SUSE Bug 882187 for CVE-2014-0533", url: "https://bugzilla.suse.com/882187", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2014-0533", }, { cve: "CVE-2014-0534", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0534", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.223 and 14.x before 14.0.0.125 on Windows and OS X and before 11.2.202.378 on Linux, Adobe AIR before 14.0.0.110, Adobe AIR SDK before 14.0.0.110, and Adobe AIR SDK & Compiler before 14.0.0.110 allow attackers to bypass intended access restrictions via unspecified vectors, a different vulnerability than CVE-2014-0535.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0534", url: "https://www.suse.com/security/cve/CVE-2014-0534", }, { category: "external", summary: "SUSE Bug 882187 for CVE-2014-0534", url: "https://bugzilla.suse.com/882187", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2014-0534", }, { cve: "CVE-2014-0535", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0535", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.223 and 14.x before 14.0.0.125 on Windows and OS X and before 11.2.202.378 on Linux, Adobe AIR before 14.0.0.110, Adobe AIR SDK before 14.0.0.110, and Adobe AIR SDK & Compiler before 14.0.0.110 allow attackers to bypass intended access restrictions via unspecified vectors, a different vulnerability than CVE-2014-0534.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0535", url: "https://www.suse.com/security/cve/CVE-2014-0535", }, { category: "external", summary: "SUSE Bug 882187 for CVE-2014-0535", url: "https://bugzilla.suse.com/882187", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2014-0535", }, { cve: "CVE-2014-0536", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0536", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.223 and 14.x before 14.0.0.125 on Windows and OS X and before 11.2.202.378 on Linux, Adobe AIR before 14.0.0.110, Adobe AIR SDK before 14.0.0.110, and Adobe AIR SDK & Compiler before 14.0.0.110 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0536", url: "https://www.suse.com/security/cve/CVE-2014-0536", }, { category: "external", summary: "SUSE Bug 882187 for CVE-2014-0536", url: "https://bugzilla.suse.com/882187", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2014-0536", }, { cve: "CVE-2014-0537", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0537", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.231 and 14.x before 14.0.0.145 on Windows and OS X and before 11.2.202.394 on Linux, Adobe AIR before 14.0.0.137 on Android, Adobe AIR SDK before 14.0.0.137, and Adobe AIR SDK & Compiler before 14.0.0.137 allow attackers to bypass intended access restrictions via unspecified vectors, a different vulnerability than CVE-2014-0539.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0537", url: "https://www.suse.com/security/cve/CVE-2014-0537", }, { category: "external", summary: "SUSE Bug 886454 for CVE-2014-0537", url: "https://bugzilla.suse.com/886454", }, { category: "external", summary: "SUSE Bug 886472 for CVE-2014-0537", url: "https://bugzilla.suse.com/886472", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2014-0537", }, { cve: "CVE-2014-0538", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0538", }, ], notes: [ { category: "general", text: "Use-after-free vulnerability in Adobe Flash Player before 13.0.0.241 and 14.x before 14.0.0.176 on Windows and OS X and before 11.2.202.400 on Linux, Adobe AIR before 14.0.0.178 on Windows and OS X and before 14.0.0.179 on Android, Adobe AIR SDK before 14.0.0.178, and Adobe AIR SDK & Compiler before 14.0.0.178 allows attackers to execute arbitrary code via unspecified vectors.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0538", url: "https://www.suse.com/security/cve/CVE-2014-0538", }, { category: "external", summary: "SUSE Bug 891688 for CVE-2014-0538", url: "https://bugzilla.suse.com/891688", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2014-0538", }, { cve: "CVE-2014-0539", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0539", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.231 and 14.x before 14.0.0.145 on Windows and OS X and before 11.2.202.394 on Linux, Adobe AIR before 14.0.0.137 on Android, Adobe AIR SDK before 14.0.0.137, and Adobe AIR SDK & Compiler before 14.0.0.137 allow attackers to bypass intended access restrictions via unspecified vectors, a different vulnerability than CVE-2014-0537.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0539", url: "https://www.suse.com/security/cve/CVE-2014-0539", }, { category: "external", summary: "SUSE Bug 886454 for CVE-2014-0539", url: "https://bugzilla.suse.com/886454", }, { category: "external", summary: "SUSE Bug 886472 for CVE-2014-0539", url: "https://bugzilla.suse.com/886472", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2014-0539", }, { cve: "CVE-2014-0540", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0540", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.241 and 14.x before 14.0.0.176 on Windows and OS X and before 11.2.202.400 on Linux, Adobe AIR before 14.0.0.178 on Windows and OS X and before 14.0.0.179 on Android, Adobe AIR SDK before 14.0.0.178, and Adobe AIR SDK & Compiler before 14.0.0.178 do not properly restrict discovery of memory addresses, which allows attackers to bypass the ASLR protection mechanism via unspecified vectors, a different vulnerability than CVE-2014-0542, CVE-2014-0543, CVE-2014-0544, and CVE-2014-0545.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0540", url: "https://www.suse.com/security/cve/CVE-2014-0540", }, { category: "external", summary: "SUSE Bug 891688 for CVE-2014-0540", url: "https://bugzilla.suse.com/891688", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2014-0540", }, { cve: "CVE-2014-0541", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0541", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.241 and 14.x before 14.0.0.176 on Windows and OS X and before 11.2.202.400 on Linux, Adobe AIR before 14.0.0.178 on Windows and OS X and before 14.0.0.179 on Android, Adobe AIR SDK before 14.0.0.178, and Adobe AIR SDK & Compiler before 14.0.0.178 allow attackers to bypass intended access restrictions via unspecified vectors.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0541", url: "https://www.suse.com/security/cve/CVE-2014-0541", }, { category: "external", summary: "SUSE Bug 891688 for CVE-2014-0541", url: "https://bugzilla.suse.com/891688", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2014-0541", }, { cve: "CVE-2014-0542", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0542", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.241 and 14.x before 14.0.0.176 on Windows and OS X and before 11.2.202.400 on Linux, Adobe AIR before 14.0.0.178 on Windows and OS X and before 14.0.0.179 on Android, Adobe AIR SDK before 14.0.0.178, and Adobe AIR SDK & Compiler before 14.0.0.178 do not properly restrict discovery of memory addresses, which allows attackers to bypass the ASLR protection mechanism via unspecified vectors, a different vulnerability than CVE-2014-0540, CVE-2014-0543, CVE-2014-0544, and CVE-2014-0545.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0542", url: "https://www.suse.com/security/cve/CVE-2014-0542", }, { category: "external", summary: "SUSE Bug 891688 for CVE-2014-0542", url: "https://bugzilla.suse.com/891688", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2014-0542", }, { cve: "CVE-2014-0543", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0543", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.241 and 14.x before 14.0.0.176 on Windows and OS X and before 11.2.202.400 on Linux, Adobe AIR before 14.0.0.178 on Windows and OS X and before 14.0.0.179 on Android, Adobe AIR SDK before 14.0.0.178, and Adobe AIR SDK & Compiler before 14.0.0.178 do not properly restrict discovery of memory addresses, which allows attackers to bypass the ASLR protection mechanism via unspecified vectors, a different vulnerability than CVE-2014-0540, CVE-2014-0542, CVE-2014-0544, and CVE-2014-0545.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0543", url: "https://www.suse.com/security/cve/CVE-2014-0543", }, { category: "external", summary: "SUSE Bug 891688 for CVE-2014-0543", url: "https://bugzilla.suse.com/891688", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2014-0543", }, { cve: "CVE-2014-0544", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0544", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.241 and 14.x before 14.0.0.176 on Windows and OS X and before 11.2.202.400 on Linux, Adobe AIR before 14.0.0.178 on Windows and OS X and before 14.0.0.179 on Android, Adobe AIR SDK before 14.0.0.178, and Adobe AIR SDK & Compiler before 14.0.0.178 do not properly restrict discovery of memory addresses, which allows attackers to bypass the ASLR protection mechanism via unspecified vectors, a different vulnerability than CVE-2014-0540, CVE-2014-0542, CVE-2014-0543, and CVE-2014-0545.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0544", url: "https://www.suse.com/security/cve/CVE-2014-0544", }, { category: "external", summary: "SUSE Bug 891688 for CVE-2014-0544", url: "https://bugzilla.suse.com/891688", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2014-0544", }, { cve: "CVE-2014-0545", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0545", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.241 and 14.x before 14.0.0.176 on Windows and OS X and before 11.2.202.400 on Linux, Adobe AIR before 14.0.0.178 on Windows and OS X and before 14.0.0.179 on Android, Adobe AIR SDK before 14.0.0.178, and Adobe AIR SDK & Compiler before 14.0.0.178 do not properly restrict discovery of memory addresses, which allows attackers to bypass the ASLR protection mechanism via unspecified vectors, a different vulnerability than CVE-2014-0540, CVE-2014-0542, CVE-2014-0543, and CVE-2014-0544.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0545", url: "https://www.suse.com/security/cve/CVE-2014-0545", }, { category: "external", summary: "SUSE Bug 891688 for CVE-2014-0545", url: "https://bugzilla.suse.com/891688", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2014-0545", }, { cve: "CVE-2014-0547", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0547", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.244 and 14.x and 15.x before 15.0.0.152 on Windows and OS X and before 11.2.202.406 on Linux, Adobe AIR before 15.0.0.249 on Windows and OS X and before 15.0.0.252 on Android, Adobe AIR SDK before 15.0.0.249, and Adobe AIR SDK & Compiler before 15.0.0.249 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2014-0549, CVE-2014-0550, CVE-2014-0551, CVE-2014-0552, and CVE-2014-0555.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0547", url: "https://www.suse.com/security/cve/CVE-2014-0547", }, { category: "external", summary: "SUSE Bug 895856 for CVE-2014-0547", url: "https://bugzilla.suse.com/895856", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2014-0547", }, { cve: "CVE-2014-0548", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0548", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.244 and 14.x and 15.x before 15.0.0.152 on Windows and OS X and before 11.2.202.406 on Linux, Adobe AIR before 15.0.0.249 on Windows and OS X and before 15.0.0.252 on Android, Adobe AIR SDK before 15.0.0.249, and Adobe AIR SDK & Compiler before 15.0.0.249 allow remote attackers to bypass the Same Origin Policy via unspecified vectors.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0548", url: "https://www.suse.com/security/cve/CVE-2014-0548", }, { category: "external", summary: "SUSE Bug 895856 for CVE-2014-0548", url: "https://bugzilla.suse.com/895856", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2014-0548", }, { cve: "CVE-2014-0549", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0549", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.244 and 14.x and 15.x before 15.0.0.152 on Windows and OS X and before 11.2.202.406 on Linux, Adobe AIR before 15.0.0.249 on Windows and OS X and before 15.0.0.252 on Android, Adobe AIR SDK before 15.0.0.249, and Adobe AIR SDK & Compiler before 15.0.0.249 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2014-0547, CVE-2014-0550, CVE-2014-0551, CVE-2014-0552, and CVE-2014-0555.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0549", url: "https://www.suse.com/security/cve/CVE-2014-0549", }, { category: "external", summary: "SUSE Bug 895856 for CVE-2014-0549", url: "https://bugzilla.suse.com/895856", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2014-0549", }, { cve: "CVE-2014-0550", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0550", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.244 and 14.x and 15.x before 15.0.0.152 on Windows and OS X and before 11.2.202.406 on Linux, Adobe AIR before 15.0.0.249 on Windows and OS X and before 15.0.0.252 on Android, Adobe AIR SDK before 15.0.0.249, and Adobe AIR SDK & Compiler before 15.0.0.249 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2014-0547, CVE-2014-0549, CVE-2014-0551, CVE-2014-0552, and CVE-2014-0555.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0550", url: "https://www.suse.com/security/cve/CVE-2014-0550", }, { category: "external", summary: "SUSE Bug 895856 for CVE-2014-0550", url: "https://bugzilla.suse.com/895856", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2014-0550", }, { cve: "CVE-2014-0551", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0551", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.244 and 14.x and 15.x before 15.0.0.152 on Windows and OS X and before 11.2.202.406 on Linux, Adobe AIR before 15.0.0.249 on Windows and OS X and before 15.0.0.252 on Android, Adobe AIR SDK before 15.0.0.249, and Adobe AIR SDK & Compiler before 15.0.0.249 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2014-0547, CVE-2014-0549, CVE-2014-0550, CVE-2014-0552, and CVE-2014-0555.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0551", url: "https://www.suse.com/security/cve/CVE-2014-0551", }, { category: "external", summary: "SUSE Bug 895856 for CVE-2014-0551", url: "https://bugzilla.suse.com/895856", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2014-0551", }, { cve: "CVE-2014-0552", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0552", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.244 and 14.x and 15.x before 15.0.0.152 on Windows and OS X and before 11.2.202.406 on Linux, Adobe AIR before 15.0.0.249 on Windows and OS X and before 15.0.0.252 on Android, Adobe AIR SDK before 15.0.0.249, and Adobe AIR SDK & Compiler before 15.0.0.249 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2014-0547, CVE-2014-0549, CVE-2014-0550, CVE-2014-0551, and CVE-2014-0555.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0552", url: "https://www.suse.com/security/cve/CVE-2014-0552", }, { category: "external", summary: "SUSE Bug 895856 for CVE-2014-0552", url: "https://bugzilla.suse.com/895856", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2014-0552", }, { cve: "CVE-2014-0553", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0553", }, ], notes: [ { category: "general", text: "Use-after-free vulnerability in Adobe Flash Player before 13.0.0.244 and 14.x and 15.x before 15.0.0.152 on Windows and OS X and before 11.2.202.406 on Linux, Adobe AIR before 15.0.0.249 on Windows and OS X and before 15.0.0.252 on Android, Adobe AIR SDK before 15.0.0.249, and Adobe AIR SDK & Compiler before 15.0.0.249 allows attackers to execute arbitrary code via unspecified vectors.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0553", url: "https://www.suse.com/security/cve/CVE-2014-0553", }, { category: "external", summary: "SUSE Bug 895856 for CVE-2014-0553", url: "https://bugzilla.suse.com/895856", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2014-0553", }, { cve: "CVE-2014-0554", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0554", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.244 and 14.x and 15.x before 15.0.0.152 on Windows and OS X and before 11.2.202.406 on Linux, Adobe AIR before 15.0.0.249 on Windows and OS X and before 15.0.0.252 on Android, Adobe AIR SDK before 15.0.0.249, and Adobe AIR SDK & Compiler before 15.0.0.249 allow attackers to bypass intended access restrictions via unspecified vectors.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0554", url: "https://www.suse.com/security/cve/CVE-2014-0554", }, { category: "external", summary: "SUSE Bug 895856 for CVE-2014-0554", url: "https://bugzilla.suse.com/895856", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2014-0554", }, { cve: "CVE-2014-0555", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0555", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.244 and 14.x and 15.x before 15.0.0.152 on Windows and OS X and before 11.2.202.406 on Linux, Adobe AIR before 15.0.0.249 on Windows and OS X and before 15.0.0.252 on Android, Adobe AIR SDK before 15.0.0.249, and Adobe AIR SDK & Compiler before 15.0.0.249 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2014-0547, CVE-2014-0549, CVE-2014-0550, CVE-2014-0551, and CVE-2014-0552.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0555", url: "https://www.suse.com/security/cve/CVE-2014-0555", }, { category: "external", summary: "SUSE Bug 895856 for CVE-2014-0555", url: "https://bugzilla.suse.com/895856", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2014-0555", }, { cve: "CVE-2014-0556", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0556", }, ], notes: [ { category: "general", text: "Heap-based buffer overflow in Adobe Flash Player before 13.0.0.244 and 14.x and 15.x before 15.0.0.152 on Windows and OS X and before 11.2.202.406 on Linux, Adobe AIR before 15.0.0.249 on Windows and OS X and before 15.0.0.252 on Android, Adobe AIR SDK before 15.0.0.249, and Adobe AIR SDK & Compiler before 15.0.0.249 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2014-0559.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0556", url: "https://www.suse.com/security/cve/CVE-2014-0556", }, { category: "external", summary: "SUSE Bug 895856 for CVE-2014-0556", url: "https://bugzilla.suse.com/895856", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2014-0556", }, { cve: "CVE-2014-0557", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0557", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.244 and 14.x and 15.x before 15.0.0.152 on Windows and OS X and before 11.2.202.406 on Linux, Adobe AIR before 15.0.0.249 on Windows and OS X and before 15.0.0.252 on Android, Adobe AIR SDK before 15.0.0.249, and Adobe AIR SDK & Compiler before 15.0.0.249 do not properly restrict discovery of memory addresses, which allows attackers to bypass the ASLR protection mechanism via unspecified vectors.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0557", url: "https://www.suse.com/security/cve/CVE-2014-0557", }, { category: "external", summary: "SUSE Bug 895856 for CVE-2014-0557", url: "https://bugzilla.suse.com/895856", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2014-0557", }, { cve: "CVE-2014-0558", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0558", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.250 and 14.x and 15.x before 15.0.0.189 on Windows and OS X and before 11.2.202.411 on Linux, Adobe AIR before 15.0.0.293, Adobe AIR SDK before 15.0.0.302, and Adobe AIR SDK & Compiler before 15.0.0.302 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2014-0564.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0558", url: "https://www.suse.com/security/cve/CVE-2014-0558", }, { category: "external", summary: "SUSE Bug 901334 for CVE-2014-0558", url: "https://bugzilla.suse.com/901334", }, { category: "external", summary: "SUSE Bug 905032 for CVE-2014-0558", url: "https://bugzilla.suse.com/905032", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "moderate", }, ], title: "CVE-2014-0558", }, { cve: "CVE-2014-0559", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0559", }, ], notes: [ { category: "general", text: "Heap-based buffer overflow in Adobe Flash Player before 13.0.0.244 and 14.x and 15.x before 15.0.0.152 on Windows and OS X and before 11.2.202.406 on Linux, Adobe AIR before 15.0.0.249 on Windows and OS X and before 15.0.0.252 on Android, Adobe AIR SDK before 15.0.0.249, and Adobe AIR SDK & Compiler before 15.0.0.249 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2014-0556.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0559", url: "https://www.suse.com/security/cve/CVE-2014-0559", }, { category: "external", summary: "SUSE Bug 895856 for CVE-2014-0559", url: "https://bugzilla.suse.com/895856", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2014-0559", }, { cve: "CVE-2014-0564", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0564", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.250 and 14.x and 15.x before 15.0.0.189 on Windows and OS X and before 11.2.202.411 on Linux, Adobe AIR before 15.0.0.293, Adobe AIR SDK before 15.0.0.302, and Adobe AIR SDK & Compiler before 15.0.0.302 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2014-0558.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0564", url: "https://www.suse.com/security/cve/CVE-2014-0564", }, { category: "external", summary: "SUSE Bug 901334 for CVE-2014-0564", url: "https://bugzilla.suse.com/901334", }, { category: "external", summary: "SUSE Bug 905032 for CVE-2014-0564", url: "https://bugzilla.suse.com/905032", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "moderate", }, ], title: "CVE-2014-0564", }, { cve: "CVE-2014-0569", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0569", }, ], notes: [ { category: "general", text: "Integer overflow in Adobe Flash Player before 13.0.0.250 and 14.x and 15.x before 15.0.0.189 on Windows and OS X and before 11.2.202.411 on Linux, Adobe AIR before 15.0.0.293, Adobe AIR SDK before 15.0.0.302, and Adobe AIR SDK & Compiler before 15.0.0.302 allows attackers to execute arbitrary code via unspecified vectors.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0569", url: "https://www.suse.com/security/cve/CVE-2014-0569", }, { category: "external", summary: "SUSE Bug 901334 for CVE-2014-0569", url: "https://bugzilla.suse.com/901334", }, { category: "external", summary: "SUSE Bug 905032 for CVE-2014-0569", url: "https://bugzilla.suse.com/905032", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "moderate", }, ], title: "CVE-2014-0569", }, { cve: "CVE-2014-0573", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0573", }, ], notes: [ { category: "general", text: "Use-after-free vulnerability in Adobe Flash Player before 13.0.0.252 and 14.x and 15.x before 15.0.0.223 on Windows and OS X and before 11.2.202.418 on Linux, Adobe AIR before 15.0.0.356, Adobe AIR SDK before 15.0.0.356, and Adobe AIR SDK & Compiler before 15.0.0.356 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2014-0588 and CVE-2014-8438.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0573", url: "https://www.suse.com/security/cve/CVE-2014-0573", }, { category: "external", summary: "SUSE Bug 905032 for CVE-2014-0573", url: "https://bugzilla.suse.com/905032", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2014-0573", }, { cve: "CVE-2014-0574", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0574", }, ], notes: [ { category: "general", text: "Double free vulnerability in Adobe Flash Player before 13.0.0.252 and 14.x and 15.x before 15.0.0.223 on Windows and OS X and before 11.2.202.418 on Linux, Adobe AIR before 15.0.0.356, Adobe AIR SDK before 15.0.0.356, and Adobe AIR SDK & Compiler before 15.0.0.356 allows attackers to execute arbitrary code via unspecified vectors.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0574", url: "https://www.suse.com/security/cve/CVE-2014-0574", }, { category: "external", summary: "SUSE Bug 905032 for CVE-2014-0574", url: "https://bugzilla.suse.com/905032", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2014-0574", }, { cve: "CVE-2014-0576", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0576", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.252 and 14.x and 15.x before 15.0.0.223 on Windows and OS X and before 11.2.202.418 on Linux, Adobe AIR before 15.0.0.356, Adobe AIR SDK before 15.0.0.356, and Adobe AIR SDK & Compiler before 15.0.0.356 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2014-0581, CVE-2014-8440, and CVE-2014-8441.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0576", url: "https://www.suse.com/security/cve/CVE-2014-0576", }, { category: "external", summary: "SUSE Bug 905032 for CVE-2014-0576", url: "https://bugzilla.suse.com/905032", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2014-0576", }, { cve: "CVE-2014-0577", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0577", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.252 and 14.x and 15.x before 15.0.0.223 on Windows and OS X and before 11.2.202.418 on Linux, Adobe AIR before 15.0.0.356, Adobe AIR SDK before 15.0.0.356, and Adobe AIR SDK & Compiler before 15.0.0.356 allow attackers to execute arbitrary code by leveraging an unspecified \"type confusion,\" a different vulnerability than CVE-2014-0584, CVE-2014-0585, CVE-2014-0586, and CVE-2014-0590.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0577", url: "https://www.suse.com/security/cve/CVE-2014-0577", }, { category: "external", summary: "SUSE Bug 905032 for CVE-2014-0577", url: "https://bugzilla.suse.com/905032", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2014-0577", }, { cve: "CVE-2014-0580", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0580", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.259 and 14.x through 16.x before 16.0.0.235 on Windows and OS X and before 11.2.202.425 on Linux allows remote attackers to bypass the Same Origin Policy via unspecified vectors.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0580", url: "https://www.suse.com/security/cve/CVE-2014-0580", }, { category: "external", summary: "SUSE Bug 909219 for CVE-2014-0580", url: "https://bugzilla.suse.com/909219", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2014-0580", }, { cve: "CVE-2014-0581", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0581", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.252 and 14.x and 15.x before 15.0.0.223 on Windows and OS X and before 11.2.202.418 on Linux, Adobe AIR before 15.0.0.356, Adobe AIR SDK before 15.0.0.356, and Adobe AIR SDK & Compiler before 15.0.0.356 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2014-0576, CVE-2014-8440, and CVE-2014-8441.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0581", url: "https://www.suse.com/security/cve/CVE-2014-0581", }, { category: "external", summary: "SUSE Bug 905032 for CVE-2014-0581", url: "https://bugzilla.suse.com/905032", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "important", }, ], title: "CVE-2014-0581", }, { cve: "CVE-2014-0582", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0582", }, ], notes: [ { category: "general", text: "Heap-based buffer overflow in Adobe Flash Player before 13.0.0.252 and 14.x and 15.x before 15.0.0.223 on Windows and OS X and before 11.2.202.418 on Linux, Adobe AIR before 15.0.0.356, Adobe AIR SDK before 15.0.0.356, and Adobe AIR SDK & Compiler before 15.0.0.356 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2014-0589.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0582", url: "https://www.suse.com/security/cve/CVE-2014-0582", }, { category: "external", summary: "SUSE Bug 905032 for CVE-2014-0582", url: "https://bugzilla.suse.com/905032", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "important", }, ], title: "CVE-2014-0582", }, { cve: "CVE-2014-0583", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0583", }, ], notes: [ { category: "general", text: "Heap-based buffer overflow in Adobe Flash Player before 13.0.0.252 and 14.x and 15.x before 15.0.0.223 on Windows and OS X and before 11.2.202.418 on Linux, Adobe AIR before 15.0.0.356, Adobe AIR SDK before 15.0.0.356, and Adobe AIR SDK & Compiler before 15.0.0.356 allows attackers to complete a transition from Low Integrity to Medium Integrity via unspecified vectors.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0583", url: "https://www.suse.com/security/cve/CVE-2014-0583", }, { category: "external", summary: "SUSE Bug 905032 for CVE-2014-0583", url: "https://bugzilla.suse.com/905032", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2014-0583", }, { cve: "CVE-2014-0584", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0584", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.252 and 14.x and 15.x before 15.0.0.223 on Windows and OS X and before 11.2.202.418 on Linux, Adobe AIR before 15.0.0.356, Adobe AIR SDK before 15.0.0.356, and Adobe AIR SDK & Compiler before 15.0.0.356 allow attackers to execute arbitrary code by leveraging an unspecified \"type confusion,\" a different vulnerability than CVE-2014-0577, CVE-2014-0585, CVE-2014-0586, and CVE-2014-0590.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0584", url: "https://www.suse.com/security/cve/CVE-2014-0584", }, { category: "external", summary: "SUSE Bug 905032 for CVE-2014-0584", url: "https://bugzilla.suse.com/905032", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "important", }, ], title: "CVE-2014-0584", }, { cve: "CVE-2014-0585", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0585", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.252 and 14.x and 15.x before 15.0.0.223 on Windows and OS X and before 11.2.202.418 on Linux, Adobe AIR before 15.0.0.356, Adobe AIR SDK before 15.0.0.356, and Adobe AIR SDK & Compiler before 15.0.0.356 allow attackers to execute arbitrary code by leveraging an unspecified \"type confusion,\" a different vulnerability than CVE-2014-0577, CVE-2014-0584, CVE-2014-0586, and CVE-2014-0590.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0585", url: "https://www.suse.com/security/cve/CVE-2014-0585", }, { category: "external", summary: "SUSE Bug 905032 for CVE-2014-0585", url: "https://bugzilla.suse.com/905032", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "important", }, ], title: "CVE-2014-0585", }, { cve: "CVE-2014-0586", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0586", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.252 and 14.x and 15.x before 15.0.0.223 on Windows and OS X and before 11.2.202.418 on Linux, Adobe AIR before 15.0.0.356, Adobe AIR SDK before 15.0.0.356, and Adobe AIR SDK & Compiler before 15.0.0.356 allow attackers to execute arbitrary code by leveraging an unspecified \"type confusion,\" a different vulnerability than CVE-2014-0577, CVE-2014-0584, CVE-2014-0585, and CVE-2014-0590.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0586", url: "https://www.suse.com/security/cve/CVE-2014-0586", }, { category: "external", summary: "SUSE Bug 905032 for CVE-2014-0586", url: "https://bugzilla.suse.com/905032", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "important", }, ], title: "CVE-2014-0586", }, { cve: "CVE-2014-0587", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0587", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.259 and 14.x through 16.x before 16.0.0.235 on Windows and OS X and before 11.2.202.425 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2014-9164.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0587", url: "https://www.suse.com/security/cve/CVE-2014-0587", }, { category: "external", summary: "SUSE Bug 909219 for CVE-2014-0587", url: "https://bugzilla.suse.com/909219", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2014-0587", }, { cve: "CVE-2014-0588", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0588", }, ], notes: [ { category: "general", text: "Use-after-free vulnerability in Adobe Flash Player before 13.0.0.252 and 14.x and 15.x before 15.0.0.223 on Windows and OS X and before 11.2.202.418 on Linux, Adobe AIR before 15.0.0.356, Adobe AIR SDK before 15.0.0.356, and Adobe AIR SDK & Compiler before 15.0.0.356 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2014-0573 and CVE-2014-8438.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0588", url: "https://www.suse.com/security/cve/CVE-2014-0588", }, { category: "external", summary: "SUSE Bug 905032 for CVE-2014-0588", url: "https://bugzilla.suse.com/905032", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "important", }, ], title: "CVE-2014-0588", }, { cve: "CVE-2014-0589", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0589", }, ], notes: [ { category: "general", text: "Heap-based buffer overflow in Adobe Flash Player before 13.0.0.252 and 14.x and 15.x before 15.0.0.223 on Windows and OS X and before 11.2.202.418 on Linux, Adobe AIR before 15.0.0.356, Adobe AIR SDK before 15.0.0.356, and Adobe AIR SDK & Compiler before 15.0.0.356 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2014-0582.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0589", url: "https://www.suse.com/security/cve/CVE-2014-0589", }, { category: "external", summary: "SUSE Bug 905032 for CVE-2014-0589", url: "https://bugzilla.suse.com/905032", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "important", }, ], title: "CVE-2014-0589", }, { cve: "CVE-2014-0590", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0590", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.252 and 14.x and 15.x before 15.0.0.223 on Windows and OS X and before 11.2.202.418 on Linux, Adobe AIR before 15.0.0.356, Adobe AIR SDK before 15.0.0.356, and Adobe AIR SDK & Compiler before 15.0.0.356 allow attackers to execute arbitrary code by leveraging an unspecified \"type confusion,\" a different vulnerability than CVE-2014-0577, CVE-2014-0584, CVE-2014-0585, and CVE-2014-0586.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0590", url: "https://www.suse.com/security/cve/CVE-2014-0590", }, { category: "external", summary: "SUSE Bug 905032 for CVE-2014-0590", url: "https://bugzilla.suse.com/905032", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "important", }, ], title: "CVE-2014-0590", }, { cve: "CVE-2014-4671", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-4671", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.231 and 14.x before 14.0.0.145 on Windows and OS X and before 11.2.202.394 on Linux, Adobe AIR before 14.0.0.137 on Android, Adobe AIR SDK before 14.0.0.137, and Adobe AIR SDK & Compiler before 14.0.0.137 do not properly restrict the SWF file format, which allows remote attackers to conduct cross-site request forgery (CSRF) attacks against JSONP endpoints, and obtain sensitive information, via a crafted OBJECT element with SWF content satisfying the character-set requirements of a callback API.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-4671", url: "https://www.suse.com/security/cve/CVE-2014-4671", }, { category: "external", summary: "SUSE Bug 886454 for CVE-2014-4671", url: "https://bugzilla.suse.com/886454", }, { category: "external", summary: "SUSE Bug 891688 for CVE-2014-4671", url: "https://bugzilla.suse.com/891688", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2014-4671", }, { cve: "CVE-2014-8437", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-8437", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.252 and 14.x and 15.x before 15.0.0.223 on Windows and OS X and before 11.2.202.418 on Linux, Adobe AIR before 15.0.0.356, Adobe AIR SDK before 15.0.0.356, and Adobe AIR SDK & Compiler before 15.0.0.356 allow remote attackers to discover session tokens via unspecified vectors.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-8437", url: "https://www.suse.com/security/cve/CVE-2014-8437", }, { category: "external", summary: "SUSE Bug 905032 for CVE-2014-8437", url: "https://bugzilla.suse.com/905032", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "important", }, ], title: "CVE-2014-8437", }, { cve: "CVE-2014-8438", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-8438", }, ], notes: [ { category: "general", text: "Use-after-free vulnerability in Adobe Flash Player before 13.0.0.252 and 14.x and 15.x before 15.0.0.223 on Windows and OS X and before 11.2.202.418 on Linux, Adobe AIR before 15.0.0.356, Adobe AIR SDK before 15.0.0.356, and Adobe AIR SDK & Compiler before 15.0.0.356 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2014-0573 and CVE-2014-0588.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-8438", url: "https://www.suse.com/security/cve/CVE-2014-8438", }, { category: "external", summary: "SUSE Bug 905032 for CVE-2014-8438", url: "https://bugzilla.suse.com/905032", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "important", }, ], title: "CVE-2014-8438", }, { cve: "CVE-2014-8439", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-8439", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.258 and 14.x and 15.x before 15.0.0.239 on Windows and OS X and before 11.2.202.424 on Linux, Adobe AIR before 15.0.0.293, Adobe AIR SDK before 15.0.0.302, and Adobe AIR SDK & Compiler before 15.0.0.302 allow attackers to execute arbitrary code or cause a denial of service (invalid pointer dereference) via unspecified vectors.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-8439", url: "https://www.suse.com/security/cve/CVE-2014-8439", }, { category: "external", summary: "SUSE Bug 907257 for CVE-2014-8439", url: "https://bugzilla.suse.com/907257", }, { category: "external", summary: "SUSE Bug 909219 for CVE-2014-8439", url: "https://bugzilla.suse.com/909219", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2014-8439", }, { cve: "CVE-2014-8440", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-8440", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.252 and 14.x and 15.x before 15.0.0.223 on Windows and OS X and before 11.2.202.418 on Linux, Adobe AIR before 15.0.0.356, Adobe AIR SDK before 15.0.0.356, and Adobe AIR SDK & Compiler before 15.0.0.356 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2014-0576, CVE-2014-0581, and CVE-2014-8441.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-8440", url: "https://www.suse.com/security/cve/CVE-2014-8440", }, { category: "external", summary: "SUSE Bug 905032 for CVE-2014-8440", url: "https://bugzilla.suse.com/905032", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "important", }, ], title: "CVE-2014-8440", }, { cve: "CVE-2014-8441", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-8441", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.252 and 14.x and 15.x before 15.0.0.223 on Windows and OS X and before 11.2.202.418 on Linux, Adobe AIR before 15.0.0.356, Adobe AIR SDK before 15.0.0.356, and Adobe AIR SDK & Compiler before 15.0.0.356 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2014-0576, CVE-2014-0581, and CVE-2014-8440.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-8441", url: "https://www.suse.com/security/cve/CVE-2014-8441", }, { category: "external", summary: "SUSE Bug 905032 for CVE-2014-8441", url: "https://bugzilla.suse.com/905032", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "important", }, ], title: "CVE-2014-8441", }, { cve: "CVE-2014-8442", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-8442", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.252 and 14.x and 15.x before 15.0.0.223 on Windows and OS X and before 11.2.202.418 on Linux, Adobe AIR before 15.0.0.356, Adobe AIR SDK before 15.0.0.356, and Adobe AIR SDK & Compiler before 15.0.0.356 allow attackers to complete a transition from Low Integrity to Medium Integrity by leveraging incorrect permissions.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-8442", url: "https://www.suse.com/security/cve/CVE-2014-8442", }, { category: "external", summary: "SUSE Bug 905032 for CVE-2014-8442", url: "https://bugzilla.suse.com/905032", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2014-8442", }, { cve: "CVE-2014-8443", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-8443", }, ], notes: [ { category: "general", text: "Use-after-free vulnerability in Adobe Flash Player before 13.0.0.259 and 14.x through 16.x before 16.0.0.235 on Windows and OS X and before 11.2.202.425 on Linux allows attackers to execute arbitrary code via unspecified vectors.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-8443", url: "https://www.suse.com/security/cve/CVE-2014-8443", }, { category: "external", summary: "SUSE Bug 909219 for CVE-2014-8443", url: "https://bugzilla.suse.com/909219", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2014-8443", }, { cve: "CVE-2014-9162", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-9162", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.259 and 14.x through 16.x before 16.0.0.235 on Windows and OS X and before 11.2.202.425 on Linux allows attackers to obtain sensitive information via unspecified vectors.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-9162", url: "https://www.suse.com/security/cve/CVE-2014-9162", }, { category: "external", summary: "SUSE Bug 909219 for CVE-2014-9162", url: "https://bugzilla.suse.com/909219", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2014-9162", }, { cve: "CVE-2014-9163", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-9163", }, ], notes: [ { category: "general", text: "Stack-based buffer overflow in Adobe Flash Player before 13.0.0.259 and 14.x and 15.x before 15.0.0.246 on Windows and OS X and before 11.2.202.425 on Linux allows attackers to execute arbitrary code via unspecified vectors, as exploited in the wild in December 2014.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-9163", url: "https://www.suse.com/security/cve/CVE-2014-9163", }, { category: "external", summary: "SUSE Bug 909219 for CVE-2014-9163", url: "https://bugzilla.suse.com/909219", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2014-9163", }, { cve: "CVE-2014-9164", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-9164", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.259 and 14.x through 16.x before 16.0.0.235 on Windows and OS X and before 11.2.202.425 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2014-0587.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-9164", url: "https://www.suse.com/security/cve/CVE-2014-9164", }, { category: "external", summary: "SUSE Bug 909219 for CVE-2014-9164", url: "https://bugzilla.suse.com/909219", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2014-9164", }, { cve: "CVE-2015-0301", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-0301", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.260 and 14.x through 16.x before 16.0.0.257 on Windows and OS X and before 11.2.202.429 on Linux, Adobe AIR before 16.0.0.245 on Windows and OS X and before 16.0.0.272 on Android, Adobe AIR SDK before 16.0.0.272, and Adobe AIR SDK & Compiler before 16.0.0.272 do not properly validate files, which has unspecified impact and attack vectors.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-0301", url: "https://www.suse.com/security/cve/CVE-2015-0301", }, { category: "external", summary: "SUSE Bug 913057 for CVE-2015-0301", url: "https://bugzilla.suse.com/913057", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2015-0301", }, { cve: "CVE-2015-0302", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-0302", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.260 and 14.x through 16.x before 16.0.0.257 on Windows and OS X and before 11.2.202.429 on Linux, Adobe AIR before 16.0.0.245 on Windows and OS X and before 16.0.0.272 on Android, Adobe AIR SDK before 16.0.0.272, and Adobe AIR SDK & Compiler before 16.0.0.272 allow attackers to obtain sensitive keystroke information via unspecified vectors.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-0302", url: "https://www.suse.com/security/cve/CVE-2015-0302", }, { category: "external", summary: "SUSE Bug 913057 for CVE-2015-0302", url: "https://bugzilla.suse.com/913057", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2015-0302", }, { cve: "CVE-2015-0303", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-0303", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.260 and 14.x through 16.x before 16.0.0.257 on Windows and OS X and before 11.2.202.429 on Linux, Adobe AIR before 16.0.0.245 on Windows and OS X and before 16.0.0.272 on Android, Adobe AIR SDK before 16.0.0.272, and Adobe AIR SDK & Compiler before 16.0.0.272 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-0306.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-0303", url: "https://www.suse.com/security/cve/CVE-2015-0303", }, { category: "external", summary: "SUSE Bug 913057 for CVE-2015-0303", url: "https://bugzilla.suse.com/913057", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2015-0303", }, { cve: "CVE-2015-0304", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-0304", }, ], notes: [ { category: "general", text: "Heap-based buffer overflow in Adobe Flash Player before 13.0.0.260 and 14.x through 16.x before 16.0.0.257 on Windows and OS X and before 11.2.202.429 on Linux, Adobe AIR before 16.0.0.245 on Windows and OS X and before 16.0.0.272 on Android, Adobe AIR SDK before 16.0.0.272, and Adobe AIR SDK & Compiler before 16.0.0.272 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-0309.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-0304", url: "https://www.suse.com/security/cve/CVE-2015-0304", }, { category: "external", summary: "SUSE Bug 913057 for CVE-2015-0304", url: "https://bugzilla.suse.com/913057", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2015-0304", }, { cve: "CVE-2015-0305", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-0305", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.260 and 14.x through 16.x before 16.0.0.257 on Windows and OS X and before 11.2.202.429 on Linux, Adobe AIR before 16.0.0.245 on Windows and OS X and before 16.0.0.272 on Android, Adobe AIR SDK before 16.0.0.272, and Adobe AIR SDK & Compiler before 16.0.0.272 allow attackers to execute arbitrary code by leveraging an unspecified \"type confusion.\"", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-0305", url: "https://www.suse.com/security/cve/CVE-2015-0305", }, { category: "external", summary: "SUSE Bug 913057 for CVE-2015-0305", url: "https://bugzilla.suse.com/913057", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2015-0305", }, { cve: "CVE-2015-0306", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-0306", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.260 and 14.x through 16.x before 16.0.0.257 on Windows and OS X and before 11.2.202.429 on Linux, Adobe AIR before 16.0.0.245 on Windows and OS X and before 16.0.0.272 on Android, Adobe AIR SDK before 16.0.0.272, and Adobe AIR SDK & Compiler before 16.0.0.272 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-0303.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-0306", url: "https://www.suse.com/security/cve/CVE-2015-0306", }, { category: "external", summary: "SUSE Bug 913057 for CVE-2015-0306", url: "https://bugzilla.suse.com/913057", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2015-0306", }, { cve: "CVE-2015-0307", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-0307", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.260 and 14.x through 16.x before 16.0.0.257 on Windows and OS X and before 11.2.202.429 on Linux, Adobe AIR before 16.0.0.245 on Windows and OS X and before 16.0.0.272 on Android, Adobe AIR SDK before 16.0.0.272, and Adobe AIR SDK & Compiler before 16.0.0.272 allow remote attackers to obtain sensitive information from process memory or cause a denial of service (out-of-bounds read) via unspecified vectors.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-0307", url: "https://www.suse.com/security/cve/CVE-2015-0307", }, { category: "external", summary: "SUSE Bug 913057 for CVE-2015-0307", url: "https://bugzilla.suse.com/913057", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2015-0307", }, { cve: "CVE-2015-0308", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-0308", }, ], notes: [ { category: "general", text: "Use-after-free vulnerability in Adobe Flash Player before 13.0.0.260 and 14.x through 16.x before 16.0.0.257 on Windows and OS X and before 11.2.202.429 on Linux, Adobe AIR before 16.0.0.245 on Windows and OS X and before 16.0.0.272 on Android, Adobe AIR SDK before 16.0.0.272, and Adobe AIR SDK & Compiler before 16.0.0.272 allows attackers to execute arbitrary code via unspecified vectors.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-0308", url: "https://www.suse.com/security/cve/CVE-2015-0308", }, { category: "external", summary: "SUSE Bug 913057 for CVE-2015-0308", url: "https://bugzilla.suse.com/913057", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2015-0308", }, { cve: "CVE-2015-0309", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-0309", }, ], notes: [ { category: "general", text: "Heap-based buffer overflow in Adobe Flash Player before 13.0.0.260 and 14.x through 16.x before 16.0.0.257 on Windows and OS X and before 11.2.202.429 on Linux, Adobe AIR before 16.0.0.245 on Windows and OS X and before 16.0.0.272 on Android, Adobe AIR SDK before 16.0.0.272, and Adobe AIR SDK & Compiler before 16.0.0.272 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-0304.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-0309", url: "https://www.suse.com/security/cve/CVE-2015-0309", }, { category: "external", summary: "SUSE Bug 913057 for CVE-2015-0309", url: "https://bugzilla.suse.com/913057", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2015-0309", }, { cve: "CVE-2015-0310", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-0310", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.262 and 14.x through 16.x before 16.0.0.287 on Windows and OS X and before 11.2.202.438 on Linux does not properly restrict discovery of memory addresses, which allows attackers to bypass the ASLR protection mechanism on Windows, and have an unspecified impact on other platforms, via unknown vectors, as exploited in the wild in January 2015.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-0310", url: "https://www.suse.com/security/cve/CVE-2015-0310", }, { category: "external", summary: "SUSE Bug 914333 for CVE-2015-0310", url: "https://bugzilla.suse.com/914333", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2015-0310", }, { cve: "CVE-2015-0311", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-0311", }, ], notes: [ { category: "general", text: "Unspecified vulnerability in Adobe Flash Player through 13.0.0.262 and 14.x, 15.x, and 16.x through 16.0.0.287 on Windows and OS X and through 11.2.202.438 on Linux allows remote attackers to execute arbitrary code via unknown vectors, as exploited in the wild in January 2015.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-0311", url: "https://www.suse.com/security/cve/CVE-2015-0311", }, { category: "external", summary: "SUSE Bug 914463 for CVE-2015-0311", url: "https://bugzilla.suse.com/914463", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 9.8, baseSeverity: "CRITICAL", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2015-0311", }, { cve: "CVE-2015-0313", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-0313", }, ], notes: [ { category: "general", text: "Use-after-free vulnerability in Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows and OS X and before 11.2.202.442 on Linux allows remote attackers to execute arbitrary code via unspecified vectors, as exploited in the wild in February 2015, a different vulnerability than CVE-2015-0315, CVE-2015-0320, and CVE-2015-0322.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-0313", url: "https://www.suse.com/security/cve/CVE-2015-0313", }, { category: "external", summary: "SUSE Bug 915918 for CVE-2015-0313", url: "https://bugzilla.suse.com/915918", }, { category: "external", summary: "SUSE Bug 916374 for CVE-2015-0313", url: "https://bugzilla.suse.com/916374", }, { category: "external", summary: "SUSE Bug 922033 for CVE-2015-0313", url: "https://bugzilla.suse.com/922033", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 9.8, baseSeverity: "CRITICAL", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2015-0313", }, { cve: "CVE-2015-0314", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-0314", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows and OS X and before 11.2.202.442 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-0316, CVE-2015-0318, CVE-2015-0321, CVE-2015-0329, and CVE-2015-0330.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-0314", url: "https://www.suse.com/security/cve/CVE-2015-0314", }, { category: "external", summary: "SUSE Bug 915918 for CVE-2015-0314", url: "https://bugzilla.suse.com/915918", }, { category: "external", summary: "SUSE Bug 922033 for CVE-2015-0314", url: "https://bugzilla.suse.com/922033", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2015-0314", }, { cve: "CVE-2015-0315", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-0315", }, ], notes: [ { category: "general", text: "Use-after-free vulnerability in Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows and OS X and before 11.2.202.442 on Linux allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-0313, CVE-2015-0320, and CVE-2015-0322.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-0315", url: "https://www.suse.com/security/cve/CVE-2015-0315", }, { category: "external", summary: "SUSE Bug 915918 for CVE-2015-0315", url: "https://bugzilla.suse.com/915918", }, { category: "external", summary: "SUSE Bug 922033 for CVE-2015-0315", url: "https://bugzilla.suse.com/922033", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2015-0315", }, { cve: "CVE-2015-0316", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-0316", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows and OS X and before 11.2.202.442 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-0314, CVE-2015-0318, CVE-2015-0321, CVE-2015-0329, and CVE-2015-0330.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-0316", url: "https://www.suse.com/security/cve/CVE-2015-0316", }, { category: "external", summary: "SUSE Bug 915918 for CVE-2015-0316", url: "https://bugzilla.suse.com/915918", }, { category: "external", summary: "SUSE Bug 922033 for CVE-2015-0316", url: "https://bugzilla.suse.com/922033", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2015-0316", }, { cve: "CVE-2015-0317", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-0317", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows and OS X and before 11.2.202.442 on Linux allows attackers to execute arbitrary code by leveraging an unspecified \"type confusion,\" a different vulnerability than CVE-2015-0319.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-0317", url: "https://www.suse.com/security/cve/CVE-2015-0317", }, { category: "external", summary: "SUSE Bug 915918 for CVE-2015-0317", url: "https://bugzilla.suse.com/915918", }, { category: "external", summary: "SUSE Bug 922033 for CVE-2015-0317", url: "https://bugzilla.suse.com/922033", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2015-0317", }, { cve: "CVE-2015-0318", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-0318", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows and OS X and before 11.2.202.442 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-0314, CVE-2015-0316, CVE-2015-0321, CVE-2015-0329, and CVE-2015-0330.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-0318", url: "https://www.suse.com/security/cve/CVE-2015-0318", }, { category: "external", summary: "SUSE Bug 915918 for CVE-2015-0318", url: "https://bugzilla.suse.com/915918", }, { category: "external", summary: "SUSE Bug 922033 for CVE-2015-0318", url: "https://bugzilla.suse.com/922033", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2015-0318", }, { cve: "CVE-2015-0319", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-0319", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows and OS X and before 11.2.202.442 on Linux allows attackers to execute arbitrary code by leveraging an unspecified \"type confusion,\" a different vulnerability than CVE-2015-0317.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-0319", url: "https://www.suse.com/security/cve/CVE-2015-0319", }, { category: "external", summary: "SUSE Bug 915918 for CVE-2015-0319", url: "https://bugzilla.suse.com/915918", }, { category: "external", summary: "SUSE Bug 922033 for CVE-2015-0319", url: "https://bugzilla.suse.com/922033", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2015-0319", }, { cve: "CVE-2015-0320", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-0320", }, ], notes: [ { category: "general", text: "Use-after-free vulnerability in Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows and OS X and before 11.2.202.442 on Linux allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-0313, CVE-2015-0315, and CVE-2015-0322.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-0320", url: "https://www.suse.com/security/cve/CVE-2015-0320", }, { category: "external", summary: "SUSE Bug 915918 for CVE-2015-0320", url: "https://bugzilla.suse.com/915918", }, { category: "external", summary: "SUSE Bug 922033 for CVE-2015-0320", url: "https://bugzilla.suse.com/922033", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2015-0320", }, { cve: "CVE-2015-0321", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-0321", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows and OS X and before 11.2.202.442 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-0314, CVE-2015-0316, CVE-2015-0318, CVE-2015-0329, and CVE-2015-0330.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-0321", url: "https://www.suse.com/security/cve/CVE-2015-0321", }, { category: "external", summary: "SUSE Bug 915918 for CVE-2015-0321", url: "https://bugzilla.suse.com/915918", }, { category: "external", summary: "SUSE Bug 922033 for CVE-2015-0321", url: "https://bugzilla.suse.com/922033", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2015-0321", }, { cve: "CVE-2015-0322", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-0322", }, ], notes: [ { category: "general", text: "Use-after-free vulnerability in Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows and OS X and before 11.2.202.442 on Linux allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-0313, CVE-2015-0315, and CVE-2015-0320.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-0322", url: "https://www.suse.com/security/cve/CVE-2015-0322", }, { category: "external", summary: "SUSE Bug 915918 for CVE-2015-0322", url: "https://bugzilla.suse.com/915918", }, { category: "external", summary: "SUSE Bug 922033 for CVE-2015-0322", url: "https://bugzilla.suse.com/922033", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2015-0322", }, { cve: "CVE-2015-0323", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-0323", }, ], notes: [ { category: "general", text: "Heap-based buffer overflow in Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows and OS X and before 11.2.202.442 on Linux allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-0327.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-0323", url: "https://www.suse.com/security/cve/CVE-2015-0323", }, { category: "external", summary: "SUSE Bug 915918 for CVE-2015-0323", url: "https://bugzilla.suse.com/915918", }, { category: "external", summary: "SUSE Bug 922033 for CVE-2015-0323", url: "https://bugzilla.suse.com/922033", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2015-0323", }, { cve: "CVE-2015-0324", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-0324", }, ], notes: [ { category: "general", text: "Buffer overflow in Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows and OS X and before 11.2.202.442 on Linux allows attackers to execute arbitrary code via unspecified vectors.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-0324", url: "https://www.suse.com/security/cve/CVE-2015-0324", }, { category: "external", summary: "SUSE Bug 915918 for CVE-2015-0324", url: "https://bugzilla.suse.com/915918", }, { category: "external", summary: "SUSE Bug 922033 for CVE-2015-0324", url: "https://bugzilla.suse.com/922033", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2015-0324", }, { cve: "CVE-2015-0325", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-0325", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows and OS X and before 11.2.202.442 on Linux allows attackers to cause a denial of service (NULL pointer dereference) or possibly have unspecified other impact via unknown vectors, a different vulnerability than CVE-2015-0326 and CVE-2015-0328.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-0325", url: "https://www.suse.com/security/cve/CVE-2015-0325", }, { category: "external", summary: "SUSE Bug 915918 for CVE-2015-0325", url: "https://bugzilla.suse.com/915918", }, { category: "external", summary: "SUSE Bug 922033 for CVE-2015-0325", url: "https://bugzilla.suse.com/922033", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2015-0325", }, { cve: "CVE-2015-0326", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-0326", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows and OS X and before 11.2.202.442 on Linux allows attackers to cause a denial of service (NULL pointer dereference) or possibly have unspecified other impact via unknown vectors, a different vulnerability than CVE-2015-0325 and CVE-2015-0328.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-0326", url: "https://www.suse.com/security/cve/CVE-2015-0326", }, { category: "external", summary: "SUSE Bug 915918 for CVE-2015-0326", url: "https://bugzilla.suse.com/915918", }, { category: "external", summary: "SUSE Bug 922033 for CVE-2015-0326", url: "https://bugzilla.suse.com/922033", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2015-0326", }, { cve: "CVE-2015-0327", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-0327", }, ], notes: [ { category: "general", text: "Heap-based buffer overflow in Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows and OS X and before 11.2.202.442 on Linux allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-0323.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-0327", url: "https://www.suse.com/security/cve/CVE-2015-0327", }, { category: "external", summary: "SUSE Bug 915918 for CVE-2015-0327", url: "https://bugzilla.suse.com/915918", }, { category: "external", summary: "SUSE Bug 922033 for CVE-2015-0327", url: "https://bugzilla.suse.com/922033", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2015-0327", }, { cve: "CVE-2015-0328", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-0328", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows and OS X and before 11.2.202.442 on Linux allows attackers to cause a denial of service (NULL pointer dereference) or possibly have unspecified other impact via unknown vectors, a different vulnerability than CVE-2015-0325 and CVE-2015-0326.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-0328", url: "https://www.suse.com/security/cve/CVE-2015-0328", }, { category: "external", summary: "SUSE Bug 915918 for CVE-2015-0328", url: "https://bugzilla.suse.com/915918", }, { category: "external", summary: "SUSE Bug 922033 for CVE-2015-0328", url: "https://bugzilla.suse.com/922033", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2015-0328", }, { cve: "CVE-2015-0329", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-0329", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows and OS X and before 11.2.202.442 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-0314, CVE-2015-0316, CVE-2015-0318, CVE-2015-0321, and CVE-2015-0330.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-0329", url: "https://www.suse.com/security/cve/CVE-2015-0329", }, { category: "external", summary: "SUSE Bug 915918 for CVE-2015-0329", url: "https://bugzilla.suse.com/915918", }, { category: "external", summary: "SUSE Bug 922033 for CVE-2015-0329", url: "https://bugzilla.suse.com/922033", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2015-0329", }, { cve: "CVE-2015-0330", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-0330", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows and OS X and before 11.2.202.442 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-0314, CVE-2015-0316, CVE-2015-0318, CVE-2015-0321, and CVE-2015-0329.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-0330", url: "https://www.suse.com/security/cve/CVE-2015-0330", }, { category: "external", summary: "SUSE Bug 915918 for CVE-2015-0330", url: "https://bugzilla.suse.com/915918", }, { category: "external", summary: "SUSE Bug 922033 for CVE-2015-0330", url: "https://bugzilla.suse.com/922033", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2015-0330", }, { cve: "CVE-2015-0332", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-0332", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.277 and 14.x through 17.x before 17.0.0.134 on Windows and OS X and before 11.2.202.451 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-0333, CVE-2015-0335, and CVE-2015-0339.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-0332", url: "https://www.suse.com/security/cve/CVE-2015-0332", }, { category: "external", summary: "SUSE Bug 922033 for CVE-2015-0332", url: "https://bugzilla.suse.com/922033", }, { category: "external", summary: "SUSE Bug 922296 for CVE-2015-0332", url: "https://bugzilla.suse.com/922296", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2015-0332", }, { cve: "CVE-2015-0333", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-0333", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.277 and 14.x through 17.x before 17.0.0.134 on Windows and OS X and before 11.2.202.451 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-0332, CVE-2015-0335, and CVE-2015-0339.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-0333", url: "https://www.suse.com/security/cve/CVE-2015-0333", }, { category: "external", summary: "SUSE Bug 922033 for CVE-2015-0333", url: "https://bugzilla.suse.com/922033", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2015-0333", }, { cve: "CVE-2015-0334", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-0334", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.277 and 14.x through 17.x before 17.0.0.134 on Windows and OS X and before 11.2.202.451 on Linux allows attackers to execute arbitrary code by leveraging an unspecified \"type confusion,\" a different vulnerability than CVE-2015-0336.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-0334", url: "https://www.suse.com/security/cve/CVE-2015-0334", }, { category: "external", summary: "SUSE Bug 922033 for CVE-2015-0334", url: "https://bugzilla.suse.com/922033", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2015-0334", }, { cve: "CVE-2015-0335", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-0335", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.277 and 14.x through 17.x before 17.0.0.134 on Windows and OS X and before 11.2.202.451 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-0332, CVE-2015-0333, and CVE-2015-0339.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-0335", url: "https://www.suse.com/security/cve/CVE-2015-0335", }, { category: "external", summary: "SUSE Bug 922033 for CVE-2015-0335", url: "https://bugzilla.suse.com/922033", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2015-0335", }, { cve: "CVE-2015-0336", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-0336", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.277 and 14.x through 17.x before 17.0.0.134 on Windows and OS X and before 11.2.202.451 on Linux allows attackers to execute arbitrary code by leveraging an unspecified \"type confusion,\" a different vulnerability than CVE-2015-0334.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-0336", url: "https://www.suse.com/security/cve/CVE-2015-0336", }, { category: "external", summary: "SUSE Bug 922033 for CVE-2015-0336", url: "https://bugzilla.suse.com/922033", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2015-0336", }, { cve: "CVE-2015-0337", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-0337", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.277 and 14.x through 17.x before 17.0.0.134 on Windows and OS X and before 11.2.202.451 on Linux allows remote attackers to bypass the Same Origin Policy via unspecified vectors.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-0337", url: "https://www.suse.com/security/cve/CVE-2015-0337", }, { category: "external", summary: "SUSE Bug 922033 for CVE-2015-0337", url: "https://bugzilla.suse.com/922033", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2015-0337", }, { cve: "CVE-2015-0338", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-0338", }, ], notes: [ { category: "general", text: "Integer overflow in Adobe Flash Player before 13.0.0.277 and 14.x through 17.x before 17.0.0.134 on Windows and OS X and before 11.2.202.451 on Linux allows attackers to execute arbitrary code via unspecified vectors.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-0338", url: "https://www.suse.com/security/cve/CVE-2015-0338", }, { category: "external", summary: "SUSE Bug 922033 for CVE-2015-0338", url: "https://bugzilla.suse.com/922033", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2015-0338", }, { cve: "CVE-2015-0339", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-0339", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.277 and 14.x through 17.x before 17.0.0.134 on Windows and OS X and before 11.2.202.451 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-0332, CVE-2015-0333, and CVE-2015-0335.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-0339", url: "https://www.suse.com/security/cve/CVE-2015-0339", }, { category: "external", summary: "SUSE Bug 922033 for CVE-2015-0339", url: "https://bugzilla.suse.com/922033", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2015-0339", }, { cve: "CVE-2015-0340", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-0340", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.277 and 14.x through 17.x before 17.0.0.134 on Windows and OS X and before 11.2.202.451 on Linux allows remote attackers to bypass intended file-upload restrictions via unspecified vectors.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-0340", url: "https://www.suse.com/security/cve/CVE-2015-0340", }, { category: "external", summary: "SUSE Bug 922033 for CVE-2015-0340", url: "https://bugzilla.suse.com/922033", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2015-0340", }, { cve: "CVE-2015-0341", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-0341", }, ], notes: [ { category: "general", text: "Use-after-free vulnerability in Adobe Flash Player before 13.0.0.277 and 14.x through 17.x before 17.0.0.134 on Windows and OS X and before 11.2.202.451 on Linux allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-0342.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-0341", url: "https://www.suse.com/security/cve/CVE-2015-0341", }, { category: "external", summary: "SUSE Bug 922033 for CVE-2015-0341", url: "https://bugzilla.suse.com/922033", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2015-0341", }, { cve: "CVE-2015-0342", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-0342", }, ], notes: [ { category: "general", text: "Use-after-free vulnerability in Adobe Flash Player before 13.0.0.277 and 14.x through 17.x before 17.0.0.134 on Windows and OS X and before 11.2.202.451 on Linux allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-0341.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-0342", url: "https://www.suse.com/security/cve/CVE-2015-0342", }, { category: "external", summary: "SUSE Bug 922033 for CVE-2015-0342", url: "https://bugzilla.suse.com/922033", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2015-0342", }, { cve: "CVE-2015-0346", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-0346", }, ], notes: [ { category: "general", text: "Double free vulnerability in Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-0359.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-0346", url: "https://www.suse.com/security/cve/CVE-2015-0346", }, { category: "external", summary: "SUSE Bug 927089 for CVE-2015-0346", url: "https://bugzilla.suse.com/927089", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "moderate", }, ], title: "CVE-2015-0346", }, { cve: "CVE-2015-0347", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-0347", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-0350, CVE-2015-0352, CVE-2015-0353, CVE-2015-0354, CVE-2015-0355, CVE-2015-0360, CVE-2015-3038, CVE-2015-3041, CVE-2015-3042, and CVE-2015-3043.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-0347", url: "https://www.suse.com/security/cve/CVE-2015-0347", }, { category: "external", summary: "SUSE Bug 927089 for CVE-2015-0347", url: "https://bugzilla.suse.com/927089", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "moderate", }, ], title: "CVE-2015-0347", }, { cve: "CVE-2015-0348", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-0348", }, ], notes: [ { category: "general", text: "Buffer overflow in Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code via unspecified vectors.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-0348", url: "https://www.suse.com/security/cve/CVE-2015-0348", }, { category: "external", summary: "SUSE Bug 927089 for CVE-2015-0348", url: "https://bugzilla.suse.com/927089", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "moderate", }, ], title: "CVE-2015-0348", }, { cve: "CVE-2015-0349", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-0349", }, ], notes: [ { category: "general", text: "Use-after-free vulnerability in Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-0351, CVE-2015-0358, and CVE-2015-3039.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-0349", url: "https://www.suse.com/security/cve/CVE-2015-0349", }, { category: "external", summary: "SUSE Bug 927089 for CVE-2015-0349", url: "https://bugzilla.suse.com/927089", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "moderate", }, ], title: "CVE-2015-0349", }, { cve: "CVE-2015-0350", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-0350", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-0347, CVE-2015-0352, CVE-2015-0353, CVE-2015-0354, CVE-2015-0355, CVE-2015-0360, CVE-2015-3038, CVE-2015-3041, CVE-2015-3042, and CVE-2015-3043.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-0350", url: "https://www.suse.com/security/cve/CVE-2015-0350", }, { category: "external", summary: "SUSE Bug 927089 for CVE-2015-0350", url: "https://bugzilla.suse.com/927089", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "moderate", }, ], title: "CVE-2015-0350", }, { cve: "CVE-2015-0351", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-0351", }, ], notes: [ { category: "general", text: "Use-after-free vulnerability in Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-0349, CVE-2015-0358, and CVE-2015-3039.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-0351", url: "https://www.suse.com/security/cve/CVE-2015-0351", }, { category: "external", summary: "SUSE Bug 927089 for CVE-2015-0351", url: "https://bugzilla.suse.com/927089", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "moderate", }, ], title: "CVE-2015-0351", }, { cve: "CVE-2015-0352", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-0352", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-0347, CVE-2015-0350, CVE-2015-0353, CVE-2015-0354, CVE-2015-0355, CVE-2015-0360, CVE-2015-3038, CVE-2015-3041, CVE-2015-3042, and CVE-2015-3043.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-0352", url: "https://www.suse.com/security/cve/CVE-2015-0352", }, { category: "external", summary: "SUSE Bug 927089 for CVE-2015-0352", url: "https://bugzilla.suse.com/927089", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "moderate", }, ], title: "CVE-2015-0352", }, { cve: "CVE-2015-0353", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-0353", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-0347, CVE-2015-0350, CVE-2015-0352, CVE-2015-0354, CVE-2015-0355, CVE-2015-0360, CVE-2015-3038, CVE-2015-3041, CVE-2015-3042, and CVE-2015-3043.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-0353", url: "https://www.suse.com/security/cve/CVE-2015-0353", }, { category: "external", summary: "SUSE Bug 927089 for CVE-2015-0353", url: "https://bugzilla.suse.com/927089", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "moderate", }, ], title: "CVE-2015-0353", }, { cve: "CVE-2015-0354", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-0354", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-0347, CVE-2015-0350, CVE-2015-0352, CVE-2015-0353, CVE-2015-0355, CVE-2015-0360, CVE-2015-3038, CVE-2015-3041, CVE-2015-3042, and CVE-2015-3043.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-0354", url: "https://www.suse.com/security/cve/CVE-2015-0354", }, { category: "external", summary: "SUSE Bug 927089 for CVE-2015-0354", url: "https://bugzilla.suse.com/927089", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "moderate", }, ], title: "CVE-2015-0354", }, { cve: "CVE-2015-0355", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-0355", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-0347, CVE-2015-0350, CVE-2015-0352, CVE-2015-0353, CVE-2015-0354, CVE-2015-0360, CVE-2015-3038, CVE-2015-3041, CVE-2015-3042, and CVE-2015-3043.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-0355", url: "https://www.suse.com/security/cve/CVE-2015-0355", }, { category: "external", summary: "SUSE Bug 927089 for CVE-2015-0355", url: "https://bugzilla.suse.com/927089", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "moderate", }, ], title: "CVE-2015-0355", }, { cve: "CVE-2015-0356", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-0356", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code by leveraging an unspecified \"type confusion.\"", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-0356", url: "https://www.suse.com/security/cve/CVE-2015-0356", }, { category: "external", summary: "SUSE Bug 927089 for CVE-2015-0356", url: "https://bugzilla.suse.com/927089", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "moderate", }, ], title: "CVE-2015-0356", }, { cve: "CVE-2015-0357", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-0357", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux does not properly restrict discovery of memory addresses, which allows attackers to bypass the ASLR protection mechanism via unspecified vectors, a different vulnerability than CVE-2015-3040.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-0357", url: "https://www.suse.com/security/cve/CVE-2015-0357", }, { category: "external", summary: "SUSE Bug 927089 for CVE-2015-0357", url: "https://bugzilla.suse.com/927089", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "moderate", }, ], title: "CVE-2015-0357", }, { cve: "CVE-2015-0358", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-0358", }, ], notes: [ { category: "general", text: "Use-after-free vulnerability in Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-0349, CVE-2015-0351, and CVE-2015-3039.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-0358", url: "https://www.suse.com/security/cve/CVE-2015-0358", }, { category: "external", summary: "SUSE Bug 927089 for CVE-2015-0358", url: "https://bugzilla.suse.com/927089", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "moderate", }, ], title: "CVE-2015-0358", }, { cve: "CVE-2015-0359", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-0359", }, ], notes: [ { category: "general", text: "Double free vulnerability in Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-0346.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-0359", url: "https://www.suse.com/security/cve/CVE-2015-0359", }, { category: "external", summary: "SUSE Bug 927089 for CVE-2015-0359", url: "https://bugzilla.suse.com/927089", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "moderate", }, ], title: "CVE-2015-0359", }, { cve: "CVE-2015-0360", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-0360", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-0347, CVE-2015-0350, CVE-2015-0352, CVE-2015-0353, CVE-2015-0354, CVE-2015-0355, CVE-2015-3038, CVE-2015-3041, CVE-2015-3042, and CVE-2015-3043.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-0360", url: "https://www.suse.com/security/cve/CVE-2015-0360", }, { category: "external", summary: "SUSE Bug 927089 for CVE-2015-0360", url: "https://bugzilla.suse.com/927089", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "moderate", }, ], title: "CVE-2015-0360", }, { cve: "CVE-2015-3038", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-3038", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-0347, CVE-2015-0350, CVE-2015-0352, CVE-2015-0353, CVE-2015-0354, CVE-2015-0355, CVE-2015-0360, CVE-2015-3041, CVE-2015-3042, and CVE-2015-3043.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-3038", url: "https://www.suse.com/security/cve/CVE-2015-3038", }, { category: "external", summary: "SUSE Bug 927089 for CVE-2015-3038", url: "https://bugzilla.suse.com/927089", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "moderate", }, ], title: "CVE-2015-3038", }, { cve: "CVE-2015-3039", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-3039", }, ], notes: [ { category: "general", text: "Use-after-free vulnerability in Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-0349, CVE-2015-0351, and CVE-2015-0358.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-3039", url: "https://www.suse.com/security/cve/CVE-2015-3039", }, { category: "external", summary: "SUSE Bug 927089 for CVE-2015-3039", url: "https://bugzilla.suse.com/927089", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "moderate", }, ], title: "CVE-2015-3039", }, { cve: "CVE-2015-3040", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-3040", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux does not properly restrict discovery of memory addresses, which allows attackers to bypass the ASLR protection mechanism via unspecified vectors, a different vulnerability than CVE-2015-0357.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-3040", url: "https://www.suse.com/security/cve/CVE-2015-3040", }, { category: "external", summary: "SUSE Bug 927089 for CVE-2015-3040", url: "https://bugzilla.suse.com/927089", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "moderate", }, ], title: "CVE-2015-3040", }, { cve: "CVE-2015-3041", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-3041", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-0347, CVE-2015-0350, CVE-2015-0352, CVE-2015-0353, CVE-2015-0354, CVE-2015-0355, CVE-2015-0360, CVE-2015-3038, CVE-2015-3042, and CVE-2015-3043.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-3041", url: "https://www.suse.com/security/cve/CVE-2015-3041", }, { category: "external", summary: "SUSE Bug 927089 for CVE-2015-3041", url: "https://bugzilla.suse.com/927089", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "moderate", }, ], title: "CVE-2015-3041", }, { cve: "CVE-2015-3042", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-3042", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-0347, CVE-2015-0350, CVE-2015-0352, CVE-2015-0353, CVE-2015-0354, CVE-2015-0355, CVE-2015-0360, CVE-2015-3038, CVE-2015-3041, and CVE-2015-3043.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-3042", url: "https://www.suse.com/security/cve/CVE-2015-3042", }, { category: "external", summary: "SUSE Bug 927089 for CVE-2015-3042", url: "https://bugzilla.suse.com/927089", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "moderate", }, ], title: "CVE-2015-3042", }, { cve: "CVE-2015-3043", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-3043", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, as exploited in the wild in April 2015, a different vulnerability than CVE-2015-0347, CVE-2015-0350, CVE-2015-0352, CVE-2015-0353, CVE-2015-0354, CVE-2015-0355, CVE-2015-0360, CVE-2015-3038, CVE-2015-3041, and CVE-2015-3042.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-3043", url: "https://www.suse.com/security/cve/CVE-2015-3043", }, { category: "external", summary: "SUSE Bug 927089 for CVE-2015-3043", url: "https://bugzilla.suse.com/927089", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 9.8, baseSeverity: "CRITICAL", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "moderate", }, ], title: "CVE-2015-3043", }, { cve: "CVE-2015-3044", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-3044", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to bypass intended access restrictions and obtain sensitive information via unspecified vectors.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-3044", url: "https://www.suse.com/security/cve/CVE-2015-3044", }, { category: "external", summary: "SUSE Bug 927089 for CVE-2015-3044", url: "https://bugzilla.suse.com/927089", }, { category: "external", summary: "SUSE Bug 930677 for CVE-2015-3044", url: "https://bugzilla.suse.com/930677", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "moderate", }, ], title: "CVE-2015-3044", }, { cve: "CVE-2015-3077", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-3077", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.289 and 14.x through 17.x before 17.0.0.188 on Windows and OS X and before 11.2.202.460 on Linux, Adobe AIR before 17.0.0.172, Adobe AIR SDK before 17.0.0.172, and Adobe AIR SDK & Compiler before 17.0.0.172 allow attackers to execute arbitrary code by leveraging an unspecified \"type confusion,\" a different vulnerability than CVE-2015-3084 and CVE-2015-3086.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-3077", url: "https://www.suse.com/security/cve/CVE-2015-3077", }, { category: "external", summary: "SUSE Bug 930677 for CVE-2015-3077", url: "https://bugzilla.suse.com/930677", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2015-3077", }, { cve: "CVE-2015-3078", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-3078", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.289 and 14.x through 17.x before 17.0.0.188 on Windows and OS X and before 11.2.202.460 on Linux, Adobe AIR before 17.0.0.172, Adobe AIR SDK before 17.0.0.172, and Adobe AIR SDK & Compiler before 17.0.0.172 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-3089, CVE-2015-3090, and CVE-2015-3093.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-3078", url: "https://www.suse.com/security/cve/CVE-2015-3078", }, { category: "external", summary: "SUSE Bug 930677 for CVE-2015-3078", url: "https://bugzilla.suse.com/930677", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2015-3078", }, { cve: "CVE-2015-3079", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-3079", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.289 and 14.x through 17.x before 17.0.0.188 on Windows and OS X and before 11.2.202.460 on Linux, Adobe AIR before 17.0.0.172, Adobe AIR SDK before 17.0.0.172, and Adobe AIR SDK & Compiler before 17.0.0.172 allow attackers to bypass intended access restrictions and obtain sensitive information via unspecified vectors.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-3079", url: "https://www.suse.com/security/cve/CVE-2015-3079", }, { category: "external", summary: "SUSE Bug 930677 for CVE-2015-3079", url: "https://bugzilla.suse.com/930677", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "moderate", }, ], title: "CVE-2015-3079", }, { cve: "CVE-2015-3080", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-3080", }, ], notes: [ { category: "general", text: "Use-after-free vulnerability in Adobe Flash Player before 13.0.0.289 and 14.x through 17.x before 17.0.0.188 on Windows and OS X and before 11.2.202.460 on Linux, Adobe AIR before 17.0.0.172, Adobe AIR SDK before 17.0.0.172, and Adobe AIR SDK & Compiler before 17.0.0.172 allows attackers to execute arbitrary code via unspecified vectors.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-3080", url: "https://www.suse.com/security/cve/CVE-2015-3080", }, { category: "external", summary: "SUSE Bug 930677 for CVE-2015-3080", url: "https://bugzilla.suse.com/930677", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2015-3080", }, { cve: "CVE-2015-3081", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-3081", }, ], notes: [ { category: "general", text: "Race condition in Adobe Flash Player before 13.0.0.289 and 14.x through 17.x before 17.0.0.188 on Windows and OS X and before 11.2.202.460 on Linux, Adobe AIR before 17.0.0.172, Adobe AIR SDK before 17.0.0.172, and Adobe AIR SDK & Compiler before 17.0.0.172 allows attackers to bypass the Internet Explorer Protected Mode protection mechanism via unspecified vectors.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-3081", url: "https://www.suse.com/security/cve/CVE-2015-3081", }, { category: "external", summary: "SUSE Bug 930677 for CVE-2015-3081", url: "https://bugzilla.suse.com/930677", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "moderate", }, ], title: "CVE-2015-3081", }, { cve: "CVE-2015-3082", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-3082", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.289 and 14.x through 17.x before 17.0.0.188 on Windows and OS X and before 11.2.202.460 on Linux, Adobe AIR before 17.0.0.172, Adobe AIR SDK before 17.0.0.172, and Adobe AIR SDK & Compiler before 17.0.0.172 allow remote attackers to bypass intended restrictions on filesystem write operations via unspecified vectors, a different vulnerability than CVE-2015-3083 and CVE-2015-3085.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-3082", url: "https://www.suse.com/security/cve/CVE-2015-3082", }, { category: "external", summary: "SUSE Bug 930677 for CVE-2015-3082", url: "https://bugzilla.suse.com/930677", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2015-3082", }, { cve: "CVE-2015-3083", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-3083", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.289 and 14.x through 17.x before 17.0.0.188 on Windows and OS X and before 11.2.202.460 on Linux, Adobe AIR before 17.0.0.172, Adobe AIR SDK before 17.0.0.172, and Adobe AIR SDK & Compiler before 17.0.0.172 allow remote attackers to bypass intended restrictions on filesystem write operations via unspecified vectors, a different vulnerability than CVE-2015-3082 and CVE-2015-3085.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-3083", url: "https://www.suse.com/security/cve/CVE-2015-3083", }, { category: "external", summary: "SUSE Bug 930677 for CVE-2015-3083", url: "https://bugzilla.suse.com/930677", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2015-3083", }, { cve: "CVE-2015-3084", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-3084", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.289 and 14.x through 17.x before 17.0.0.188 on Windows and OS X and before 11.2.202.460 on Linux, Adobe AIR before 17.0.0.172, Adobe AIR SDK before 17.0.0.172, and Adobe AIR SDK & Compiler before 17.0.0.172 allow attackers to execute arbitrary code by leveraging an unspecified \"type confusion,\" a different vulnerability than CVE-2015-3077 and CVE-2015-3086.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-3084", url: "https://www.suse.com/security/cve/CVE-2015-3084", }, { category: "external", summary: "SUSE Bug 930677 for CVE-2015-3084", url: "https://bugzilla.suse.com/930677", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2015-3084", }, { cve: "CVE-2015-3085", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-3085", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.289 and 14.x through 17.x before 17.0.0.188 on Windows and OS X and before 11.2.202.460 on Linux, Adobe AIR before 17.0.0.172, Adobe AIR SDK before 17.0.0.172, and Adobe AIR SDK & Compiler before 17.0.0.172 allow remote attackers to bypass intended restrictions on filesystem write operations via unspecified vectors, a different vulnerability than CVE-2015-3082 and CVE-2015-3083.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-3085", url: "https://www.suse.com/security/cve/CVE-2015-3085", }, { category: "external", summary: "SUSE Bug 930677 for CVE-2015-3085", url: "https://bugzilla.suse.com/930677", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2015-3085", }, { cve: "CVE-2015-3086", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-3086", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.289 and 14.x through 17.x before 17.0.0.188 on Windows and OS X and before 11.2.202.460 on Linux, Adobe AIR before 17.0.0.172, Adobe AIR SDK before 17.0.0.172, and Adobe AIR SDK & Compiler before 17.0.0.172 allow attackers to execute arbitrary code by leveraging an unspecified \"type confusion,\" a different vulnerability than CVE-2015-3077 and CVE-2015-3084.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-3086", url: "https://www.suse.com/security/cve/CVE-2015-3086", }, { category: "external", summary: "SUSE Bug 930677 for CVE-2015-3086", url: "https://bugzilla.suse.com/930677", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2015-3086", }, { cve: "CVE-2015-3087", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-3087", }, ], notes: [ { category: "general", text: "Integer overflow in Adobe Flash Player before 13.0.0.289 and 14.x through 17.x before 17.0.0.188 on Windows and OS X and before 11.2.202.460 on Linux, Adobe AIR before 17.0.0.172, Adobe AIR SDK before 17.0.0.172, and Adobe AIR SDK & Compiler before 17.0.0.172 allows attackers to execute arbitrary code via unspecified vectors.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-3087", url: "https://www.suse.com/security/cve/CVE-2015-3087", }, { category: "external", summary: "SUSE Bug 930677 for CVE-2015-3087", url: "https://bugzilla.suse.com/930677", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2015-3087", }, { cve: "CVE-2015-3088", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-3088", }, ], notes: [ { category: "general", text: "Heap-based buffer overflow in Adobe Flash Player before 13.0.0.289 and 14.x through 17.x before 17.0.0.188 on Windows and OS X and before 11.2.202.460 on Linux, Adobe AIR before 17.0.0.172, Adobe AIR SDK before 17.0.0.172, and Adobe AIR SDK & Compiler before 17.0.0.172 allows attackers to execute arbitrary code via unspecified vectors.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-3088", url: "https://www.suse.com/security/cve/CVE-2015-3088", }, { category: "external", summary: "SUSE Bug 930677 for CVE-2015-3088", url: "https://bugzilla.suse.com/930677", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2015-3088", }, { cve: "CVE-2015-3089", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-3089", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.289 and 14.x through 17.x before 17.0.0.188 on Windows and OS X and before 11.2.202.460 on Linux, Adobe AIR before 17.0.0.172, Adobe AIR SDK before 17.0.0.172, and Adobe AIR SDK & Compiler before 17.0.0.172 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-3078, CVE-2015-3090, and CVE-2015-3093.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-3089", url: "https://www.suse.com/security/cve/CVE-2015-3089", }, { category: "external", summary: "SUSE Bug 930677 for CVE-2015-3089", url: "https://bugzilla.suse.com/930677", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2015-3089", }, { cve: "CVE-2015-3090", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-3090", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.289 and 14.x through 17.x before 17.0.0.188 on Windows and OS X and before 11.2.202.460 on Linux, Adobe AIR before 17.0.0.172, Adobe AIR SDK before 17.0.0.172, and Adobe AIR SDK & Compiler before 17.0.0.172 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-3078, CVE-2015-3089, and CVE-2015-3093.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-3090", url: "https://www.suse.com/security/cve/CVE-2015-3090", }, { category: "external", summary: "SUSE Bug 930677 for CVE-2015-3090", url: "https://bugzilla.suse.com/930677", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2015-3090", }, { cve: "CVE-2015-3091", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-3091", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.289 and 14.x through 17.x before 17.0.0.188 on Windows and OS X and before 11.2.202.460 on Linux, Adobe AIR before 17.0.0.172, Adobe AIR SDK before 17.0.0.172, and Adobe AIR SDK & Compiler before 17.0.0.172 do not properly restrict discovery of memory addresses, which allows attackers to bypass the ASLR protection mechanism via unspecified vectors, a different vulnerability than CVE-2015-3092.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-3091", url: "https://www.suse.com/security/cve/CVE-2015-3091", }, { category: "external", summary: "SUSE Bug 930677 for CVE-2015-3091", url: "https://bugzilla.suse.com/930677", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2015-3091", }, { cve: "CVE-2015-3092", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-3092", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.289 and 14.x through 17.x before 17.0.0.188 on Windows and OS X and before 11.2.202.460 on Linux, Adobe AIR before 17.0.0.172, Adobe AIR SDK before 17.0.0.172, and Adobe AIR SDK & Compiler before 17.0.0.172 do not properly restrict discovery of memory addresses, which allows attackers to bypass the ASLR protection mechanism via unspecified vectors, a different vulnerability than CVE-2015-3091.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-3092", url: "https://www.suse.com/security/cve/CVE-2015-3092", }, { category: "external", summary: "SUSE Bug 930677 for CVE-2015-3092", url: "https://bugzilla.suse.com/930677", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2015-3092", }, { cve: "CVE-2015-3093", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-3093", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.289 and 14.x through 17.x before 17.0.0.188 on Windows and OS X and before 11.2.202.460 on Linux, Adobe AIR before 17.0.0.172, Adobe AIR SDK before 17.0.0.172, and Adobe AIR SDK & Compiler before 17.0.0.172 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-3078, CVE-2015-3089, and CVE-2015-3090.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-3093", url: "https://www.suse.com/security/cve/CVE-2015-3093", }, { category: "external", summary: "SUSE Bug 930677 for CVE-2015-3093", url: "https://bugzilla.suse.com/930677", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2015-3093", }, { cve: "CVE-2015-3096", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-3096", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.292 and 14.x through 18.x before 18.0.0.160 on Windows and OS X and before 11.2.202.466 on Linux, Adobe AIR before 18.0.0.144 on Windows and before 18.0.0.143 on OS X and Android, Adobe AIR SDK before 18.0.0.144 on Windows and before 18.0.0.143 on OS X, and Adobe AIR SDK & Compiler before 18.0.0.144 on Windows and before 18.0.0.143 on OS X allow remote attackers to bypass a CVE-2014-5333 protection mechanism via unspecified vectors.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-3096", url: "https://www.suse.com/security/cve/CVE-2015-3096", }, { category: "external", summary: "SUSE Bug 934088 for CVE-2015-3096", url: "https://bugzilla.suse.com/934088", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "important", }, ], title: "CVE-2015-3096", }, { cve: "CVE-2015-3098", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-3098", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.292 and 14.x through 18.x before 18.0.0.160 on Windows and OS X and before 11.2.202.466 on Linux, Adobe AIR before 18.0.0.144 on Windows and before 18.0.0.143 on OS X and Android, Adobe AIR SDK before 18.0.0.144 on Windows and before 18.0.0.143 on OS X, and Adobe AIR SDK & Compiler before 18.0.0.144 on Windows and before 18.0.0.143 on OS X allow remote attackers to bypass the Same Origin Policy via unspecified vectors, a different vulnerability than CVE-2015-3099 and CVE-2015-3102.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-3098", url: "https://www.suse.com/security/cve/CVE-2015-3098", }, { category: "external", summary: "SUSE Bug 934088 for CVE-2015-3098", url: "https://bugzilla.suse.com/934088", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "important", }, ], title: "CVE-2015-3098", }, { cve: "CVE-2015-3099", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-3099", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.292 and 14.x through 18.x before 18.0.0.160 on Windows and OS X and before 11.2.202.466 on Linux, Adobe AIR before 18.0.0.144 on Windows and before 18.0.0.143 on OS X and Android, Adobe AIR SDK before 18.0.0.144 on Windows and before 18.0.0.143 on OS X, and Adobe AIR SDK & Compiler before 18.0.0.144 on Windows and before 18.0.0.143 on OS X allow remote attackers to bypass the Same Origin Policy via unspecified vectors, a different vulnerability than CVE-2015-3098 and CVE-2015-3102.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-3099", url: "https://www.suse.com/security/cve/CVE-2015-3099", }, { category: "external", summary: "SUSE Bug 934088 for CVE-2015-3099", url: "https://bugzilla.suse.com/934088", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "important", }, ], title: "CVE-2015-3099", }, { cve: "CVE-2015-3100", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-3100", }, ], notes: [ { category: "general", text: "Stack-based buffer overflow in Adobe Flash Player before 13.0.0.292 and 14.x through 18.x before 18.0.0.160 on Windows and OS X and before 11.2.202.466 on Linux, Adobe AIR before 18.0.0.144 on Windows and before 18.0.0.143 on OS X and Android, Adobe AIR SDK before 18.0.0.144 on Windows and before 18.0.0.143 on OS X, and Adobe AIR SDK & Compiler before 18.0.0.144 on Windows and before 18.0.0.143 on OS X allows attackers to execute arbitrary code via unspecified vectors.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-3100", url: "https://www.suse.com/security/cve/CVE-2015-3100", }, { category: "external", summary: "SUSE Bug 934088 for CVE-2015-3100", url: "https://bugzilla.suse.com/934088", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "important", }, ], title: "CVE-2015-3100", }, { cve: "CVE-2015-3102", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-3102", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.292 and 14.x through 18.x before 18.0.0.160 on Windows and OS X and before 11.2.202.466 on Linux, Adobe AIR before 18.0.0.144 on Windows and before 18.0.0.143 on OS X and Android, Adobe AIR SDK before 18.0.0.144 on Windows and before 18.0.0.143 on OS X, and Adobe AIR SDK & Compiler before 18.0.0.144 on Windows and before 18.0.0.143 on OS X allow remote attackers to bypass the Same Origin Policy via unspecified vectors, a different vulnerability than CVE-2015-3098 and CVE-2015-3099.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-3102", url: "https://www.suse.com/security/cve/CVE-2015-3102", }, { category: "external", summary: "SUSE Bug 934088 for CVE-2015-3102", url: "https://bugzilla.suse.com/934088", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "important", }, ], title: "CVE-2015-3102", }, { cve: "CVE-2015-3103", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-3103", }, ], notes: [ { category: "general", text: "Use-after-free vulnerability in Adobe Flash Player before 13.0.0.292 and 14.x through 18.x before 18.0.0.160 on Windows and OS X and before 11.2.202.466 on Linux, Adobe AIR before 18.0.0.144 on Windows and before 18.0.0.143 on OS X and Android, Adobe AIR SDK before 18.0.0.144 on Windows and before 18.0.0.143 on OS X, and Adobe AIR SDK & Compiler before 18.0.0.144 on Windows and before 18.0.0.143 on OS X allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-3106 and CVE-2015-3107.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-3103", url: "https://www.suse.com/security/cve/CVE-2015-3103", }, { category: "external", summary: "SUSE Bug 934088 for CVE-2015-3103", url: "https://bugzilla.suse.com/934088", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "important", }, ], title: "CVE-2015-3103", }, { cve: "CVE-2015-3106", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-3106", }, ], notes: [ { category: "general", text: "Use-after-free vulnerability in Adobe Flash Player before 13.0.0.292 and 14.x through 18.x before 18.0.0.160 on Windows and OS X and before 11.2.202.466 on Linux, Adobe AIR before 18.0.0.144 on Windows and before 18.0.0.143 on OS X and Android, Adobe AIR SDK before 18.0.0.144 on Windows and before 18.0.0.143 on OS X, and Adobe AIR SDK & Compiler before 18.0.0.144 on Windows and before 18.0.0.143 on OS X allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-3103 and CVE-2015-3107.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-3106", url: "https://www.suse.com/security/cve/CVE-2015-3106", }, { category: "external", summary: "SUSE Bug 934088 for CVE-2015-3106", url: "https://bugzilla.suse.com/934088", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "important", }, ], title: "CVE-2015-3106", }, { cve: "CVE-2015-3107", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-3107", }, ], notes: [ { category: "general", text: "Use-after-free vulnerability in Adobe Flash Player before 13.0.0.292 and 14.x through 18.x before 18.0.0.160 on Windows and OS X and before 11.2.202.466 on Linux, Adobe AIR before 18.0.0.144 on Windows and before 18.0.0.143 on OS X and Android, Adobe AIR SDK before 18.0.0.144 on Windows and before 18.0.0.143 on OS X, and Adobe AIR SDK & Compiler before 18.0.0.144 on Windows and before 18.0.0.143 on OS X allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-3103 and CVE-2015-3106.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-3107", url: "https://www.suse.com/security/cve/CVE-2015-3107", }, { category: "external", summary: "SUSE Bug 934088 for CVE-2015-3107", url: "https://bugzilla.suse.com/934088", }, { category: "external", summary: "SUSE Bug 941239 for CVE-2015-3107", url: "https://bugzilla.suse.com/941239", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "important", }, ], title: "CVE-2015-3107", }, { cve: "CVE-2015-3108", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-3108", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.292 and 14.x through 18.x before 18.0.0.160 on Windows and OS X and before 11.2.202.466 on Linux, Adobe AIR before 18.0.0.144 on Windows and before 18.0.0.143 on OS X and Android, Adobe AIR SDK before 18.0.0.144 on Windows and before 18.0.0.143 on OS X, and Adobe AIR SDK & Compiler before 18.0.0.144 on Windows and before 18.0.0.143 on OS X do not properly restrict discovery of memory addresses, which allows attackers to bypass the ASLR protection mechanism via unspecified vectors.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-3108", url: "https://www.suse.com/security/cve/CVE-2015-3108", }, { category: "external", summary: "SUSE Bug 934088 for CVE-2015-3108", url: "https://bugzilla.suse.com/934088", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "important", }, ], title: "CVE-2015-3108", }, { cve: "CVE-2015-3113", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-3113", }, ], notes: [ { category: "general", text: "Heap-based buffer overflow in Adobe Flash Player before 13.0.0.296 and 14.x through 18.x before 18.0.0.194 on Windows and OS X and before 11.2.202.468 on Linux allows remote attackers to execute arbitrary code via unspecified vectors, as exploited in the wild in June 2015.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-3113", url: "https://www.suse.com/security/cve/CVE-2015-3113", }, { category: "external", summary: "SUSE Bug 935701 for CVE-2015-3113", url: "https://bugzilla.suse.com/935701", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 9.8, baseSeverity: "CRITICAL", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "important", }, ], title: "CVE-2015-3113", }, ], }
suse-su-2015:1137-1
Vulnerability from csaf_suse
Notes
{ document: { aggregate_severity: { namespace: "https://www.suse.com/support/security/rating/", text: "moderate", }, category: "csaf_security_advisory", csaf_version: "2.0", distribution: { text: "Copyright 2024 SUSE LLC. All rights reserved.", tlp: { label: "WHITE", url: "https://www.first.org/tlp/", }, }, lang: "en", notes: [ { category: "summary", text: "Security update for flash-player", title: "Title of the patch", }, { category: "description", text: "\nflash-player was updated to version 11.2.202.418 to fix 18 security issues:\n\n * Memory corruption vulnerabilities that could lead to code execution\n (CVE-2014-0576, CVE-2014-0581, CVE-2014-8440, CVE-2014-8441).\n * Use-after-free vulnerabilities that could lead to code execution\n (CVE-2014-0573, CVE-2014-0588, CVE-2014-8438).\n * A double free vulnerability that could lead to code execution\n (CVE-2014-0574).\n * Type confusion vulnerabilities that could lead to code execution\n (CVE-2014-0577, CVE-2014-0584, CVE-2014-0585, CVE-2014-0586,\n CVE-2014-0590).\n * Heap buffer overflow vulnerabilities that could lead to code\n execution (CVE-2014-0582, CVE-2014-0589).\n * An information disclosure vulnerability that could be exploited to\n disclose session tokens (CVE-2014-8437).\n * A heap buffer overflow vulnerability that could be exploited to\n perform privilege escalation from low to medium integrity level\n (CVE-2014-0583).\n * A permission issue that could be exploited to perform privilege\n escalation from low to medium integrity level (CVE-2014-8442).\n\nFurther information can be found at \nhttp://helpx.adobe.com/security/products/flash-player/apsb14-24.html\n<http://helpx.adobe.com/security/products/flash-player/apsb14-24.html> .\n\nSecurity Issues:\n\n * CVE-2014-0576\n <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0576>\n * CVE-2014-0581\n <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0581>\n * CVE-2014-8440\n <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8440>\n * CVE-2014-8441\n <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8441>\n * CVE-2014-0573\n <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0573>\n * CVE-2014-0588\n <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0588>\n * CVE-2014-8438\n <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8438>\n * CVE-2014-0574\n <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0574>\n * CVE-2014-0577\n <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0577>\n * CVE-2014-0584\n <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0584>\n * CVE-2014-0585\n <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0585>\n * CVE-2014-0586\n <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0586>\n * CVE-2014-0590\n <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0590>\n * CVE-2014-0582\n <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0582>\n * CVE-2014-0589\n <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0589>\n * CVE-2014-8437\n <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8437>\n * CVE-2014-0583\n <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0583>\n * CVE-2014-8442\n <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8442>\n\n", title: "Description of the patch", }, { category: "details", text: "sledsp3-flash-player", title: "Patchnames", }, { category: "legal_disclaimer", text: "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).", title: "Terms of use", }, ], publisher: { category: "vendor", contact_details: "https://www.suse.com/support/security/contact/", name: "SUSE Product Security Team", namespace: "https://www.suse.com/", }, references: [ { category: "external", summary: "SUSE ratings", url: "https://www.suse.com/support/security/rating/", }, { category: "self", summary: "URL of this CSAF notice", url: "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2015_1137-1.json", }, { category: "self", summary: "URL for SUSE-SU-2015:1137-1", url: "https://www.suse.com/support/update/announcement/2015/suse-su-20151137-1/", }, { category: "self", summary: "E-Mail link for SUSE-SU-2015:1137-1", url: "https://lists.suse.com/pipermail/sle-security-updates/2015-June/001459.html", }, { category: "self", summary: "SUSE Bug 824512", url: "https://bugzilla.suse.com/824512", }, { category: "self", summary: "SUSE Bug 828810", url: "https://bugzilla.suse.com/828810", }, { category: "self", summary: "SUSE Bug 839897", url: "https://bugzilla.suse.com/839897", }, { category: "self", summary: "SUSE Bug 850220", url: "https://bugzilla.suse.com/850220", }, { category: "self", summary: "SUSE Bug 854881", url: "https://bugzilla.suse.com/854881", }, { category: "self", summary: "SUSE Bug 856386", url: "https://bugzilla.suse.com/856386", }, { category: "self", summary: "SUSE Bug 858822", url: "https://bugzilla.suse.com/858822", }, { category: "self", summary: "SUSE Bug 862288", url: "https://bugzilla.suse.com/862288", }, { category: "self", summary: "SUSE Bug 865021", url: "https://bugzilla.suse.com/865021", }, { category: "self", summary: "SUSE Bug 867808", url: "https://bugzilla.suse.com/867808", }, { category: "self", summary: "SUSE Bug 872692", url: "https://bugzilla.suse.com/872692", }, { category: "self", summary: "SUSE Bug 875577", url: "https://bugzilla.suse.com/875577", }, { category: "self", summary: "SUSE Bug 877649", url: "https://bugzilla.suse.com/877649", }, { category: "self", summary: "SUSE Bug 882187", url: "https://bugzilla.suse.com/882187", }, { category: "self", summary: "SUSE Bug 886472", url: "https://bugzilla.suse.com/886472", }, { category: "self", summary: "SUSE Bug 891688", url: "https://bugzilla.suse.com/891688", }, { category: "self", summary: "SUSE Bug 895856", url: "https://bugzilla.suse.com/895856", }, { category: "self", summary: "SUSE Bug 901334", url: "https://bugzilla.suse.com/901334", }, { category: "self", summary: "SUSE Bug 905032", url: "https://bugzilla.suse.com/905032", }, { category: "self", summary: "SUSE Bug 907257", url: "https://bugzilla.suse.com/907257", }, { category: "self", summary: "SUSE Bug 909219", url: "https://bugzilla.suse.com/909219", }, { category: "self", summary: "SUSE Bug 913057", url: "https://bugzilla.suse.com/913057", }, { category: "self", summary: "SUSE Bug 914333", url: "https://bugzilla.suse.com/914333", }, { category: "self", summary: "SUSE Bug 914463", url: "https://bugzilla.suse.com/914463", }, { category: "self", summary: "SUSE Bug 915918", url: "https://bugzilla.suse.com/915918", }, { category: "self", summary: "SUSE Bug 922033", url: "https://bugzilla.suse.com/922033", }, { category: "self", summary: "SUSE Bug 927089", url: "https://bugzilla.suse.com/927089", }, { category: "self", summary: "SUSE Bug 930677", url: "https://bugzilla.suse.com/930677", }, { category: "self", summary: "SUSE Bug 934088", url: "https://bugzilla.suse.com/934088", }, { category: "self", summary: "SUSE Bug 935701", url: "https://bugzilla.suse.com/935701", }, { category: "self", summary: "SUSE CVE CVE-2013-3343 page", url: "https://www.suse.com/security/cve/CVE-2013-3343/", }, { category: "self", summary: "SUSE CVE CVE-2013-3344 page", url: "https://www.suse.com/security/cve/CVE-2013-3344/", }, { category: "self", summary: "SUSE CVE CVE-2013-3345 page", url: "https://www.suse.com/security/cve/CVE-2013-3345/", }, { category: "self", summary: "SUSE CVE CVE-2013-3347 page", url: "https://www.suse.com/security/cve/CVE-2013-3347/", }, { category: "self", summary: "SUSE CVE CVE-2013-3361 page", url: "https://www.suse.com/security/cve/CVE-2013-3361/", }, { category: "self", summary: "SUSE CVE CVE-2013-3362 page", url: "https://www.suse.com/security/cve/CVE-2013-3362/", }, { category: "self", summary: "SUSE CVE CVE-2013-3363 page", url: "https://www.suse.com/security/cve/CVE-2013-3363/", }, { category: "self", summary: "SUSE CVE CVE-2013-5324 page", url: "https://www.suse.com/security/cve/CVE-2013-5324/", }, { category: "self", summary: "SUSE CVE CVE-2013-5329 page", url: "https://www.suse.com/security/cve/CVE-2013-5329/", }, { category: "self", summary: "SUSE CVE CVE-2013-5330 page", url: "https://www.suse.com/security/cve/CVE-2013-5330/", }, { category: "self", summary: "SUSE CVE CVE-2013-5331 page", url: "https://www.suse.com/security/cve/CVE-2013-5331/", }, { category: "self", summary: "SUSE CVE CVE-2013-5332 page", url: "https://www.suse.com/security/cve/CVE-2013-5332/", }, { category: "self", summary: "SUSE CVE CVE-2014-0491 page", url: "https://www.suse.com/security/cve/CVE-2014-0491/", }, { category: "self", summary: "SUSE CVE CVE-2014-0492 page", url: "https://www.suse.com/security/cve/CVE-2014-0492/", }, { category: "self", summary: "SUSE CVE CVE-2014-0497 page", url: "https://www.suse.com/security/cve/CVE-2014-0497/", }, { category: "self", summary: "SUSE CVE CVE-2014-0498 page", url: "https://www.suse.com/security/cve/CVE-2014-0498/", }, { category: "self", summary: "SUSE CVE CVE-2014-0499 page", url: "https://www.suse.com/security/cve/CVE-2014-0499/", }, { category: "self", summary: "SUSE CVE CVE-2014-0502 page", url: "https://www.suse.com/security/cve/CVE-2014-0502/", }, { category: "self", summary: "SUSE CVE CVE-2014-0503 page", url: "https://www.suse.com/security/cve/CVE-2014-0503/", }, { category: "self", summary: "SUSE CVE CVE-2014-0504 page", url: "https://www.suse.com/security/cve/CVE-2014-0504/", }, { category: "self", summary: "SUSE CVE CVE-2014-0506 page", url: "https://www.suse.com/security/cve/CVE-2014-0506/", }, { category: "self", summary: "SUSE CVE CVE-2014-0507 page", url: "https://www.suse.com/security/cve/CVE-2014-0507/", }, { category: "self", summary: "SUSE CVE CVE-2014-0508 page", url: "https://www.suse.com/security/cve/CVE-2014-0508/", }, { category: "self", summary: "SUSE CVE CVE-2014-0509 page", url: "https://www.suse.com/security/cve/CVE-2014-0509/", }, { category: "self", summary: "SUSE CVE CVE-2014-0510 page", url: "https://www.suse.com/security/cve/CVE-2014-0510/", }, { category: "self", summary: "SUSE CVE CVE-2014-0515 page", url: "https://www.suse.com/security/cve/CVE-2014-0515/", }, { category: "self", summary: "SUSE CVE CVE-2014-0516 page", url: "https://www.suse.com/security/cve/CVE-2014-0516/", }, { category: "self", summary: "SUSE CVE CVE-2014-0517 page", url: "https://www.suse.com/security/cve/CVE-2014-0517/", }, { category: "self", summary: "SUSE CVE CVE-2014-0518 page", url: "https://www.suse.com/security/cve/CVE-2014-0518/", }, { category: "self", summary: "SUSE CVE CVE-2014-0519 page", url: "https://www.suse.com/security/cve/CVE-2014-0519/", }, { category: "self", summary: "SUSE CVE CVE-2014-0520 page", url: "https://www.suse.com/security/cve/CVE-2014-0520/", }, { category: "self", summary: "SUSE CVE CVE-2014-0531 page", url: "https://www.suse.com/security/cve/CVE-2014-0531/", }, { category: "self", summary: "SUSE CVE CVE-2014-0532 page", url: "https://www.suse.com/security/cve/CVE-2014-0532/", }, { category: "self", summary: "SUSE CVE CVE-2014-0533 page", url: "https://www.suse.com/security/cve/CVE-2014-0533/", }, { category: "self", summary: "SUSE CVE CVE-2014-0534 page", url: "https://www.suse.com/security/cve/CVE-2014-0534/", }, { category: "self", summary: "SUSE CVE CVE-2014-0535 page", url: "https://www.suse.com/security/cve/CVE-2014-0535/", }, { category: "self", summary: "SUSE CVE CVE-2014-0536 page", url: "https://www.suse.com/security/cve/CVE-2014-0536/", }, { category: "self", summary: "SUSE CVE CVE-2014-0537 page", url: "https://www.suse.com/security/cve/CVE-2014-0537/", }, { category: "self", summary: "SUSE CVE CVE-2014-0538 page", url: "https://www.suse.com/security/cve/CVE-2014-0538/", }, { category: "self", summary: "SUSE CVE CVE-2014-0539 page", url: "https://www.suse.com/security/cve/CVE-2014-0539/", }, { category: "self", summary: "SUSE CVE CVE-2014-0540 page", url: "https://www.suse.com/security/cve/CVE-2014-0540/", }, { category: "self", summary: "SUSE CVE CVE-2014-0541 page", url: "https://www.suse.com/security/cve/CVE-2014-0541/", }, { category: "self", summary: "SUSE CVE CVE-2014-0542 page", url: "https://www.suse.com/security/cve/CVE-2014-0542/", }, { category: "self", summary: "SUSE CVE CVE-2014-0543 page", url: "https://www.suse.com/security/cve/CVE-2014-0543/", }, { category: "self", summary: "SUSE CVE CVE-2014-0544 page", url: "https://www.suse.com/security/cve/CVE-2014-0544/", }, { category: "self", summary: "SUSE CVE CVE-2014-0545 page", url: "https://www.suse.com/security/cve/CVE-2014-0545/", }, { category: "self", summary: "SUSE CVE CVE-2014-0547 page", url: "https://www.suse.com/security/cve/CVE-2014-0547/", }, { category: "self", summary: "SUSE CVE CVE-2014-0548 page", url: "https://www.suse.com/security/cve/CVE-2014-0548/", }, { category: "self", summary: "SUSE CVE CVE-2014-0549 page", url: "https://www.suse.com/security/cve/CVE-2014-0549/", }, { category: "self", summary: "SUSE CVE CVE-2014-0550 page", url: "https://www.suse.com/security/cve/CVE-2014-0550/", }, { category: "self", summary: "SUSE CVE CVE-2014-0551 page", url: "https://www.suse.com/security/cve/CVE-2014-0551/", }, { category: "self", summary: "SUSE CVE CVE-2014-0552 page", url: "https://www.suse.com/security/cve/CVE-2014-0552/", }, { category: "self", summary: "SUSE CVE CVE-2014-0553 page", url: "https://www.suse.com/security/cve/CVE-2014-0553/", }, { category: "self", summary: "SUSE CVE CVE-2014-0554 page", url: "https://www.suse.com/security/cve/CVE-2014-0554/", }, { category: "self", summary: "SUSE CVE CVE-2014-0555 page", url: "https://www.suse.com/security/cve/CVE-2014-0555/", }, { category: "self", summary: "SUSE CVE CVE-2014-0556 page", url: "https://www.suse.com/security/cve/CVE-2014-0556/", }, { category: "self", summary: "SUSE CVE CVE-2014-0557 page", url: "https://www.suse.com/security/cve/CVE-2014-0557/", }, { category: "self", summary: "SUSE CVE CVE-2014-0558 page", url: "https://www.suse.com/security/cve/CVE-2014-0558/", }, { category: "self", summary: "SUSE CVE CVE-2014-0559 page", url: "https://www.suse.com/security/cve/CVE-2014-0559/", }, { category: "self", summary: "SUSE CVE CVE-2014-0564 page", url: "https://www.suse.com/security/cve/CVE-2014-0564/", }, { category: "self", summary: "SUSE CVE CVE-2014-0569 page", url: "https://www.suse.com/security/cve/CVE-2014-0569/", }, { category: "self", summary: "SUSE CVE CVE-2014-0573 page", url: "https://www.suse.com/security/cve/CVE-2014-0573/", }, { category: "self", summary: "SUSE CVE CVE-2014-0574 page", url: "https://www.suse.com/security/cve/CVE-2014-0574/", }, { category: "self", summary: "SUSE CVE CVE-2014-0576 page", url: "https://www.suse.com/security/cve/CVE-2014-0576/", }, { category: "self", summary: "SUSE CVE CVE-2014-0577 page", url: "https://www.suse.com/security/cve/CVE-2014-0577/", }, { category: "self", summary: "SUSE CVE CVE-2014-0580 page", url: "https://www.suse.com/security/cve/CVE-2014-0580/", }, { category: "self", summary: "SUSE CVE CVE-2014-0581 page", url: "https://www.suse.com/security/cve/CVE-2014-0581/", }, { category: "self", summary: "SUSE CVE CVE-2014-0582 page", url: "https://www.suse.com/security/cve/CVE-2014-0582/", }, { category: "self", summary: "SUSE CVE CVE-2014-0583 page", url: "https://www.suse.com/security/cve/CVE-2014-0583/", }, { category: "self", summary: "SUSE CVE CVE-2014-0584 page", url: "https://www.suse.com/security/cve/CVE-2014-0584/", }, { category: "self", summary: "SUSE CVE CVE-2014-0585 page", url: "https://www.suse.com/security/cve/CVE-2014-0585/", }, { category: "self", summary: "SUSE CVE CVE-2014-0586 page", url: "https://www.suse.com/security/cve/CVE-2014-0586/", }, { category: "self", summary: "SUSE CVE CVE-2014-0587 page", url: "https://www.suse.com/security/cve/CVE-2014-0587/", }, { category: "self", summary: "SUSE CVE CVE-2014-0588 page", url: "https://www.suse.com/security/cve/CVE-2014-0588/", }, { category: "self", summary: "SUSE CVE CVE-2014-0589 page", url: "https://www.suse.com/security/cve/CVE-2014-0589/", }, { category: "self", summary: "SUSE CVE CVE-2014-0590 page", url: "https://www.suse.com/security/cve/CVE-2014-0590/", }, { category: "self", summary: "SUSE CVE CVE-2014-4671 page", url: "https://www.suse.com/security/cve/CVE-2014-4671/", }, { category: "self", summary: "SUSE CVE CVE-2014-8437 page", url: "https://www.suse.com/security/cve/CVE-2014-8437/", }, { category: "self", summary: "SUSE CVE CVE-2014-8438 page", url: "https://www.suse.com/security/cve/CVE-2014-8438/", }, { category: "self", summary: "SUSE CVE CVE-2014-8439 page", url: "https://www.suse.com/security/cve/CVE-2014-8439/", }, { category: "self", summary: "SUSE CVE CVE-2014-8440 page", url: "https://www.suse.com/security/cve/CVE-2014-8440/", }, { category: "self", summary: "SUSE CVE CVE-2014-8441 page", url: "https://www.suse.com/security/cve/CVE-2014-8441/", }, { category: "self", summary: "SUSE CVE CVE-2014-8442 page", url: "https://www.suse.com/security/cve/CVE-2014-8442/", }, { category: "self", summary: "SUSE CVE CVE-2014-8443 page", url: "https://www.suse.com/security/cve/CVE-2014-8443/", }, { category: "self", summary: "SUSE CVE CVE-2014-9162 page", url: "https://www.suse.com/security/cve/CVE-2014-9162/", }, { category: "self", summary: "SUSE CVE CVE-2014-9163 page", url: "https://www.suse.com/security/cve/CVE-2014-9163/", }, { category: "self", summary: "SUSE CVE CVE-2014-9164 page", url: "https://www.suse.com/security/cve/CVE-2014-9164/", }, { category: "self", summary: "SUSE CVE CVE-2015-0301 page", url: "https://www.suse.com/security/cve/CVE-2015-0301/", }, { category: "self", summary: "SUSE CVE CVE-2015-0302 page", url: "https://www.suse.com/security/cve/CVE-2015-0302/", }, { category: "self", summary: "SUSE CVE CVE-2015-0303 page", url: "https://www.suse.com/security/cve/CVE-2015-0303/", }, { category: "self", summary: "SUSE CVE CVE-2015-0304 page", url: "https://www.suse.com/security/cve/CVE-2015-0304/", }, { category: "self", summary: "SUSE CVE CVE-2015-0305 page", url: "https://www.suse.com/security/cve/CVE-2015-0305/", }, { category: "self", summary: "SUSE CVE CVE-2015-0306 page", url: "https://www.suse.com/security/cve/CVE-2015-0306/", }, { category: "self", summary: "SUSE CVE CVE-2015-0307 page", url: "https://www.suse.com/security/cve/CVE-2015-0307/", }, { category: "self", summary: "SUSE CVE CVE-2015-0308 page", url: "https://www.suse.com/security/cve/CVE-2015-0308/", }, { category: "self", summary: "SUSE CVE CVE-2015-0309 page", url: "https://www.suse.com/security/cve/CVE-2015-0309/", }, { category: "self", summary: "SUSE CVE CVE-2015-0310 page", url: "https://www.suse.com/security/cve/CVE-2015-0310/", }, { category: "self", summary: "SUSE CVE CVE-2015-0311 page", url: "https://www.suse.com/security/cve/CVE-2015-0311/", }, { category: "self", summary: "SUSE CVE CVE-2015-0313 page", url: "https://www.suse.com/security/cve/CVE-2015-0313/", }, { category: "self", summary: "SUSE CVE CVE-2015-0314 page", url: "https://www.suse.com/security/cve/CVE-2015-0314/", }, { category: "self", summary: "SUSE CVE CVE-2015-0315 page", url: "https://www.suse.com/security/cve/CVE-2015-0315/", }, { category: "self", summary: "SUSE CVE CVE-2015-0316 page", url: "https://www.suse.com/security/cve/CVE-2015-0316/", }, { category: "self", summary: "SUSE CVE CVE-2015-0317 page", url: "https://www.suse.com/security/cve/CVE-2015-0317/", }, { category: "self", summary: "SUSE CVE CVE-2015-0318 page", url: "https://www.suse.com/security/cve/CVE-2015-0318/", }, { category: "self", summary: "SUSE CVE CVE-2015-0319 page", url: "https://www.suse.com/security/cve/CVE-2015-0319/", }, { category: "self", summary: "SUSE CVE CVE-2015-0320 page", url: "https://www.suse.com/security/cve/CVE-2015-0320/", }, { category: "self", summary: "SUSE CVE CVE-2015-0321 page", url: "https://www.suse.com/security/cve/CVE-2015-0321/", }, { category: "self", summary: "SUSE CVE CVE-2015-0322 page", url: "https://www.suse.com/security/cve/CVE-2015-0322/", }, { category: "self", summary: "SUSE CVE CVE-2015-0323 page", url: "https://www.suse.com/security/cve/CVE-2015-0323/", }, { category: "self", summary: "SUSE CVE CVE-2015-0324 page", url: "https://www.suse.com/security/cve/CVE-2015-0324/", }, { category: "self", summary: "SUSE CVE CVE-2015-0325 page", url: "https://www.suse.com/security/cve/CVE-2015-0325/", }, { category: "self", summary: "SUSE CVE CVE-2015-0326 page", url: "https://www.suse.com/security/cve/CVE-2015-0326/", }, { category: "self", summary: "SUSE CVE CVE-2015-0327 page", url: "https://www.suse.com/security/cve/CVE-2015-0327/", }, { category: "self", summary: "SUSE CVE CVE-2015-0328 page", url: "https://www.suse.com/security/cve/CVE-2015-0328/", }, { category: "self", summary: "SUSE CVE CVE-2015-0329 page", url: "https://www.suse.com/security/cve/CVE-2015-0329/", }, { category: "self", summary: "SUSE CVE CVE-2015-0330 page", url: "https://www.suse.com/security/cve/CVE-2015-0330/", }, { category: "self", summary: "SUSE CVE CVE-2015-0332 page", url: "https://www.suse.com/security/cve/CVE-2015-0332/", }, { category: "self", summary: "SUSE CVE CVE-2015-0333 page", url: "https://www.suse.com/security/cve/CVE-2015-0333/", }, { category: "self", summary: "SUSE CVE CVE-2015-0334 page", url: "https://www.suse.com/security/cve/CVE-2015-0334/", }, { category: "self", summary: "SUSE CVE CVE-2015-0335 page", url: "https://www.suse.com/security/cve/CVE-2015-0335/", }, { category: "self", summary: "SUSE CVE CVE-2015-0336 page", url: "https://www.suse.com/security/cve/CVE-2015-0336/", }, { category: "self", summary: "SUSE CVE CVE-2015-0337 page", url: "https://www.suse.com/security/cve/CVE-2015-0337/", }, { category: "self", summary: "SUSE CVE CVE-2015-0338 page", url: "https://www.suse.com/security/cve/CVE-2015-0338/", }, { category: "self", summary: "SUSE CVE CVE-2015-0339 page", url: "https://www.suse.com/security/cve/CVE-2015-0339/", }, { category: "self", summary: "SUSE CVE CVE-2015-0340 page", url: "https://www.suse.com/security/cve/CVE-2015-0340/", }, { category: "self", summary: "SUSE CVE CVE-2015-0341 page", url: "https://www.suse.com/security/cve/CVE-2015-0341/", }, { category: "self", summary: "SUSE CVE CVE-2015-0342 page", url: "https://www.suse.com/security/cve/CVE-2015-0342/", }, { category: "self", summary: "SUSE CVE CVE-2015-0346 page", url: "https://www.suse.com/security/cve/CVE-2015-0346/", }, { category: "self", summary: "SUSE CVE CVE-2015-0347 page", url: "https://www.suse.com/security/cve/CVE-2015-0347/", }, { category: "self", summary: "SUSE CVE CVE-2015-0348 page", url: "https://www.suse.com/security/cve/CVE-2015-0348/", }, { category: "self", summary: "SUSE CVE CVE-2015-0349 page", url: "https://www.suse.com/security/cve/CVE-2015-0349/", }, { category: "self", summary: "SUSE CVE CVE-2015-0350 page", url: "https://www.suse.com/security/cve/CVE-2015-0350/", }, { category: "self", summary: "SUSE CVE CVE-2015-0351 page", url: "https://www.suse.com/security/cve/CVE-2015-0351/", }, { category: "self", summary: "SUSE CVE CVE-2015-0352 page", url: "https://www.suse.com/security/cve/CVE-2015-0352/", }, { category: "self", summary: "SUSE CVE CVE-2015-0353 page", url: "https://www.suse.com/security/cve/CVE-2015-0353/", }, { category: "self", summary: "SUSE CVE CVE-2015-0354 page", url: "https://www.suse.com/security/cve/CVE-2015-0354/", }, { category: "self", summary: "SUSE CVE CVE-2015-0355 page", url: "https://www.suse.com/security/cve/CVE-2015-0355/", }, { category: "self", summary: "SUSE CVE CVE-2015-0356 page", url: "https://www.suse.com/security/cve/CVE-2015-0356/", }, { category: "self", summary: "SUSE CVE CVE-2015-0357 page", url: "https://www.suse.com/security/cve/CVE-2015-0357/", }, { category: "self", summary: "SUSE CVE CVE-2015-0358 page", url: "https://www.suse.com/security/cve/CVE-2015-0358/", }, { category: "self", summary: "SUSE CVE CVE-2015-0359 page", url: "https://www.suse.com/security/cve/CVE-2015-0359/", }, { category: "self", summary: "SUSE CVE CVE-2015-0360 page", url: "https://www.suse.com/security/cve/CVE-2015-0360/", }, { category: "self", summary: "SUSE CVE CVE-2015-3038 page", url: "https://www.suse.com/security/cve/CVE-2015-3038/", }, { category: "self", summary: "SUSE CVE CVE-2015-3039 page", url: "https://www.suse.com/security/cve/CVE-2015-3039/", }, { category: "self", summary: "SUSE CVE CVE-2015-3040 page", url: "https://www.suse.com/security/cve/CVE-2015-3040/", }, { category: "self", summary: "SUSE CVE CVE-2015-3041 page", url: "https://www.suse.com/security/cve/CVE-2015-3041/", }, { category: "self", summary: "SUSE CVE CVE-2015-3042 page", url: "https://www.suse.com/security/cve/CVE-2015-3042/", }, { category: "self", summary: "SUSE CVE CVE-2015-3043 page", url: "https://www.suse.com/security/cve/CVE-2015-3043/", }, { category: "self", summary: "SUSE CVE CVE-2015-3044 page", url: "https://www.suse.com/security/cve/CVE-2015-3044/", }, { category: "self", summary: "SUSE CVE CVE-2015-3077 page", url: "https://www.suse.com/security/cve/CVE-2015-3077/", }, { category: "self", summary: "SUSE CVE CVE-2015-3078 page", url: "https://www.suse.com/security/cve/CVE-2015-3078/", }, { category: "self", summary: "SUSE CVE CVE-2015-3079 page", url: "https://www.suse.com/security/cve/CVE-2015-3079/", }, { category: "self", summary: "SUSE CVE CVE-2015-3080 page", url: "https://www.suse.com/security/cve/CVE-2015-3080/", }, { category: "self", summary: "SUSE CVE CVE-2015-3081 page", url: "https://www.suse.com/security/cve/CVE-2015-3081/", }, { category: "self", summary: "SUSE CVE CVE-2015-3082 page", url: "https://www.suse.com/security/cve/CVE-2015-3082/", }, { category: "self", summary: "SUSE CVE CVE-2015-3083 page", url: "https://www.suse.com/security/cve/CVE-2015-3083/", }, { category: "self", summary: "SUSE CVE CVE-2015-3084 page", url: "https://www.suse.com/security/cve/CVE-2015-3084/", }, { category: "self", summary: "SUSE CVE CVE-2015-3085 page", url: "https://www.suse.com/security/cve/CVE-2015-3085/", }, { category: "self", summary: "SUSE CVE CVE-2015-3086 page", url: "https://www.suse.com/security/cve/CVE-2015-3086/", }, { category: "self", summary: "SUSE CVE CVE-2015-3087 page", url: "https://www.suse.com/security/cve/CVE-2015-3087/", }, { category: "self", summary: "SUSE CVE CVE-2015-3088 page", url: "https://www.suse.com/security/cve/CVE-2015-3088/", }, { category: "self", summary: "SUSE CVE CVE-2015-3089 page", url: "https://www.suse.com/security/cve/CVE-2015-3089/", }, { category: "self", summary: "SUSE CVE CVE-2015-3090 page", url: "https://www.suse.com/security/cve/CVE-2015-3090/", }, { category: "self", summary: "SUSE CVE CVE-2015-3091 page", url: "https://www.suse.com/security/cve/CVE-2015-3091/", }, { category: "self", summary: "SUSE CVE CVE-2015-3092 page", url: "https://www.suse.com/security/cve/CVE-2015-3092/", }, { category: "self", summary: "SUSE CVE CVE-2015-3093 page", url: "https://www.suse.com/security/cve/CVE-2015-3093/", }, { category: "self", summary: "SUSE CVE CVE-2015-3096 page", url: "https://www.suse.com/security/cve/CVE-2015-3096/", }, { category: "self", summary: "SUSE CVE CVE-2015-3098 page", url: "https://www.suse.com/security/cve/CVE-2015-3098/", }, { category: "self", summary: "SUSE CVE CVE-2015-3099 page", url: "https://www.suse.com/security/cve/CVE-2015-3099/", }, { category: "self", summary: "SUSE CVE CVE-2015-3100 page", url: "https://www.suse.com/security/cve/CVE-2015-3100/", }, { category: "self", summary: "SUSE CVE CVE-2015-3102 page", url: "https://www.suse.com/security/cve/CVE-2015-3102/", }, { category: "self", summary: "SUSE CVE CVE-2015-3103 page", url: "https://www.suse.com/security/cve/CVE-2015-3103/", }, { category: "self", summary: "SUSE CVE CVE-2015-3106 page", url: "https://www.suse.com/security/cve/CVE-2015-3106/", }, { category: "self", summary: "SUSE CVE CVE-2015-3107 page", url: "https://www.suse.com/security/cve/CVE-2015-3107/", }, { category: "self", summary: "SUSE CVE CVE-2015-3108 page", url: "https://www.suse.com/security/cve/CVE-2015-3108/", }, { category: "self", summary: "SUSE CVE CVE-2015-3113 page", url: "https://www.suse.com/security/cve/CVE-2015-3113/", }, ], title: "Security update for flash-player", tracking: { current_release_date: "2014-11-14T12:52:02Z", generator: { date: "2014-11-14T12:52:02Z", engine: { name: "cve-database.git:bin/generate-csaf.pl", version: "1", }, }, id: "SUSE-SU-2015:1137-1", initial_release_date: "2014-11-14T12:52:02Z", revision_history: [ { date: "2014-11-14T12:52:02Z", number: "1", summary: "Current version", }, ], status: "final", version: "1", }, }, product_tree: { branches: [ { branches: [ { branches: [ { category: "product_version", name: "flash-player-11.2.202.418-0.3.1.i586", product: { name: "flash-player-11.2.202.418-0.3.1.i586", product_id: "flash-player-11.2.202.418-0.3.1.i586", }, }, { category: "product_version", name: "flash-player-gnome-11.2.202.418-0.3.1.i586", product: { name: "flash-player-gnome-11.2.202.418-0.3.1.i586", product_id: "flash-player-gnome-11.2.202.418-0.3.1.i586", }, }, { category: "product_version", name: "flash-player-kde4-11.2.202.418-0.3.1.i586", product: { name: "flash-player-kde4-11.2.202.418-0.3.1.i586", product_id: "flash-player-kde4-11.2.202.418-0.3.1.i586", }, }, ], category: "architecture", name: "i586", }, { branches: [ { category: "product_version", name: "flash-player-11.2.202.418-0.3.1.x86_64", product: { name: "flash-player-11.2.202.418-0.3.1.x86_64", product_id: "flash-player-11.2.202.418-0.3.1.x86_64", }, }, { category: "product_version", name: "flash-player-gnome-11.2.202.418-0.3.1.x86_64", product: { name: "flash-player-gnome-11.2.202.418-0.3.1.x86_64", product_id: "flash-player-gnome-11.2.202.418-0.3.1.x86_64", }, }, { category: "product_version", name: "flash-player-kde4-11.2.202.418-0.3.1.x86_64", product: { name: "flash-player-kde4-11.2.202.418-0.3.1.x86_64", product_id: "flash-player-kde4-11.2.202.418-0.3.1.x86_64", }, }, ], category: "architecture", name: "x86_64", }, { branches: [ { category: "product_name", name: "SUSE Linux Enterprise Desktop 11 SP3", product: { name: "SUSE Linux Enterprise Desktop 11 SP3", product_id: "SUSE Linux Enterprise Desktop 11 SP3", product_identification_helper: { cpe: "cpe:/o:suse:suse_sled:11:sp3", }, }, }, ], category: "product_family", name: "SUSE Linux Enterprise", }, ], category: "vendor", name: "SUSE", }, ], relationships: [ { category: "default_component_of", full_product_name: { name: "flash-player-11.2.202.418-0.3.1.i586 as component of SUSE Linux Enterprise Desktop 11 SP3", product_id: "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", }, product_reference: "flash-player-11.2.202.418-0.3.1.i586", relates_to_product_reference: "SUSE Linux Enterprise Desktop 11 SP3", }, { category: "default_component_of", full_product_name: { name: "flash-player-11.2.202.418-0.3.1.x86_64 as component of SUSE Linux Enterprise Desktop 11 SP3", product_id: "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", }, product_reference: "flash-player-11.2.202.418-0.3.1.x86_64", relates_to_product_reference: "SUSE Linux Enterprise Desktop 11 SP3", }, { category: "default_component_of", full_product_name: { name: "flash-player-gnome-11.2.202.418-0.3.1.i586 as component of SUSE Linux Enterprise Desktop 11 SP3", product_id: "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", }, product_reference: "flash-player-gnome-11.2.202.418-0.3.1.i586", relates_to_product_reference: "SUSE Linux Enterprise Desktop 11 SP3", }, { category: "default_component_of", full_product_name: { name: "flash-player-gnome-11.2.202.418-0.3.1.x86_64 as component of SUSE Linux Enterprise Desktop 11 SP3", product_id: "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", }, product_reference: "flash-player-gnome-11.2.202.418-0.3.1.x86_64", relates_to_product_reference: "SUSE Linux Enterprise Desktop 11 SP3", }, { category: "default_component_of", full_product_name: { name: "flash-player-kde4-11.2.202.418-0.3.1.i586 as component of SUSE Linux Enterprise Desktop 11 SP3", product_id: "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", }, product_reference: "flash-player-kde4-11.2.202.418-0.3.1.i586", relates_to_product_reference: "SUSE Linux Enterprise Desktop 11 SP3", }, { category: "default_component_of", full_product_name: { name: "flash-player-kde4-11.2.202.418-0.3.1.x86_64 as component of SUSE Linux Enterprise Desktop 11 SP3", product_id: "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", }, product_reference: "flash-player-kde4-11.2.202.418-0.3.1.x86_64", relates_to_product_reference: "SUSE Linux Enterprise Desktop 11 SP3", }, ], }, vulnerabilities: [ { cve: "CVE-2013-3343", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2013-3343", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 10.3.183.90 and 11.x before 11.7.700.224 on Windows, before 10.3.183.90 and 11.x before 11.7.700.225 on Mac OS X, before 10.3.183.90 and 11.x before 11.2.202.291 on Linux, before 11.1.111.59 on Android 2.x and 3.x, and before 11.1.115.63 on Android 4.x; Adobe AIR before 3.7.0.2090 on Windows and Android and before 3.7.0.2100 on Mac OS X; and Adobe AIR SDK & Compiler before 3.7.0.2090 on Windows and before 3.7.0.2100 on Mac OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2013-3343", url: "https://www.suse.com/security/cve/CVE-2013-3343", }, { category: "external", summary: "SUSE Bug 824512 for CVE-2013-3343", url: "https://bugzilla.suse.com/824512", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2013-3343", }, { cve: "CVE-2013-3344", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2013-3344", }, ], notes: [ { category: "general", text: "Heap-based buffer overflow in Adobe Flash Player before 11.7.700.232 and 11.8.x before 11.8.800.94 on Windows and Mac OS X, before 11.2.202.297 on Linux, before 11.1.111.64 on Android 2.x and 3.x, and before 11.1.115.69 on Android 4.x allows attackers to execute arbitrary code via unspecified vectors.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2013-3344", url: "https://www.suse.com/security/cve/CVE-2013-3344", }, { category: "external", summary: "SUSE Bug 828810 for CVE-2013-3344", url: "https://bugzilla.suse.com/828810", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2013-3344", }, { cve: "CVE-2013-3345", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2013-3345", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 11.7.700.232 and 11.8.x before 11.8.800.94 on Windows and Mac OS X, before 11.2.202.297 on Linux, before 11.1.111.64 on Android 2.x and 3.x, and before 11.1.115.69 on Android 4.x allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2013-3345", url: "https://www.suse.com/security/cve/CVE-2013-3345", }, { category: "external", summary: "SUSE Bug 828810 for CVE-2013-3345", url: "https://bugzilla.suse.com/828810", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "low", }, ], title: "CVE-2013-3345", }, { cve: "CVE-2013-3347", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2013-3347", }, ], notes: [ { category: "general", text: "Integer overflow in Adobe Flash Player before 11.7.700.232 and 11.8.x before 11.8.800.94 on Windows and Mac OS X, before 11.2.202.297 on Linux, before 11.1.111.64 on Android 2.x and 3.x, and before 11.1.115.69 on Android 4.x allows attackers to execute arbitrary code via PCM data that is not properly handled during resampling.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2013-3347", url: "https://www.suse.com/security/cve/CVE-2013-3347", }, { category: "external", summary: "SUSE Bug 828810 for CVE-2013-3347", url: "https://bugzilla.suse.com/828810", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2013-3347", }, { cve: "CVE-2013-3361", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2013-3361", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 11.7.700.242 and 11.8.x before 11.8.800.168 on Windows and Mac OS X, before 11.2.202.310 on Linux, before 11.1.111.73 on Android 2.x and 3.x, and before 11.1.115.81 on Android 4.x; Adobe AIR before 3.8.0.1430; and Adobe AIR SDK & Compiler before 3.8.0.1430 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2013-3362, CVE-2013-3363, and CVE-2013-5324.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2013-3361", url: "https://www.suse.com/security/cve/CVE-2013-3361", }, { category: "external", summary: "SUSE Bug 839897 for CVE-2013-3361", url: "https://bugzilla.suse.com/839897", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2013-3361", }, { cve: "CVE-2013-3362", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2013-3362", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 11.7.700.242 and 11.8.x before 11.8.800.168 on Windows and Mac OS X, before 11.2.202.310 on Linux, before 11.1.111.73 on Android 2.x and 3.x, and before 11.1.115.81 on Android 4.x; Adobe AIR before 3.8.0.1430; and Adobe AIR SDK & Compiler before 3.8.0.1430 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2013-3361, CVE-2013-3363, and CVE-2013-5324.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2013-3362", url: "https://www.suse.com/security/cve/CVE-2013-3362", }, { category: "external", summary: "SUSE Bug 839897 for CVE-2013-3362", url: "https://bugzilla.suse.com/839897", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2013-3362", }, { cve: "CVE-2013-3363", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2013-3363", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 11.7.700.242 and 11.8.x before 11.8.800.168 on Windows and Mac OS X, before 11.2.202.310 on Linux, before 11.1.111.73 on Android 2.x and 3.x, and before 11.1.115.81 on Android 4.x; Adobe AIR before 3.8.0.1430; and Adobe AIR SDK & Compiler before 3.8.0.1430 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2013-3361, CVE-2013-3362, and CVE-2013-5324.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2013-3363", url: "https://www.suse.com/security/cve/CVE-2013-3363", }, { category: "external", summary: "SUSE Bug 839897 for CVE-2013-3363", url: "https://bugzilla.suse.com/839897", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2013-3363", }, { cve: "CVE-2013-5324", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2013-5324", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 11.7.700.242 and 11.8.x before 11.8.800.168 on Windows and Mac OS X, before 11.2.202.310 on Linux, before 11.1.111.73 on Android 2.x and 3.x, and before 11.1.115.81 on Android 4.x; Adobe AIR before 3.8.0.1430; and Adobe AIR SDK & Compiler before 3.8.0.1430 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2013-3361, CVE-2013-3362, and CVE-2013-3363.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2013-5324", url: "https://www.suse.com/security/cve/CVE-2013-5324", }, { category: "external", summary: "SUSE Bug 839897 for CVE-2013-5324", url: "https://bugzilla.suse.com/839897", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2013-5324", }, { cve: "CVE-2013-5329", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2013-5329", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 11.7.700.252 and 11.8.x and 11.9.x before 11.9.900.152 on Windows and Mac OS X and before 11.2.202.327 on Linux, Adobe AIR before 3.9.0.1210, Adobe AIR SDK before 3.9.0.1210, and Adobe AIR SDK & Compiler before 3.9.0.1210 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2013-5330.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2013-5329", url: "https://www.suse.com/security/cve/CVE-2013-5329", }, { category: "external", summary: "SUSE Bug 850220 for CVE-2013-5329", url: "https://bugzilla.suse.com/850220", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "important", }, ], title: "CVE-2013-5329", }, { cve: "CVE-2013-5330", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2013-5330", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 11.7.700.252 and 11.8.x and 11.9.x before 11.9.900.152 on Windows and Mac OS X and before 11.2.202.327 on Linux, Adobe AIR before 3.9.0.1210, Adobe AIR SDK before 3.9.0.1210, and Adobe AIR SDK & Compiler before 3.9.0.1210 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2013-5329.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2013-5330", url: "https://www.suse.com/security/cve/CVE-2013-5330", }, { category: "external", summary: "SUSE Bug 850220 for CVE-2013-5330", url: "https://bugzilla.suse.com/850220", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "important", }, ], title: "CVE-2013-5330", }, { cve: "CVE-2013-5331", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2013-5331", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 11.7.700.257 and 11.8.x and 11.9.x before 11.9.900.170 on Windows and Mac OS X and before 11.2.202.332 on Linux, Adobe AIR before 3.9.0.1380, Adobe AIR SDK before 3.9.0.1380, and Adobe AIR SDK & Compiler before 3.9.0.1380 allow remote attackers to execute arbitrary code via crafted .swf content that leverages an unspecified \"type confusion,\" as exploited in the wild in December 2013.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2013-5331", url: "https://www.suse.com/security/cve/CVE-2013-5331", }, { category: "external", summary: "SUSE Bug 854881 for CVE-2013-5331", url: "https://bugzilla.suse.com/854881", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2013-5331", }, { cve: "CVE-2013-5332", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2013-5332", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 11.7.700.257 and 11.8.x and 11.9.x before 11.9.900.170 on Windows and Mac OS X and before 11.2.202.332 on Linux, Adobe AIR before 3.9.0.1380, Adobe AIR SDK before 3.9.0.1380, and Adobe AIR SDK & Compiler before 3.9.0.1380 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2013-5332", url: "https://www.suse.com/security/cve/CVE-2013-5332", }, { category: "external", summary: "SUSE Bug 854881 for CVE-2013-5332", url: "https://bugzilla.suse.com/854881", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2013-5332", }, { cve: "CVE-2014-0491", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0491", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 11.7.700.260 and 11.8.x and 11.9.x before 12.0.0.38 on Windows and Mac OS X and before 11.2.202.335 on Linux, Adobe AIR before 4.0.0.1390, Adobe AIR SDK before 4.0.0.1390, and Adobe AIR SDK & Compiler before 4.0.0.1390 allow attackers to bypass unspecified protection mechanisms via unknown vectors.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0491", url: "https://www.suse.com/security/cve/CVE-2014-0491", }, { category: "external", summary: "SUSE Bug 858822 for CVE-2014-0491", url: "https://bugzilla.suse.com/858822", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2014-0491", }, { cve: "CVE-2014-0492", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0492", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 11.7.700.260 and 11.8.x and 11.9.x before 12.0.0.38 on Windows and Mac OS X and before 11.2.202.335 on Linux, Adobe AIR before 4.0.0.1390, Adobe AIR SDK before 4.0.0.1390, and Adobe AIR SDK & Compiler before 4.0.0.1390 allow attackers to defeat the ASLR protection mechanism by leveraging an \"address leak.\"", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0492", url: "https://www.suse.com/security/cve/CVE-2014-0492", }, { category: "external", summary: "SUSE Bug 858822 for CVE-2014-0492", url: "https://bugzilla.suse.com/858822", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2014-0492", }, { cve: "CVE-2014-0497", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0497", }, ], notes: [ { category: "general", text: "Integer underflow in Adobe Flash Player before 11.7.700.261 and 11.8.x through 12.0.x before 12.0.0.44 on Windows and Mac OS X, and before 11.2.202.336 on Linux, allows remote attackers to execute arbitrary code via unspecified vectors.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0497", url: "https://www.suse.com/security/cve/CVE-2014-0497", }, { category: "external", summary: "SUSE Bug 862288 for CVE-2014-0497", url: "https://bugzilla.suse.com/862288", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 9.8, baseSeverity: "CRITICAL", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2014-0497", }, { cve: "CVE-2014-0498", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0498", }, ], notes: [ { category: "general", text: "Stack-based buffer overflow in Adobe Flash Player before 11.7.700.269 and 11.8.x through 12.0.x before 12.0.0.70 on Windows and Mac OS X and before 11.2.202.341 on Linux, Adobe AIR before 4.0.0.1628 on Android, Adobe AIR SDK before 4.0.0.1628, and Adobe AIR SDK & Compiler before 4.0.0.1628 allows attackers to execute arbitrary code via unspecified vectors.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0498", url: "https://www.suse.com/security/cve/CVE-2014-0498", }, { category: "external", summary: "SUSE Bug 865021 for CVE-2014-0498", url: "https://bugzilla.suse.com/865021", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2014-0498", }, { cve: "CVE-2014-0499", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0499", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 11.7.700.269 and 11.8.x through 12.0.x before 12.0.0.70 on Windows and Mac OS X and before 11.2.202.341 on Linux, Adobe AIR before 4.0.0.1628 on Android, Adobe AIR SDK before 4.0.0.1628, and Adobe AIR SDK & Compiler before 4.0.0.1628 do not prevent access to address information, which makes it easier for attackers to bypass the ASLR protection mechanism via unspecified vectors.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0499", url: "https://www.suse.com/security/cve/CVE-2014-0499", }, { category: "external", summary: "SUSE Bug 865021 for CVE-2014-0499", url: "https://bugzilla.suse.com/865021", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2014-0499", }, { cve: "CVE-2014-0502", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0502", }, ], notes: [ { category: "general", text: "Double free vulnerability in Adobe Flash Player before 11.7.700.269 and 11.8.x through 12.0.x before 12.0.0.70 on Windows and Mac OS X and before 11.2.202.341 on Linux, Adobe AIR before 4.0.0.1628 on Android, Adobe AIR SDK before 4.0.0.1628, and Adobe AIR SDK & Compiler before 4.0.0.1628 allows remote attackers to execute arbitrary code via unspecified vectors, as exploited in the wild in February 2014.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0502", url: "https://www.suse.com/security/cve/CVE-2014-0502", }, { category: "external", summary: "SUSE Bug 865021 for CVE-2014-0502", url: "https://bugzilla.suse.com/865021", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 8.8, baseSeverity: "HIGH", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2014-0502", }, { cve: "CVE-2014-0503", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0503", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 11.7.700.272 and 11.8.x through 12.0.x before 12.0.0.77 on Windows and OS X, and before 11.2.202.346 on Linux, allows remote attackers to bypass the Same Origin Policy via unspecified vectors.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0503", url: "https://www.suse.com/security/cve/CVE-2014-0503", }, { category: "external", summary: "SUSE Bug 867808 for CVE-2014-0503", url: "https://bugzilla.suse.com/867808", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2014-0503", }, { cve: "CVE-2014-0504", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0504", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 11.7.700.272 and 11.8.x through 12.0.x before 12.0.0.77 on Windows and OS X, and before 11.2.202.346 on Linux, allows attackers to read the clipboard via unspecified vectors.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0504", url: "https://www.suse.com/security/cve/CVE-2014-0504", }, { category: "external", summary: "SUSE Bug 867808 for CVE-2014-0504", url: "https://bugzilla.suse.com/867808", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2014-0504", }, { cve: "CVE-2014-0506", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0506", }, ], notes: [ { category: "general", text: "Use-after-free vulnerability in Adobe Flash Player before 11.7.700.275 and 11.8.x through 13.0.x before 13.0.0.182 on Windows and OS X and before 11.2.202.350 on Linux, Adobe AIR before 13.0.0.83 on Android, Adobe AIR SDK before 13.0.0.83, and Adobe AIR SDK & Compiler before 13.0.0.83 allows remote attackers to execute arbitrary code, and possibly bypass an Internet Explorer sandbox protection mechanism, via unspecified vectors, as demonstrated by VUPEN during a Pwn2Own competition at CanSecWest 2014.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0506", url: "https://www.suse.com/security/cve/CVE-2014-0506", }, { category: "external", summary: "SUSE Bug 872692 for CVE-2014-0506", url: "https://bugzilla.suse.com/872692", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2014-0506", }, { cve: "CVE-2014-0507", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0507", }, ], notes: [ { category: "general", text: "Buffer overflow in Adobe Flash Player before 11.7.700.275 and 11.8.x through 13.0.x before 13.0.0.182 on Windows and OS X and before 11.2.202.350 on Linux, Adobe AIR before 13.0.0.83 on Android, Adobe AIR SDK before 13.0.0.83, and Adobe AIR SDK & Compiler before 13.0.0.83 allows attackers to execute arbitrary code via unspecified vectors.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0507", url: "https://www.suse.com/security/cve/CVE-2014-0507", }, { category: "external", summary: "SUSE Bug 872692 for CVE-2014-0507", url: "https://bugzilla.suse.com/872692", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2014-0507", }, { cve: "CVE-2014-0508", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0508", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 11.7.700.275 and 11.8.x through 13.0.x before 13.0.0.182 on Windows and OS X and before 11.2.202.350 on Linux, Adobe AIR before 13.0.0.83 on Android, Adobe AIR SDK before 13.0.0.83, and Adobe AIR SDK & Compiler before 13.0.0.83 allow attackers to bypass intended access restrictions and obtain sensitive information via unspecified vectors.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0508", url: "https://www.suse.com/security/cve/CVE-2014-0508", }, { category: "external", summary: "SUSE Bug 872692 for CVE-2014-0508", url: "https://bugzilla.suse.com/872692", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "moderate", }, ], title: "CVE-2014-0508", }, { cve: "CVE-2014-0509", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0509", }, ], notes: [ { category: "general", text: "Cross-site scripting (XSS) vulnerability in Adobe Flash Player before 11.7.700.275 and 11.8.x through 13.0.x before 13.0.0.182 on Windows and OS X and before 11.2.202.350 on Linux, Adobe AIR before 13.0.0.83 on Android, Adobe AIR SDK before 13.0.0.83, and Adobe AIR SDK & Compiler before 13.0.0.83 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0509", url: "https://www.suse.com/security/cve/CVE-2014-0509", }, { category: "external", summary: "SUSE Bug 872692 for CVE-2014-0509", url: "https://bugzilla.suse.com/872692", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "moderate", }, ], title: "CVE-2014-0509", }, { cve: "CVE-2014-0510", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0510", }, ], notes: [ { category: "general", text: "Heap-based buffer overflow in Adobe Flash Player 12.0.0.77 allows remote attackers to execute arbitrary code and bypass a sandbox protection mechanism via unspecified vectors, as demonstrated by Zeguang Zhao and Liang Chen during a Pwn2Own competition at CanSecWest 2014.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0510", url: "https://www.suse.com/security/cve/CVE-2014-0510", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2014-0510", }, { cve: "CVE-2014-0515", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0515", }, ], notes: [ { category: "general", text: "Buffer overflow in Adobe Flash Player before 11.7.700.279 and 11.8.x through 13.0.x before 13.0.0.206 on Windows and OS X, and before 11.2.202.356 on Linux, allows remote attackers to execute arbitrary code via unspecified vectors, as exploited in the wild in April 2014.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0515", url: "https://www.suse.com/security/cve/CVE-2014-0515", }, { category: "external", summary: "SUSE Bug 875577 for CVE-2014-0515", url: "https://bugzilla.suse.com/875577", }, { category: "external", summary: "SUSE Bug 886454 for CVE-2014-0515", url: "https://bugzilla.suse.com/886454", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2014-0515", }, { cve: "CVE-2014-0516", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0516", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.214 on Windows and OS X and before 11.2.202.359 on Linux, Adobe AIR SDK before 13.0.0.111, and Adobe AIR SDK & Compiler before 13.0.0.111 allow remote attackers to bypass the Same Origin Policy via unspecified vectors.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0516", url: "https://www.suse.com/security/cve/CVE-2014-0516", }, { category: "external", summary: "SUSE Bug 877649 for CVE-2014-0516", url: "https://bugzilla.suse.com/877649", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "important", }, ], title: "CVE-2014-0516", }, { cve: "CVE-2014-0517", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0517", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.214 on Windows and OS X and before 11.2.202.359 on Linux, Adobe AIR SDK before 13.0.0.111, and Adobe AIR SDK & Compiler before 13.0.0.111 allow attackers to bypass intended access restrictions via unspecified vectors, a different vulnerability than CVE-2014-0518, CVE-2014-0519, and CVE-2014-0520.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0517", url: "https://www.suse.com/security/cve/CVE-2014-0517", }, { category: "external", summary: "SUSE Bug 877649 for CVE-2014-0517", url: "https://bugzilla.suse.com/877649", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "important", }, ], title: "CVE-2014-0517", }, { cve: "CVE-2014-0518", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0518", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.214 on Windows and OS X and before 11.2.202.359 on Linux, Adobe AIR SDK before 13.0.0.111, and Adobe AIR SDK & Compiler before 13.0.0.111 allow attackers to bypass intended access restrictions via unspecified vectors, a different vulnerability than CVE-2014-0517, CVE-2014-0519, and CVE-2014-0520.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0518", url: "https://www.suse.com/security/cve/CVE-2014-0518", }, { category: "external", summary: "SUSE Bug 877649 for CVE-2014-0518", url: "https://bugzilla.suse.com/877649", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "important", }, ], title: "CVE-2014-0518", }, { cve: "CVE-2014-0519", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0519", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.214 on Windows and OS X and before 11.2.202.359 on Linux, Adobe AIR SDK before 13.0.0.111, and Adobe AIR SDK & Compiler before 13.0.0.111 allow attackers to bypass intended access restrictions via unspecified vectors, a different vulnerability than CVE-2014-0517, CVE-2014-0518, and CVE-2014-0520.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0519", url: "https://www.suse.com/security/cve/CVE-2014-0519", }, { category: "external", summary: "SUSE Bug 877649 for CVE-2014-0519", url: "https://bugzilla.suse.com/877649", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "important", }, ], title: "CVE-2014-0519", }, { cve: "CVE-2014-0520", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0520", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.214 on Windows and OS X and before 11.2.202.359 on Linux, Adobe AIR SDK before 13.0.0.111, and Adobe AIR SDK & Compiler before 13.0.0.111 allow attackers to bypass intended access restrictions via unspecified vectors, a different vulnerability than CVE-2014-0517, CVE-2014-0518, and CVE-2014-0519.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0520", url: "https://www.suse.com/security/cve/CVE-2014-0520", }, { category: "external", summary: "SUSE Bug 877649 for CVE-2014-0520", url: "https://bugzilla.suse.com/877649", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "important", }, ], title: "CVE-2014-0520", }, { cve: "CVE-2014-0531", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0531", }, ], notes: [ { category: "general", text: "Cross-site scripting (XSS) vulnerability in Adobe Flash Player before 13.0.0.223 and 14.x before 14.0.0.125 on Windows and OS X and before 11.2.202.378 on Linux, Adobe AIR before 14.0.0.110, Adobe AIR SDK before 14.0.0.110, and Adobe AIR SDK & Compiler before 14.0.0.110 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2014-0532 and CVE-2014-0533.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0531", url: "https://www.suse.com/security/cve/CVE-2014-0531", }, { category: "external", summary: "SUSE Bug 882187 for CVE-2014-0531", url: "https://bugzilla.suse.com/882187", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2014-0531", }, { cve: "CVE-2014-0532", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0532", }, ], notes: [ { category: "general", text: "Cross-site scripting (XSS) vulnerability in Adobe Flash Player before 13.0.0.223 and 14.x before 14.0.0.125 on Windows and OS X and before 11.2.202.378 on Linux, Adobe AIR before 14.0.0.110, Adobe AIR SDK before 14.0.0.110, and Adobe AIR SDK & Compiler before 14.0.0.110 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2014-0531 and CVE-2014-0533.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0532", url: "https://www.suse.com/security/cve/CVE-2014-0532", }, { category: "external", summary: "SUSE Bug 882187 for CVE-2014-0532", url: "https://bugzilla.suse.com/882187", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2014-0532", }, { cve: "CVE-2014-0533", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0533", }, ], notes: [ { category: "general", text: "Cross-site scripting (XSS) vulnerability in Adobe Flash Player before 13.0.0.223 and 14.x before 14.0.0.125 on Windows and OS X and before 11.2.202.378 on Linux, Adobe AIR before 14.0.0.110, Adobe AIR SDK before 14.0.0.110, and Adobe AIR SDK & Compiler before 14.0.0.110 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2014-0531 and CVE-2014-0532.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0533", url: "https://www.suse.com/security/cve/CVE-2014-0533", }, { category: "external", summary: "SUSE Bug 882187 for CVE-2014-0533", url: "https://bugzilla.suse.com/882187", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2014-0533", }, { cve: "CVE-2014-0534", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0534", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.223 and 14.x before 14.0.0.125 on Windows and OS X and before 11.2.202.378 on Linux, Adobe AIR before 14.0.0.110, Adobe AIR SDK before 14.0.0.110, and Adobe AIR SDK & Compiler before 14.0.0.110 allow attackers to bypass intended access restrictions via unspecified vectors, a different vulnerability than CVE-2014-0535.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0534", url: "https://www.suse.com/security/cve/CVE-2014-0534", }, { category: "external", summary: "SUSE Bug 882187 for CVE-2014-0534", url: "https://bugzilla.suse.com/882187", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2014-0534", }, { cve: "CVE-2014-0535", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0535", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.223 and 14.x before 14.0.0.125 on Windows and OS X and before 11.2.202.378 on Linux, Adobe AIR before 14.0.0.110, Adobe AIR SDK before 14.0.0.110, and Adobe AIR SDK & Compiler before 14.0.0.110 allow attackers to bypass intended access restrictions via unspecified vectors, a different vulnerability than CVE-2014-0534.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0535", url: "https://www.suse.com/security/cve/CVE-2014-0535", }, { category: "external", summary: "SUSE Bug 882187 for CVE-2014-0535", url: "https://bugzilla.suse.com/882187", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2014-0535", }, { cve: "CVE-2014-0536", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0536", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.223 and 14.x before 14.0.0.125 on Windows and OS X and before 11.2.202.378 on Linux, Adobe AIR before 14.0.0.110, Adobe AIR SDK before 14.0.0.110, and Adobe AIR SDK & Compiler before 14.0.0.110 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0536", url: "https://www.suse.com/security/cve/CVE-2014-0536", }, { category: "external", summary: "SUSE Bug 882187 for CVE-2014-0536", url: "https://bugzilla.suse.com/882187", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2014-0536", }, { cve: "CVE-2014-0537", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0537", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.231 and 14.x before 14.0.0.145 on Windows and OS X and before 11.2.202.394 on Linux, Adobe AIR before 14.0.0.137 on Android, Adobe AIR SDK before 14.0.0.137, and Adobe AIR SDK & Compiler before 14.0.0.137 allow attackers to bypass intended access restrictions via unspecified vectors, a different vulnerability than CVE-2014-0539.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0537", url: "https://www.suse.com/security/cve/CVE-2014-0537", }, { category: "external", summary: "SUSE Bug 886454 for CVE-2014-0537", url: "https://bugzilla.suse.com/886454", }, { category: "external", summary: "SUSE Bug 886472 for CVE-2014-0537", url: "https://bugzilla.suse.com/886472", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2014-0537", }, { cve: "CVE-2014-0538", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0538", }, ], notes: [ { category: "general", text: "Use-after-free vulnerability in Adobe Flash Player before 13.0.0.241 and 14.x before 14.0.0.176 on Windows and OS X and before 11.2.202.400 on Linux, Adobe AIR before 14.0.0.178 on Windows and OS X and before 14.0.0.179 on Android, Adobe AIR SDK before 14.0.0.178, and Adobe AIR SDK & Compiler before 14.0.0.178 allows attackers to execute arbitrary code via unspecified vectors.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0538", url: "https://www.suse.com/security/cve/CVE-2014-0538", }, { category: "external", summary: "SUSE Bug 891688 for CVE-2014-0538", url: "https://bugzilla.suse.com/891688", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2014-0538", }, { cve: "CVE-2014-0539", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0539", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.231 and 14.x before 14.0.0.145 on Windows and OS X and before 11.2.202.394 on Linux, Adobe AIR before 14.0.0.137 on Android, Adobe AIR SDK before 14.0.0.137, and Adobe AIR SDK & Compiler before 14.0.0.137 allow attackers to bypass intended access restrictions via unspecified vectors, a different vulnerability than CVE-2014-0537.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0539", url: "https://www.suse.com/security/cve/CVE-2014-0539", }, { category: "external", summary: "SUSE Bug 886454 for CVE-2014-0539", url: "https://bugzilla.suse.com/886454", }, { category: "external", summary: "SUSE Bug 886472 for CVE-2014-0539", url: "https://bugzilla.suse.com/886472", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2014-0539", }, { cve: "CVE-2014-0540", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0540", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.241 and 14.x before 14.0.0.176 on Windows and OS X and before 11.2.202.400 on Linux, Adobe AIR before 14.0.0.178 on Windows and OS X and before 14.0.0.179 on Android, Adobe AIR SDK before 14.0.0.178, and Adobe AIR SDK & Compiler before 14.0.0.178 do not properly restrict discovery of memory addresses, which allows attackers to bypass the ASLR protection mechanism via unspecified vectors, a different vulnerability than CVE-2014-0542, CVE-2014-0543, CVE-2014-0544, and CVE-2014-0545.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0540", url: "https://www.suse.com/security/cve/CVE-2014-0540", }, { category: "external", summary: "SUSE Bug 891688 for CVE-2014-0540", url: "https://bugzilla.suse.com/891688", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2014-0540", }, { cve: "CVE-2014-0541", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0541", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.241 and 14.x before 14.0.0.176 on Windows and OS X and before 11.2.202.400 on Linux, Adobe AIR before 14.0.0.178 on Windows and OS X and before 14.0.0.179 on Android, Adobe AIR SDK before 14.0.0.178, and Adobe AIR SDK & Compiler before 14.0.0.178 allow attackers to bypass intended access restrictions via unspecified vectors.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0541", url: "https://www.suse.com/security/cve/CVE-2014-0541", }, { category: "external", summary: "SUSE Bug 891688 for CVE-2014-0541", url: "https://bugzilla.suse.com/891688", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2014-0541", }, { cve: "CVE-2014-0542", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0542", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.241 and 14.x before 14.0.0.176 on Windows and OS X and before 11.2.202.400 on Linux, Adobe AIR before 14.0.0.178 on Windows and OS X and before 14.0.0.179 on Android, Adobe AIR SDK before 14.0.0.178, and Adobe AIR SDK & Compiler before 14.0.0.178 do not properly restrict discovery of memory addresses, which allows attackers to bypass the ASLR protection mechanism via unspecified vectors, a different vulnerability than CVE-2014-0540, CVE-2014-0543, CVE-2014-0544, and CVE-2014-0545.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0542", url: "https://www.suse.com/security/cve/CVE-2014-0542", }, { category: "external", summary: "SUSE Bug 891688 for CVE-2014-0542", url: "https://bugzilla.suse.com/891688", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2014-0542", }, { cve: "CVE-2014-0543", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0543", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.241 and 14.x before 14.0.0.176 on Windows and OS X and before 11.2.202.400 on Linux, Adobe AIR before 14.0.0.178 on Windows and OS X and before 14.0.0.179 on Android, Adobe AIR SDK before 14.0.0.178, and Adobe AIR SDK & Compiler before 14.0.0.178 do not properly restrict discovery of memory addresses, which allows attackers to bypass the ASLR protection mechanism via unspecified vectors, a different vulnerability than CVE-2014-0540, CVE-2014-0542, CVE-2014-0544, and CVE-2014-0545.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0543", url: "https://www.suse.com/security/cve/CVE-2014-0543", }, { category: "external", summary: "SUSE Bug 891688 for CVE-2014-0543", url: "https://bugzilla.suse.com/891688", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2014-0543", }, { cve: "CVE-2014-0544", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0544", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.241 and 14.x before 14.0.0.176 on Windows and OS X and before 11.2.202.400 on Linux, Adobe AIR before 14.0.0.178 on Windows and OS X and before 14.0.0.179 on Android, Adobe AIR SDK before 14.0.0.178, and Adobe AIR SDK & Compiler before 14.0.0.178 do not properly restrict discovery of memory addresses, which allows attackers to bypass the ASLR protection mechanism via unspecified vectors, a different vulnerability than CVE-2014-0540, CVE-2014-0542, CVE-2014-0543, and CVE-2014-0545.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0544", url: "https://www.suse.com/security/cve/CVE-2014-0544", }, { category: "external", summary: "SUSE Bug 891688 for CVE-2014-0544", url: "https://bugzilla.suse.com/891688", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2014-0544", }, { cve: "CVE-2014-0545", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0545", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.241 and 14.x before 14.0.0.176 on Windows and OS X and before 11.2.202.400 on Linux, Adobe AIR before 14.0.0.178 on Windows and OS X and before 14.0.0.179 on Android, Adobe AIR SDK before 14.0.0.178, and Adobe AIR SDK & Compiler before 14.0.0.178 do not properly restrict discovery of memory addresses, which allows attackers to bypass the ASLR protection mechanism via unspecified vectors, a different vulnerability than CVE-2014-0540, CVE-2014-0542, CVE-2014-0543, and CVE-2014-0544.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0545", url: "https://www.suse.com/security/cve/CVE-2014-0545", }, { category: "external", summary: "SUSE Bug 891688 for CVE-2014-0545", url: "https://bugzilla.suse.com/891688", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2014-0545", }, { cve: "CVE-2014-0547", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0547", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.244 and 14.x and 15.x before 15.0.0.152 on Windows and OS X and before 11.2.202.406 on Linux, Adobe AIR before 15.0.0.249 on Windows and OS X and before 15.0.0.252 on Android, Adobe AIR SDK before 15.0.0.249, and Adobe AIR SDK & Compiler before 15.0.0.249 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2014-0549, CVE-2014-0550, CVE-2014-0551, CVE-2014-0552, and CVE-2014-0555.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0547", url: "https://www.suse.com/security/cve/CVE-2014-0547", }, { category: "external", summary: "SUSE Bug 895856 for CVE-2014-0547", url: "https://bugzilla.suse.com/895856", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2014-0547", }, { cve: "CVE-2014-0548", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0548", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.244 and 14.x and 15.x before 15.0.0.152 on Windows and OS X and before 11.2.202.406 on Linux, Adobe AIR before 15.0.0.249 on Windows and OS X and before 15.0.0.252 on Android, Adobe AIR SDK before 15.0.0.249, and Adobe AIR SDK & Compiler before 15.0.0.249 allow remote attackers to bypass the Same Origin Policy via unspecified vectors.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0548", url: "https://www.suse.com/security/cve/CVE-2014-0548", }, { category: "external", summary: "SUSE Bug 895856 for CVE-2014-0548", url: "https://bugzilla.suse.com/895856", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2014-0548", }, { cve: "CVE-2014-0549", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0549", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.244 and 14.x and 15.x before 15.0.0.152 on Windows and OS X and before 11.2.202.406 on Linux, Adobe AIR before 15.0.0.249 on Windows and OS X and before 15.0.0.252 on Android, Adobe AIR SDK before 15.0.0.249, and Adobe AIR SDK & Compiler before 15.0.0.249 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2014-0547, CVE-2014-0550, CVE-2014-0551, CVE-2014-0552, and CVE-2014-0555.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0549", url: "https://www.suse.com/security/cve/CVE-2014-0549", }, { category: "external", summary: "SUSE Bug 895856 for CVE-2014-0549", url: "https://bugzilla.suse.com/895856", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2014-0549", }, { cve: "CVE-2014-0550", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0550", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.244 and 14.x and 15.x before 15.0.0.152 on Windows and OS X and before 11.2.202.406 on Linux, Adobe AIR before 15.0.0.249 on Windows and OS X and before 15.0.0.252 on Android, Adobe AIR SDK before 15.0.0.249, and Adobe AIR SDK & Compiler before 15.0.0.249 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2014-0547, CVE-2014-0549, CVE-2014-0551, CVE-2014-0552, and CVE-2014-0555.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0550", url: "https://www.suse.com/security/cve/CVE-2014-0550", }, { category: "external", summary: "SUSE Bug 895856 for CVE-2014-0550", url: "https://bugzilla.suse.com/895856", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2014-0550", }, { cve: "CVE-2014-0551", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0551", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.244 and 14.x and 15.x before 15.0.0.152 on Windows and OS X and before 11.2.202.406 on Linux, Adobe AIR before 15.0.0.249 on Windows and OS X and before 15.0.0.252 on Android, Adobe AIR SDK before 15.0.0.249, and Adobe AIR SDK & Compiler before 15.0.0.249 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2014-0547, CVE-2014-0549, CVE-2014-0550, CVE-2014-0552, and CVE-2014-0555.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0551", url: "https://www.suse.com/security/cve/CVE-2014-0551", }, { category: "external", summary: "SUSE Bug 895856 for CVE-2014-0551", url: "https://bugzilla.suse.com/895856", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2014-0551", }, { cve: "CVE-2014-0552", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0552", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.244 and 14.x and 15.x before 15.0.0.152 on Windows and OS X and before 11.2.202.406 on Linux, Adobe AIR before 15.0.0.249 on Windows and OS X and before 15.0.0.252 on Android, Adobe AIR SDK before 15.0.0.249, and Adobe AIR SDK & Compiler before 15.0.0.249 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2014-0547, CVE-2014-0549, CVE-2014-0550, CVE-2014-0551, and CVE-2014-0555.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0552", url: "https://www.suse.com/security/cve/CVE-2014-0552", }, { category: "external", summary: "SUSE Bug 895856 for CVE-2014-0552", url: "https://bugzilla.suse.com/895856", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2014-0552", }, { cve: "CVE-2014-0553", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0553", }, ], notes: [ { category: "general", text: "Use-after-free vulnerability in Adobe Flash Player before 13.0.0.244 and 14.x and 15.x before 15.0.0.152 on Windows and OS X and before 11.2.202.406 on Linux, Adobe AIR before 15.0.0.249 on Windows and OS X and before 15.0.0.252 on Android, Adobe AIR SDK before 15.0.0.249, and Adobe AIR SDK & Compiler before 15.0.0.249 allows attackers to execute arbitrary code via unspecified vectors.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0553", url: "https://www.suse.com/security/cve/CVE-2014-0553", }, { category: "external", summary: "SUSE Bug 895856 for CVE-2014-0553", url: "https://bugzilla.suse.com/895856", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2014-0553", }, { cve: "CVE-2014-0554", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0554", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.244 and 14.x and 15.x before 15.0.0.152 on Windows and OS X and before 11.2.202.406 on Linux, Adobe AIR before 15.0.0.249 on Windows and OS X and before 15.0.0.252 on Android, Adobe AIR SDK before 15.0.0.249, and Adobe AIR SDK & Compiler before 15.0.0.249 allow attackers to bypass intended access restrictions via unspecified vectors.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0554", url: "https://www.suse.com/security/cve/CVE-2014-0554", }, { category: "external", summary: "SUSE Bug 895856 for CVE-2014-0554", url: "https://bugzilla.suse.com/895856", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2014-0554", }, { cve: "CVE-2014-0555", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0555", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.244 and 14.x and 15.x before 15.0.0.152 on Windows and OS X and before 11.2.202.406 on Linux, Adobe AIR before 15.0.0.249 on Windows and OS X and before 15.0.0.252 on Android, Adobe AIR SDK before 15.0.0.249, and Adobe AIR SDK & Compiler before 15.0.0.249 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2014-0547, CVE-2014-0549, CVE-2014-0550, CVE-2014-0551, and CVE-2014-0552.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0555", url: "https://www.suse.com/security/cve/CVE-2014-0555", }, { category: "external", summary: "SUSE Bug 895856 for CVE-2014-0555", url: "https://bugzilla.suse.com/895856", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2014-0555", }, { cve: "CVE-2014-0556", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0556", }, ], notes: [ { category: "general", text: "Heap-based buffer overflow in Adobe Flash Player before 13.0.0.244 and 14.x and 15.x before 15.0.0.152 on Windows and OS X and before 11.2.202.406 on Linux, Adobe AIR before 15.0.0.249 on Windows and OS X and before 15.0.0.252 on Android, Adobe AIR SDK before 15.0.0.249, and Adobe AIR SDK & Compiler before 15.0.0.249 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2014-0559.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0556", url: "https://www.suse.com/security/cve/CVE-2014-0556", }, { category: "external", summary: "SUSE Bug 895856 for CVE-2014-0556", url: "https://bugzilla.suse.com/895856", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2014-0556", }, { cve: "CVE-2014-0557", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0557", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.244 and 14.x and 15.x before 15.0.0.152 on Windows and OS X and before 11.2.202.406 on Linux, Adobe AIR before 15.0.0.249 on Windows and OS X and before 15.0.0.252 on Android, Adobe AIR SDK before 15.0.0.249, and Adobe AIR SDK & Compiler before 15.0.0.249 do not properly restrict discovery of memory addresses, which allows attackers to bypass the ASLR protection mechanism via unspecified vectors.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0557", url: "https://www.suse.com/security/cve/CVE-2014-0557", }, { category: "external", summary: "SUSE Bug 895856 for CVE-2014-0557", url: "https://bugzilla.suse.com/895856", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2014-0557", }, { cve: "CVE-2014-0558", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0558", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.250 and 14.x and 15.x before 15.0.0.189 on Windows and OS X and before 11.2.202.411 on Linux, Adobe AIR before 15.0.0.293, Adobe AIR SDK before 15.0.0.302, and Adobe AIR SDK & Compiler before 15.0.0.302 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2014-0564.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0558", url: "https://www.suse.com/security/cve/CVE-2014-0558", }, { category: "external", summary: "SUSE Bug 901334 for CVE-2014-0558", url: "https://bugzilla.suse.com/901334", }, { category: "external", summary: "SUSE Bug 905032 for CVE-2014-0558", url: "https://bugzilla.suse.com/905032", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "moderate", }, ], title: "CVE-2014-0558", }, { cve: "CVE-2014-0559", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0559", }, ], notes: [ { category: "general", text: "Heap-based buffer overflow in Adobe Flash Player before 13.0.0.244 and 14.x and 15.x before 15.0.0.152 on Windows and OS X and before 11.2.202.406 on Linux, Adobe AIR before 15.0.0.249 on Windows and OS X and before 15.0.0.252 on Android, Adobe AIR SDK before 15.0.0.249, and Adobe AIR SDK & Compiler before 15.0.0.249 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2014-0556.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0559", url: "https://www.suse.com/security/cve/CVE-2014-0559", }, { category: "external", summary: "SUSE Bug 895856 for CVE-2014-0559", url: "https://bugzilla.suse.com/895856", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2014-0559", }, { cve: "CVE-2014-0564", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0564", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.250 and 14.x and 15.x before 15.0.0.189 on Windows and OS X and before 11.2.202.411 on Linux, Adobe AIR before 15.0.0.293, Adobe AIR SDK before 15.0.0.302, and Adobe AIR SDK & Compiler before 15.0.0.302 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2014-0558.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0564", url: "https://www.suse.com/security/cve/CVE-2014-0564", }, { category: "external", summary: "SUSE Bug 901334 for CVE-2014-0564", url: "https://bugzilla.suse.com/901334", }, { category: "external", summary: "SUSE Bug 905032 for CVE-2014-0564", url: "https://bugzilla.suse.com/905032", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "moderate", }, ], title: "CVE-2014-0564", }, { cve: "CVE-2014-0569", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0569", }, ], notes: [ { category: "general", text: "Integer overflow in Adobe Flash Player before 13.0.0.250 and 14.x and 15.x before 15.0.0.189 on Windows and OS X and before 11.2.202.411 on Linux, Adobe AIR before 15.0.0.293, Adobe AIR SDK before 15.0.0.302, and Adobe AIR SDK & Compiler before 15.0.0.302 allows attackers to execute arbitrary code via unspecified vectors.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0569", url: "https://www.suse.com/security/cve/CVE-2014-0569", }, { category: "external", summary: "SUSE Bug 901334 for CVE-2014-0569", url: "https://bugzilla.suse.com/901334", }, { category: "external", summary: "SUSE Bug 905032 for CVE-2014-0569", url: "https://bugzilla.suse.com/905032", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "moderate", }, ], title: "CVE-2014-0569", }, { cve: "CVE-2014-0573", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0573", }, ], notes: [ { category: "general", text: "Use-after-free vulnerability in Adobe Flash Player before 13.0.0.252 and 14.x and 15.x before 15.0.0.223 on Windows and OS X and before 11.2.202.418 on Linux, Adobe AIR before 15.0.0.356, Adobe AIR SDK before 15.0.0.356, and Adobe AIR SDK & Compiler before 15.0.0.356 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2014-0588 and CVE-2014-8438.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0573", url: "https://www.suse.com/security/cve/CVE-2014-0573", }, { category: "external", summary: "SUSE Bug 905032 for CVE-2014-0573", url: "https://bugzilla.suse.com/905032", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2014-0573", }, { cve: "CVE-2014-0574", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0574", }, ], notes: [ { category: "general", text: "Double free vulnerability in Adobe Flash Player before 13.0.0.252 and 14.x and 15.x before 15.0.0.223 on Windows and OS X and before 11.2.202.418 on Linux, Adobe AIR before 15.0.0.356, Adobe AIR SDK before 15.0.0.356, and Adobe AIR SDK & Compiler before 15.0.0.356 allows attackers to execute arbitrary code via unspecified vectors.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0574", url: "https://www.suse.com/security/cve/CVE-2014-0574", }, { category: "external", summary: "SUSE Bug 905032 for CVE-2014-0574", url: "https://bugzilla.suse.com/905032", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2014-0574", }, { cve: "CVE-2014-0576", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0576", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.252 and 14.x and 15.x before 15.0.0.223 on Windows and OS X and before 11.2.202.418 on Linux, Adobe AIR before 15.0.0.356, Adobe AIR SDK before 15.0.0.356, and Adobe AIR SDK & Compiler before 15.0.0.356 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2014-0581, CVE-2014-8440, and CVE-2014-8441.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0576", url: "https://www.suse.com/security/cve/CVE-2014-0576", }, { category: "external", summary: "SUSE Bug 905032 for CVE-2014-0576", url: "https://bugzilla.suse.com/905032", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2014-0576", }, { cve: "CVE-2014-0577", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0577", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.252 and 14.x and 15.x before 15.0.0.223 on Windows and OS X and before 11.2.202.418 on Linux, Adobe AIR before 15.0.0.356, Adobe AIR SDK before 15.0.0.356, and Adobe AIR SDK & Compiler before 15.0.0.356 allow attackers to execute arbitrary code by leveraging an unspecified \"type confusion,\" a different vulnerability than CVE-2014-0584, CVE-2014-0585, CVE-2014-0586, and CVE-2014-0590.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0577", url: "https://www.suse.com/security/cve/CVE-2014-0577", }, { category: "external", summary: "SUSE Bug 905032 for CVE-2014-0577", url: "https://bugzilla.suse.com/905032", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2014-0577", }, { cve: "CVE-2014-0580", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0580", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.259 and 14.x through 16.x before 16.0.0.235 on Windows and OS X and before 11.2.202.425 on Linux allows remote attackers to bypass the Same Origin Policy via unspecified vectors.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0580", url: "https://www.suse.com/security/cve/CVE-2014-0580", }, { category: "external", summary: "SUSE Bug 909219 for CVE-2014-0580", url: "https://bugzilla.suse.com/909219", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2014-0580", }, { cve: "CVE-2014-0581", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0581", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.252 and 14.x and 15.x before 15.0.0.223 on Windows and OS X and before 11.2.202.418 on Linux, Adobe AIR before 15.0.0.356, Adobe AIR SDK before 15.0.0.356, and Adobe AIR SDK & Compiler before 15.0.0.356 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2014-0576, CVE-2014-8440, and CVE-2014-8441.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0581", url: "https://www.suse.com/security/cve/CVE-2014-0581", }, { category: "external", summary: "SUSE Bug 905032 for CVE-2014-0581", url: "https://bugzilla.suse.com/905032", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "important", }, ], title: "CVE-2014-0581", }, { cve: "CVE-2014-0582", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0582", }, ], notes: [ { category: "general", text: "Heap-based buffer overflow in Adobe Flash Player before 13.0.0.252 and 14.x and 15.x before 15.0.0.223 on Windows and OS X and before 11.2.202.418 on Linux, Adobe AIR before 15.0.0.356, Adobe AIR SDK before 15.0.0.356, and Adobe AIR SDK & Compiler before 15.0.0.356 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2014-0589.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0582", url: "https://www.suse.com/security/cve/CVE-2014-0582", }, { category: "external", summary: "SUSE Bug 905032 for CVE-2014-0582", url: "https://bugzilla.suse.com/905032", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "important", }, ], title: "CVE-2014-0582", }, { cve: "CVE-2014-0583", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0583", }, ], notes: [ { category: "general", text: "Heap-based buffer overflow in Adobe Flash Player before 13.0.0.252 and 14.x and 15.x before 15.0.0.223 on Windows and OS X and before 11.2.202.418 on Linux, Adobe AIR before 15.0.0.356, Adobe AIR SDK before 15.0.0.356, and Adobe AIR SDK & Compiler before 15.0.0.356 allows attackers to complete a transition from Low Integrity to Medium Integrity via unspecified vectors.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0583", url: "https://www.suse.com/security/cve/CVE-2014-0583", }, { category: "external", summary: "SUSE Bug 905032 for CVE-2014-0583", url: "https://bugzilla.suse.com/905032", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2014-0583", }, { cve: "CVE-2014-0584", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0584", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.252 and 14.x and 15.x before 15.0.0.223 on Windows and OS X and before 11.2.202.418 on Linux, Adobe AIR before 15.0.0.356, Adobe AIR SDK before 15.0.0.356, and Adobe AIR SDK & Compiler before 15.0.0.356 allow attackers to execute arbitrary code by leveraging an unspecified \"type confusion,\" a different vulnerability than CVE-2014-0577, CVE-2014-0585, CVE-2014-0586, and CVE-2014-0590.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0584", url: "https://www.suse.com/security/cve/CVE-2014-0584", }, { category: "external", summary: "SUSE Bug 905032 for CVE-2014-0584", url: "https://bugzilla.suse.com/905032", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "important", }, ], title: "CVE-2014-0584", }, { cve: "CVE-2014-0585", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0585", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.252 and 14.x and 15.x before 15.0.0.223 on Windows and OS X and before 11.2.202.418 on Linux, Adobe AIR before 15.0.0.356, Adobe AIR SDK before 15.0.0.356, and Adobe AIR SDK & Compiler before 15.0.0.356 allow attackers to execute arbitrary code by leveraging an unspecified \"type confusion,\" a different vulnerability than CVE-2014-0577, CVE-2014-0584, CVE-2014-0586, and CVE-2014-0590.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0585", url: "https://www.suse.com/security/cve/CVE-2014-0585", }, { category: "external", summary: "SUSE Bug 905032 for CVE-2014-0585", url: "https://bugzilla.suse.com/905032", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "important", }, ], title: "CVE-2014-0585", }, { cve: "CVE-2014-0586", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0586", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.252 and 14.x and 15.x before 15.0.0.223 on Windows and OS X and before 11.2.202.418 on Linux, Adobe AIR before 15.0.0.356, Adobe AIR SDK before 15.0.0.356, and Adobe AIR SDK & Compiler before 15.0.0.356 allow attackers to execute arbitrary code by leveraging an unspecified \"type confusion,\" a different vulnerability than CVE-2014-0577, CVE-2014-0584, CVE-2014-0585, and CVE-2014-0590.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0586", url: "https://www.suse.com/security/cve/CVE-2014-0586", }, { category: "external", summary: "SUSE Bug 905032 for CVE-2014-0586", url: "https://bugzilla.suse.com/905032", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "important", }, ], title: "CVE-2014-0586", }, { cve: "CVE-2014-0587", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0587", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.259 and 14.x through 16.x before 16.0.0.235 on Windows and OS X and before 11.2.202.425 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2014-9164.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0587", url: "https://www.suse.com/security/cve/CVE-2014-0587", }, { category: "external", summary: "SUSE Bug 909219 for CVE-2014-0587", url: "https://bugzilla.suse.com/909219", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2014-0587", }, { cve: "CVE-2014-0588", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0588", }, ], notes: [ { category: "general", text: "Use-after-free vulnerability in Adobe Flash Player before 13.0.0.252 and 14.x and 15.x before 15.0.0.223 on Windows and OS X and before 11.2.202.418 on Linux, Adobe AIR before 15.0.0.356, Adobe AIR SDK before 15.0.0.356, and Adobe AIR SDK & Compiler before 15.0.0.356 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2014-0573 and CVE-2014-8438.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0588", url: "https://www.suse.com/security/cve/CVE-2014-0588", }, { category: "external", summary: "SUSE Bug 905032 for CVE-2014-0588", url: "https://bugzilla.suse.com/905032", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "important", }, ], title: "CVE-2014-0588", }, { cve: "CVE-2014-0589", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0589", }, ], notes: [ { category: "general", text: "Heap-based buffer overflow in Adobe Flash Player before 13.0.0.252 and 14.x and 15.x before 15.0.0.223 on Windows and OS X and before 11.2.202.418 on Linux, Adobe AIR before 15.0.0.356, Adobe AIR SDK before 15.0.0.356, and Adobe AIR SDK & Compiler before 15.0.0.356 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2014-0582.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0589", url: "https://www.suse.com/security/cve/CVE-2014-0589", }, { category: "external", summary: "SUSE Bug 905032 for CVE-2014-0589", url: "https://bugzilla.suse.com/905032", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "important", }, ], title: "CVE-2014-0589", }, { cve: "CVE-2014-0590", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0590", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.252 and 14.x and 15.x before 15.0.0.223 on Windows and OS X and before 11.2.202.418 on Linux, Adobe AIR before 15.0.0.356, Adobe AIR SDK before 15.0.0.356, and Adobe AIR SDK & Compiler before 15.0.0.356 allow attackers to execute arbitrary code by leveraging an unspecified \"type confusion,\" a different vulnerability than CVE-2014-0577, CVE-2014-0584, CVE-2014-0585, and CVE-2014-0586.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0590", url: "https://www.suse.com/security/cve/CVE-2014-0590", }, { category: "external", summary: "SUSE Bug 905032 for CVE-2014-0590", url: "https://bugzilla.suse.com/905032", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "important", }, ], title: "CVE-2014-0590", }, { cve: "CVE-2014-4671", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-4671", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.231 and 14.x before 14.0.0.145 on Windows and OS X and before 11.2.202.394 on Linux, Adobe AIR before 14.0.0.137 on Android, Adobe AIR SDK before 14.0.0.137, and Adobe AIR SDK & Compiler before 14.0.0.137 do not properly restrict the SWF file format, which allows remote attackers to conduct cross-site request forgery (CSRF) attacks against JSONP endpoints, and obtain sensitive information, via a crafted OBJECT element with SWF content satisfying the character-set requirements of a callback API.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-4671", url: "https://www.suse.com/security/cve/CVE-2014-4671", }, { category: "external", summary: "SUSE Bug 886454 for CVE-2014-4671", url: "https://bugzilla.suse.com/886454", }, { category: "external", summary: "SUSE Bug 891688 for CVE-2014-4671", url: "https://bugzilla.suse.com/891688", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2014-4671", }, { cve: "CVE-2014-8437", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-8437", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.252 and 14.x and 15.x before 15.0.0.223 on Windows and OS X and before 11.2.202.418 on Linux, Adobe AIR before 15.0.0.356, Adobe AIR SDK before 15.0.0.356, and Adobe AIR SDK & Compiler before 15.0.0.356 allow remote attackers to discover session tokens via unspecified vectors.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-8437", url: "https://www.suse.com/security/cve/CVE-2014-8437", }, { category: "external", summary: "SUSE Bug 905032 for CVE-2014-8437", url: "https://bugzilla.suse.com/905032", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "important", }, ], title: "CVE-2014-8437", }, { cve: "CVE-2014-8438", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-8438", }, ], notes: [ { category: "general", text: "Use-after-free vulnerability in Adobe Flash Player before 13.0.0.252 and 14.x and 15.x before 15.0.0.223 on Windows and OS X and before 11.2.202.418 on Linux, Adobe AIR before 15.0.0.356, Adobe AIR SDK before 15.0.0.356, and Adobe AIR SDK & Compiler before 15.0.0.356 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2014-0573 and CVE-2014-0588.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-8438", url: "https://www.suse.com/security/cve/CVE-2014-8438", }, { category: "external", summary: "SUSE Bug 905032 for CVE-2014-8438", url: "https://bugzilla.suse.com/905032", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "important", }, ], title: "CVE-2014-8438", }, { cve: "CVE-2014-8439", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-8439", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.258 and 14.x and 15.x before 15.0.0.239 on Windows and OS X and before 11.2.202.424 on Linux, Adobe AIR before 15.0.0.293, Adobe AIR SDK before 15.0.0.302, and Adobe AIR SDK & Compiler before 15.0.0.302 allow attackers to execute arbitrary code or cause a denial of service (invalid pointer dereference) via unspecified vectors.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-8439", url: "https://www.suse.com/security/cve/CVE-2014-8439", }, { category: "external", summary: "SUSE Bug 907257 for CVE-2014-8439", url: "https://bugzilla.suse.com/907257", }, { category: "external", summary: "SUSE Bug 909219 for CVE-2014-8439", url: "https://bugzilla.suse.com/909219", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2014-8439", }, { cve: "CVE-2014-8440", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-8440", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.252 and 14.x and 15.x before 15.0.0.223 on Windows and OS X and before 11.2.202.418 on Linux, Adobe AIR before 15.0.0.356, Adobe AIR SDK before 15.0.0.356, and Adobe AIR SDK & Compiler before 15.0.0.356 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2014-0576, CVE-2014-0581, and CVE-2014-8441.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-8440", url: "https://www.suse.com/security/cve/CVE-2014-8440", }, { category: "external", summary: "SUSE Bug 905032 for CVE-2014-8440", url: "https://bugzilla.suse.com/905032", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "important", }, ], title: "CVE-2014-8440", }, { cve: "CVE-2014-8441", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-8441", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.252 and 14.x and 15.x before 15.0.0.223 on Windows and OS X and before 11.2.202.418 on Linux, Adobe AIR before 15.0.0.356, Adobe AIR SDK before 15.0.0.356, and Adobe AIR SDK & Compiler before 15.0.0.356 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2014-0576, CVE-2014-0581, and CVE-2014-8440.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-8441", url: "https://www.suse.com/security/cve/CVE-2014-8441", }, { category: "external", summary: "SUSE Bug 905032 for CVE-2014-8441", url: "https://bugzilla.suse.com/905032", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "important", }, ], title: "CVE-2014-8441", }, { cve: "CVE-2014-8442", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-8442", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.252 and 14.x and 15.x before 15.0.0.223 on Windows and OS X and before 11.2.202.418 on Linux, Adobe AIR before 15.0.0.356, Adobe AIR SDK before 15.0.0.356, and Adobe AIR SDK & Compiler before 15.0.0.356 allow attackers to complete a transition from Low Integrity to Medium Integrity by leveraging incorrect permissions.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-8442", url: "https://www.suse.com/security/cve/CVE-2014-8442", }, { category: "external", summary: "SUSE Bug 905032 for CVE-2014-8442", url: "https://bugzilla.suse.com/905032", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2014-8442", }, { cve: "CVE-2014-8443", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-8443", }, ], notes: [ { category: "general", text: "Use-after-free vulnerability in Adobe Flash Player before 13.0.0.259 and 14.x through 16.x before 16.0.0.235 on Windows and OS X and before 11.2.202.425 on Linux allows attackers to execute arbitrary code via unspecified vectors.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-8443", url: "https://www.suse.com/security/cve/CVE-2014-8443", }, { category: "external", summary: "SUSE Bug 909219 for CVE-2014-8443", url: "https://bugzilla.suse.com/909219", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2014-8443", }, { cve: "CVE-2014-9162", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-9162", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.259 and 14.x through 16.x before 16.0.0.235 on Windows and OS X and before 11.2.202.425 on Linux allows attackers to obtain sensitive information via unspecified vectors.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-9162", url: "https://www.suse.com/security/cve/CVE-2014-9162", }, { category: "external", summary: "SUSE Bug 909219 for CVE-2014-9162", url: "https://bugzilla.suse.com/909219", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2014-9162", }, { cve: "CVE-2014-9163", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-9163", }, ], notes: [ { category: "general", text: "Stack-based buffer overflow in Adobe Flash Player before 13.0.0.259 and 14.x and 15.x before 15.0.0.246 on Windows and OS X and before 11.2.202.425 on Linux allows attackers to execute arbitrary code via unspecified vectors, as exploited in the wild in December 2014.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-9163", url: "https://www.suse.com/security/cve/CVE-2014-9163", }, { category: "external", summary: "SUSE Bug 909219 for CVE-2014-9163", url: "https://bugzilla.suse.com/909219", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2014-9163", }, { cve: "CVE-2014-9164", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-9164", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.259 and 14.x through 16.x before 16.0.0.235 on Windows and OS X and before 11.2.202.425 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2014-0587.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-9164", url: "https://www.suse.com/security/cve/CVE-2014-9164", }, { category: "external", summary: "SUSE Bug 909219 for CVE-2014-9164", url: "https://bugzilla.suse.com/909219", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2014-9164", }, { cve: "CVE-2015-0301", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-0301", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.260 and 14.x through 16.x before 16.0.0.257 on Windows and OS X and before 11.2.202.429 on Linux, Adobe AIR before 16.0.0.245 on Windows and OS X and before 16.0.0.272 on Android, Adobe AIR SDK before 16.0.0.272, and Adobe AIR SDK & Compiler before 16.0.0.272 do not properly validate files, which has unspecified impact and attack vectors.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-0301", url: "https://www.suse.com/security/cve/CVE-2015-0301", }, { category: "external", summary: "SUSE Bug 913057 for CVE-2015-0301", url: "https://bugzilla.suse.com/913057", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2015-0301", }, { cve: "CVE-2015-0302", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-0302", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.260 and 14.x through 16.x before 16.0.0.257 on Windows and OS X and before 11.2.202.429 on Linux, Adobe AIR before 16.0.0.245 on Windows and OS X and before 16.0.0.272 on Android, Adobe AIR SDK before 16.0.0.272, and Adobe AIR SDK & Compiler before 16.0.0.272 allow attackers to obtain sensitive keystroke information via unspecified vectors.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-0302", url: "https://www.suse.com/security/cve/CVE-2015-0302", }, { category: "external", summary: "SUSE Bug 913057 for CVE-2015-0302", url: "https://bugzilla.suse.com/913057", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2015-0302", }, { cve: "CVE-2015-0303", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-0303", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.260 and 14.x through 16.x before 16.0.0.257 on Windows and OS X and before 11.2.202.429 on Linux, Adobe AIR before 16.0.0.245 on Windows and OS X and before 16.0.0.272 on Android, Adobe AIR SDK before 16.0.0.272, and Adobe AIR SDK & Compiler before 16.0.0.272 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-0306.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-0303", url: "https://www.suse.com/security/cve/CVE-2015-0303", }, { category: "external", summary: "SUSE Bug 913057 for CVE-2015-0303", url: "https://bugzilla.suse.com/913057", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2015-0303", }, { cve: "CVE-2015-0304", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-0304", }, ], notes: [ { category: "general", text: "Heap-based buffer overflow in Adobe Flash Player before 13.0.0.260 and 14.x through 16.x before 16.0.0.257 on Windows and OS X and before 11.2.202.429 on Linux, Adobe AIR before 16.0.0.245 on Windows and OS X and before 16.0.0.272 on Android, Adobe AIR SDK before 16.0.0.272, and Adobe AIR SDK & Compiler before 16.0.0.272 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-0309.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-0304", url: "https://www.suse.com/security/cve/CVE-2015-0304", }, { category: "external", summary: "SUSE Bug 913057 for CVE-2015-0304", url: "https://bugzilla.suse.com/913057", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2015-0304", }, { cve: "CVE-2015-0305", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-0305", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.260 and 14.x through 16.x before 16.0.0.257 on Windows and OS X and before 11.2.202.429 on Linux, Adobe AIR before 16.0.0.245 on Windows and OS X and before 16.0.0.272 on Android, Adobe AIR SDK before 16.0.0.272, and Adobe AIR SDK & Compiler before 16.0.0.272 allow attackers to execute arbitrary code by leveraging an unspecified \"type confusion.\"", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-0305", url: "https://www.suse.com/security/cve/CVE-2015-0305", }, { category: "external", summary: "SUSE Bug 913057 for CVE-2015-0305", url: "https://bugzilla.suse.com/913057", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2015-0305", }, { cve: "CVE-2015-0306", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-0306", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.260 and 14.x through 16.x before 16.0.0.257 on Windows and OS X and before 11.2.202.429 on Linux, Adobe AIR before 16.0.0.245 on Windows and OS X and before 16.0.0.272 on Android, Adobe AIR SDK before 16.0.0.272, and Adobe AIR SDK & Compiler before 16.0.0.272 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-0303.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-0306", url: "https://www.suse.com/security/cve/CVE-2015-0306", }, { category: "external", summary: "SUSE Bug 913057 for CVE-2015-0306", url: "https://bugzilla.suse.com/913057", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2015-0306", }, { cve: "CVE-2015-0307", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-0307", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.260 and 14.x through 16.x before 16.0.0.257 on Windows and OS X and before 11.2.202.429 on Linux, Adobe AIR before 16.0.0.245 on Windows and OS X and before 16.0.0.272 on Android, Adobe AIR SDK before 16.0.0.272, and Adobe AIR SDK & Compiler before 16.0.0.272 allow remote attackers to obtain sensitive information from process memory or cause a denial of service (out-of-bounds read) via unspecified vectors.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-0307", url: "https://www.suse.com/security/cve/CVE-2015-0307", }, { category: "external", summary: "SUSE Bug 913057 for CVE-2015-0307", url: "https://bugzilla.suse.com/913057", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2015-0307", }, { cve: "CVE-2015-0308", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-0308", }, ], notes: [ { category: "general", text: "Use-after-free vulnerability in Adobe Flash Player before 13.0.0.260 and 14.x through 16.x before 16.0.0.257 on Windows and OS X and before 11.2.202.429 on Linux, Adobe AIR before 16.0.0.245 on Windows and OS X and before 16.0.0.272 on Android, Adobe AIR SDK before 16.0.0.272, and Adobe AIR SDK & Compiler before 16.0.0.272 allows attackers to execute arbitrary code via unspecified vectors.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-0308", url: "https://www.suse.com/security/cve/CVE-2015-0308", }, { category: "external", summary: "SUSE Bug 913057 for CVE-2015-0308", url: "https://bugzilla.suse.com/913057", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2015-0308", }, { cve: "CVE-2015-0309", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-0309", }, ], notes: [ { category: "general", text: "Heap-based buffer overflow in Adobe Flash Player before 13.0.0.260 and 14.x through 16.x before 16.0.0.257 on Windows and OS X and before 11.2.202.429 on Linux, Adobe AIR before 16.0.0.245 on Windows and OS X and before 16.0.0.272 on Android, Adobe AIR SDK before 16.0.0.272, and Adobe AIR SDK & Compiler before 16.0.0.272 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-0304.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-0309", url: "https://www.suse.com/security/cve/CVE-2015-0309", }, { category: "external", summary: "SUSE Bug 913057 for CVE-2015-0309", url: "https://bugzilla.suse.com/913057", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2015-0309", }, { cve: "CVE-2015-0310", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-0310", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.262 and 14.x through 16.x before 16.0.0.287 on Windows and OS X and before 11.2.202.438 on Linux does not properly restrict discovery of memory addresses, which allows attackers to bypass the ASLR protection mechanism on Windows, and have an unspecified impact on other platforms, via unknown vectors, as exploited in the wild in January 2015.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-0310", url: "https://www.suse.com/security/cve/CVE-2015-0310", }, { category: "external", summary: "SUSE Bug 914333 for CVE-2015-0310", url: "https://bugzilla.suse.com/914333", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2015-0310", }, { cve: "CVE-2015-0311", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-0311", }, ], notes: [ { category: "general", text: "Unspecified vulnerability in Adobe Flash Player through 13.0.0.262 and 14.x, 15.x, and 16.x through 16.0.0.287 on Windows and OS X and through 11.2.202.438 on Linux allows remote attackers to execute arbitrary code via unknown vectors, as exploited in the wild in January 2015.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-0311", url: "https://www.suse.com/security/cve/CVE-2015-0311", }, { category: "external", summary: "SUSE Bug 914463 for CVE-2015-0311", url: "https://bugzilla.suse.com/914463", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 9.8, baseSeverity: "CRITICAL", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2015-0311", }, { cve: "CVE-2015-0313", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-0313", }, ], notes: [ { category: "general", text: "Use-after-free vulnerability in Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows and OS X and before 11.2.202.442 on Linux allows remote attackers to execute arbitrary code via unspecified vectors, as exploited in the wild in February 2015, a different vulnerability than CVE-2015-0315, CVE-2015-0320, and CVE-2015-0322.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-0313", url: "https://www.suse.com/security/cve/CVE-2015-0313", }, { category: "external", summary: "SUSE Bug 915918 for CVE-2015-0313", url: "https://bugzilla.suse.com/915918", }, { category: "external", summary: "SUSE Bug 916374 for CVE-2015-0313", url: "https://bugzilla.suse.com/916374", }, { category: "external", summary: "SUSE Bug 922033 for CVE-2015-0313", url: "https://bugzilla.suse.com/922033", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 9.8, baseSeverity: "CRITICAL", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2015-0313", }, { cve: "CVE-2015-0314", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-0314", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows and OS X and before 11.2.202.442 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-0316, CVE-2015-0318, CVE-2015-0321, CVE-2015-0329, and CVE-2015-0330.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-0314", url: "https://www.suse.com/security/cve/CVE-2015-0314", }, { category: "external", summary: "SUSE Bug 915918 for CVE-2015-0314", url: "https://bugzilla.suse.com/915918", }, { category: "external", summary: "SUSE Bug 922033 for CVE-2015-0314", url: "https://bugzilla.suse.com/922033", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2015-0314", }, { cve: "CVE-2015-0315", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-0315", }, ], notes: [ { category: "general", text: "Use-after-free vulnerability in Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows and OS X and before 11.2.202.442 on Linux allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-0313, CVE-2015-0320, and CVE-2015-0322.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-0315", url: "https://www.suse.com/security/cve/CVE-2015-0315", }, { category: "external", summary: "SUSE Bug 915918 for CVE-2015-0315", url: "https://bugzilla.suse.com/915918", }, { category: "external", summary: "SUSE Bug 922033 for CVE-2015-0315", url: "https://bugzilla.suse.com/922033", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2015-0315", }, { cve: "CVE-2015-0316", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-0316", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows and OS X and before 11.2.202.442 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-0314, CVE-2015-0318, CVE-2015-0321, CVE-2015-0329, and CVE-2015-0330.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-0316", url: "https://www.suse.com/security/cve/CVE-2015-0316", }, { category: "external", summary: "SUSE Bug 915918 for CVE-2015-0316", url: "https://bugzilla.suse.com/915918", }, { category: "external", summary: "SUSE Bug 922033 for CVE-2015-0316", url: "https://bugzilla.suse.com/922033", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2015-0316", }, { cve: "CVE-2015-0317", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-0317", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows and OS X and before 11.2.202.442 on Linux allows attackers to execute arbitrary code by leveraging an unspecified \"type confusion,\" a different vulnerability than CVE-2015-0319.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-0317", url: "https://www.suse.com/security/cve/CVE-2015-0317", }, { category: "external", summary: "SUSE Bug 915918 for CVE-2015-0317", url: "https://bugzilla.suse.com/915918", }, { category: "external", summary: "SUSE Bug 922033 for CVE-2015-0317", url: "https://bugzilla.suse.com/922033", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2015-0317", }, { cve: "CVE-2015-0318", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-0318", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows and OS X and before 11.2.202.442 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-0314, CVE-2015-0316, CVE-2015-0321, CVE-2015-0329, and CVE-2015-0330.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-0318", url: "https://www.suse.com/security/cve/CVE-2015-0318", }, { category: "external", summary: "SUSE Bug 915918 for CVE-2015-0318", url: "https://bugzilla.suse.com/915918", }, { category: "external", summary: "SUSE Bug 922033 for CVE-2015-0318", url: "https://bugzilla.suse.com/922033", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2015-0318", }, { cve: "CVE-2015-0319", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-0319", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows and OS X and before 11.2.202.442 on Linux allows attackers to execute arbitrary code by leveraging an unspecified \"type confusion,\" a different vulnerability than CVE-2015-0317.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-0319", url: "https://www.suse.com/security/cve/CVE-2015-0319", }, { category: "external", summary: "SUSE Bug 915918 for CVE-2015-0319", url: "https://bugzilla.suse.com/915918", }, { category: "external", summary: "SUSE Bug 922033 for CVE-2015-0319", url: "https://bugzilla.suse.com/922033", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2015-0319", }, { cve: "CVE-2015-0320", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-0320", }, ], notes: [ { category: "general", text: "Use-after-free vulnerability in Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows and OS X and before 11.2.202.442 on Linux allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-0313, CVE-2015-0315, and CVE-2015-0322.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-0320", url: "https://www.suse.com/security/cve/CVE-2015-0320", }, { category: "external", summary: "SUSE Bug 915918 for CVE-2015-0320", url: "https://bugzilla.suse.com/915918", }, { category: "external", summary: "SUSE Bug 922033 for CVE-2015-0320", url: "https://bugzilla.suse.com/922033", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2015-0320", }, { cve: "CVE-2015-0321", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-0321", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows and OS X and before 11.2.202.442 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-0314, CVE-2015-0316, CVE-2015-0318, CVE-2015-0329, and CVE-2015-0330.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-0321", url: "https://www.suse.com/security/cve/CVE-2015-0321", }, { category: "external", summary: "SUSE Bug 915918 for CVE-2015-0321", url: "https://bugzilla.suse.com/915918", }, { category: "external", summary: "SUSE Bug 922033 for CVE-2015-0321", url: "https://bugzilla.suse.com/922033", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2015-0321", }, { cve: "CVE-2015-0322", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-0322", }, ], notes: [ { category: "general", text: "Use-after-free vulnerability in Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows and OS X and before 11.2.202.442 on Linux allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-0313, CVE-2015-0315, and CVE-2015-0320.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-0322", url: "https://www.suse.com/security/cve/CVE-2015-0322", }, { category: "external", summary: "SUSE Bug 915918 for CVE-2015-0322", url: "https://bugzilla.suse.com/915918", }, { category: "external", summary: "SUSE Bug 922033 for CVE-2015-0322", url: "https://bugzilla.suse.com/922033", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2015-0322", }, { cve: "CVE-2015-0323", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-0323", }, ], notes: [ { category: "general", text: "Heap-based buffer overflow in Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows and OS X and before 11.2.202.442 on Linux allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-0327.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-0323", url: "https://www.suse.com/security/cve/CVE-2015-0323", }, { category: "external", summary: "SUSE Bug 915918 for CVE-2015-0323", url: "https://bugzilla.suse.com/915918", }, { category: "external", summary: "SUSE Bug 922033 for CVE-2015-0323", url: "https://bugzilla.suse.com/922033", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2015-0323", }, { cve: "CVE-2015-0324", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-0324", }, ], notes: [ { category: "general", text: "Buffer overflow in Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows and OS X and before 11.2.202.442 on Linux allows attackers to execute arbitrary code via unspecified vectors.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-0324", url: "https://www.suse.com/security/cve/CVE-2015-0324", }, { category: "external", summary: "SUSE Bug 915918 for CVE-2015-0324", url: "https://bugzilla.suse.com/915918", }, { category: "external", summary: "SUSE Bug 922033 for CVE-2015-0324", url: "https://bugzilla.suse.com/922033", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2015-0324", }, { cve: "CVE-2015-0325", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-0325", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows and OS X and before 11.2.202.442 on Linux allows attackers to cause a denial of service (NULL pointer dereference) or possibly have unspecified other impact via unknown vectors, a different vulnerability than CVE-2015-0326 and CVE-2015-0328.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-0325", url: "https://www.suse.com/security/cve/CVE-2015-0325", }, { category: "external", summary: "SUSE Bug 915918 for CVE-2015-0325", url: "https://bugzilla.suse.com/915918", }, { category: "external", summary: "SUSE Bug 922033 for CVE-2015-0325", url: "https://bugzilla.suse.com/922033", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2015-0325", }, { cve: "CVE-2015-0326", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-0326", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows and OS X and before 11.2.202.442 on Linux allows attackers to cause a denial of service (NULL pointer dereference) or possibly have unspecified other impact via unknown vectors, a different vulnerability than CVE-2015-0325 and CVE-2015-0328.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-0326", url: "https://www.suse.com/security/cve/CVE-2015-0326", }, { category: "external", summary: "SUSE Bug 915918 for CVE-2015-0326", url: "https://bugzilla.suse.com/915918", }, { category: "external", summary: "SUSE Bug 922033 for CVE-2015-0326", url: "https://bugzilla.suse.com/922033", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2015-0326", }, { cve: "CVE-2015-0327", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-0327", }, ], notes: [ { category: "general", text: "Heap-based buffer overflow in Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows and OS X and before 11.2.202.442 on Linux allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-0323.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-0327", url: "https://www.suse.com/security/cve/CVE-2015-0327", }, { category: "external", summary: "SUSE Bug 915918 for CVE-2015-0327", url: "https://bugzilla.suse.com/915918", }, { category: "external", summary: "SUSE Bug 922033 for CVE-2015-0327", url: "https://bugzilla.suse.com/922033", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2015-0327", }, { cve: "CVE-2015-0328", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-0328", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows and OS X and before 11.2.202.442 on Linux allows attackers to cause a denial of service (NULL pointer dereference) or possibly have unspecified other impact via unknown vectors, a different vulnerability than CVE-2015-0325 and CVE-2015-0326.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-0328", url: "https://www.suse.com/security/cve/CVE-2015-0328", }, { category: "external", summary: "SUSE Bug 915918 for CVE-2015-0328", url: "https://bugzilla.suse.com/915918", }, { category: "external", summary: "SUSE Bug 922033 for CVE-2015-0328", url: "https://bugzilla.suse.com/922033", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2015-0328", }, { cve: "CVE-2015-0329", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-0329", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows and OS X and before 11.2.202.442 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-0314, CVE-2015-0316, CVE-2015-0318, CVE-2015-0321, and CVE-2015-0330.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-0329", url: "https://www.suse.com/security/cve/CVE-2015-0329", }, { category: "external", summary: "SUSE Bug 915918 for CVE-2015-0329", url: "https://bugzilla.suse.com/915918", }, { category: "external", summary: "SUSE Bug 922033 for CVE-2015-0329", url: "https://bugzilla.suse.com/922033", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2015-0329", }, { cve: "CVE-2015-0330", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-0330", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows and OS X and before 11.2.202.442 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-0314, CVE-2015-0316, CVE-2015-0318, CVE-2015-0321, and CVE-2015-0329.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-0330", url: "https://www.suse.com/security/cve/CVE-2015-0330", }, { category: "external", summary: "SUSE Bug 915918 for CVE-2015-0330", url: "https://bugzilla.suse.com/915918", }, { category: "external", summary: "SUSE Bug 922033 for CVE-2015-0330", url: "https://bugzilla.suse.com/922033", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2015-0330", }, { cve: "CVE-2015-0332", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-0332", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.277 and 14.x through 17.x before 17.0.0.134 on Windows and OS X and before 11.2.202.451 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-0333, CVE-2015-0335, and CVE-2015-0339.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-0332", url: "https://www.suse.com/security/cve/CVE-2015-0332", }, { category: "external", summary: "SUSE Bug 922033 for CVE-2015-0332", url: "https://bugzilla.suse.com/922033", }, { category: "external", summary: "SUSE Bug 922296 for CVE-2015-0332", url: "https://bugzilla.suse.com/922296", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2015-0332", }, { cve: "CVE-2015-0333", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-0333", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.277 and 14.x through 17.x before 17.0.0.134 on Windows and OS X and before 11.2.202.451 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-0332, CVE-2015-0335, and CVE-2015-0339.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-0333", url: "https://www.suse.com/security/cve/CVE-2015-0333", }, { category: "external", summary: "SUSE Bug 922033 for CVE-2015-0333", url: "https://bugzilla.suse.com/922033", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2015-0333", }, { cve: "CVE-2015-0334", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-0334", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.277 and 14.x through 17.x before 17.0.0.134 on Windows and OS X and before 11.2.202.451 on Linux allows attackers to execute arbitrary code by leveraging an unspecified \"type confusion,\" a different vulnerability than CVE-2015-0336.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-0334", url: "https://www.suse.com/security/cve/CVE-2015-0334", }, { category: "external", summary: "SUSE Bug 922033 for CVE-2015-0334", url: "https://bugzilla.suse.com/922033", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2015-0334", }, { cve: "CVE-2015-0335", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-0335", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.277 and 14.x through 17.x before 17.0.0.134 on Windows and OS X and before 11.2.202.451 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-0332, CVE-2015-0333, and CVE-2015-0339.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-0335", url: "https://www.suse.com/security/cve/CVE-2015-0335", }, { category: "external", summary: "SUSE Bug 922033 for CVE-2015-0335", url: "https://bugzilla.suse.com/922033", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2015-0335", }, { cve: "CVE-2015-0336", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-0336", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.277 and 14.x through 17.x before 17.0.0.134 on Windows and OS X and before 11.2.202.451 on Linux allows attackers to execute arbitrary code by leveraging an unspecified \"type confusion,\" a different vulnerability than CVE-2015-0334.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-0336", url: "https://www.suse.com/security/cve/CVE-2015-0336", }, { category: "external", summary: "SUSE Bug 922033 for CVE-2015-0336", url: "https://bugzilla.suse.com/922033", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2015-0336", }, { cve: "CVE-2015-0337", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-0337", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.277 and 14.x through 17.x before 17.0.0.134 on Windows and OS X and before 11.2.202.451 on Linux allows remote attackers to bypass the Same Origin Policy via unspecified vectors.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-0337", url: "https://www.suse.com/security/cve/CVE-2015-0337", }, { category: "external", summary: "SUSE Bug 922033 for CVE-2015-0337", url: "https://bugzilla.suse.com/922033", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2015-0337", }, { cve: "CVE-2015-0338", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-0338", }, ], notes: [ { category: "general", text: "Integer overflow in Adobe Flash Player before 13.0.0.277 and 14.x through 17.x before 17.0.0.134 on Windows and OS X and before 11.2.202.451 on Linux allows attackers to execute arbitrary code via unspecified vectors.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-0338", url: "https://www.suse.com/security/cve/CVE-2015-0338", }, { category: "external", summary: "SUSE Bug 922033 for CVE-2015-0338", url: "https://bugzilla.suse.com/922033", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2015-0338", }, { cve: "CVE-2015-0339", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-0339", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.277 and 14.x through 17.x before 17.0.0.134 on Windows and OS X and before 11.2.202.451 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-0332, CVE-2015-0333, and CVE-2015-0335.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-0339", url: "https://www.suse.com/security/cve/CVE-2015-0339", }, { category: "external", summary: "SUSE Bug 922033 for CVE-2015-0339", url: "https://bugzilla.suse.com/922033", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2015-0339", }, { cve: "CVE-2015-0340", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-0340", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.277 and 14.x through 17.x before 17.0.0.134 on Windows and OS X and before 11.2.202.451 on Linux allows remote attackers to bypass intended file-upload restrictions via unspecified vectors.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-0340", url: "https://www.suse.com/security/cve/CVE-2015-0340", }, { category: "external", summary: "SUSE Bug 922033 for CVE-2015-0340", url: "https://bugzilla.suse.com/922033", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2015-0340", }, { cve: "CVE-2015-0341", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-0341", }, ], notes: [ { category: "general", text: "Use-after-free vulnerability in Adobe Flash Player before 13.0.0.277 and 14.x through 17.x before 17.0.0.134 on Windows and OS X and before 11.2.202.451 on Linux allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-0342.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-0341", url: "https://www.suse.com/security/cve/CVE-2015-0341", }, { category: "external", summary: "SUSE Bug 922033 for CVE-2015-0341", url: "https://bugzilla.suse.com/922033", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2015-0341", }, { cve: "CVE-2015-0342", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-0342", }, ], notes: [ { category: "general", text: "Use-after-free vulnerability in Adobe Flash Player before 13.0.0.277 and 14.x through 17.x before 17.0.0.134 on Windows and OS X and before 11.2.202.451 on Linux allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-0341.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-0342", url: "https://www.suse.com/security/cve/CVE-2015-0342", }, { category: "external", summary: "SUSE Bug 922033 for CVE-2015-0342", url: "https://bugzilla.suse.com/922033", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2015-0342", }, { cve: "CVE-2015-0346", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-0346", }, ], notes: [ { category: "general", text: "Double free vulnerability in Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-0359.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-0346", url: "https://www.suse.com/security/cve/CVE-2015-0346", }, { category: "external", summary: "SUSE Bug 927089 for CVE-2015-0346", url: "https://bugzilla.suse.com/927089", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "moderate", }, ], title: "CVE-2015-0346", }, { cve: "CVE-2015-0347", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-0347", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-0350, CVE-2015-0352, CVE-2015-0353, CVE-2015-0354, CVE-2015-0355, CVE-2015-0360, CVE-2015-3038, CVE-2015-3041, CVE-2015-3042, and CVE-2015-3043.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-0347", url: "https://www.suse.com/security/cve/CVE-2015-0347", }, { category: "external", summary: "SUSE Bug 927089 for CVE-2015-0347", url: "https://bugzilla.suse.com/927089", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "moderate", }, ], title: "CVE-2015-0347", }, { cve: "CVE-2015-0348", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-0348", }, ], notes: [ { category: "general", text: "Buffer overflow in Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code via unspecified vectors.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-0348", url: "https://www.suse.com/security/cve/CVE-2015-0348", }, { category: "external", summary: "SUSE Bug 927089 for CVE-2015-0348", url: "https://bugzilla.suse.com/927089", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "moderate", }, ], title: "CVE-2015-0348", }, { cve: "CVE-2015-0349", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-0349", }, ], notes: [ { category: "general", text: "Use-after-free vulnerability in Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-0351, CVE-2015-0358, and CVE-2015-3039.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-0349", url: "https://www.suse.com/security/cve/CVE-2015-0349", }, { category: "external", summary: "SUSE Bug 927089 for CVE-2015-0349", url: "https://bugzilla.suse.com/927089", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "moderate", }, ], title: "CVE-2015-0349", }, { cve: "CVE-2015-0350", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-0350", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-0347, CVE-2015-0352, CVE-2015-0353, CVE-2015-0354, CVE-2015-0355, CVE-2015-0360, CVE-2015-3038, CVE-2015-3041, CVE-2015-3042, and CVE-2015-3043.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-0350", url: "https://www.suse.com/security/cve/CVE-2015-0350", }, { category: "external", summary: "SUSE Bug 927089 for CVE-2015-0350", url: "https://bugzilla.suse.com/927089", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "moderate", }, ], title: "CVE-2015-0350", }, { cve: "CVE-2015-0351", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-0351", }, ], notes: [ { category: "general", text: "Use-after-free vulnerability in Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-0349, CVE-2015-0358, and CVE-2015-3039.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-0351", url: "https://www.suse.com/security/cve/CVE-2015-0351", }, { category: "external", summary: "SUSE Bug 927089 for CVE-2015-0351", url: "https://bugzilla.suse.com/927089", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "moderate", }, ], title: "CVE-2015-0351", }, { cve: "CVE-2015-0352", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-0352", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-0347, CVE-2015-0350, CVE-2015-0353, CVE-2015-0354, CVE-2015-0355, CVE-2015-0360, CVE-2015-3038, CVE-2015-3041, CVE-2015-3042, and CVE-2015-3043.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-0352", url: "https://www.suse.com/security/cve/CVE-2015-0352", }, { category: "external", summary: "SUSE Bug 927089 for CVE-2015-0352", url: "https://bugzilla.suse.com/927089", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "moderate", }, ], title: "CVE-2015-0352", }, { cve: "CVE-2015-0353", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-0353", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-0347, CVE-2015-0350, CVE-2015-0352, CVE-2015-0354, CVE-2015-0355, CVE-2015-0360, CVE-2015-3038, CVE-2015-3041, CVE-2015-3042, and CVE-2015-3043.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-0353", url: "https://www.suse.com/security/cve/CVE-2015-0353", }, { category: "external", summary: "SUSE Bug 927089 for CVE-2015-0353", url: "https://bugzilla.suse.com/927089", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "moderate", }, ], title: "CVE-2015-0353", }, { cve: "CVE-2015-0354", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-0354", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-0347, CVE-2015-0350, CVE-2015-0352, CVE-2015-0353, CVE-2015-0355, CVE-2015-0360, CVE-2015-3038, CVE-2015-3041, CVE-2015-3042, and CVE-2015-3043.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-0354", url: "https://www.suse.com/security/cve/CVE-2015-0354", }, { category: "external", summary: "SUSE Bug 927089 for CVE-2015-0354", url: "https://bugzilla.suse.com/927089", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "moderate", }, ], title: "CVE-2015-0354", }, { cve: "CVE-2015-0355", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-0355", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-0347, CVE-2015-0350, CVE-2015-0352, CVE-2015-0353, CVE-2015-0354, CVE-2015-0360, CVE-2015-3038, CVE-2015-3041, CVE-2015-3042, and CVE-2015-3043.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-0355", url: "https://www.suse.com/security/cve/CVE-2015-0355", }, { category: "external", summary: "SUSE Bug 927089 for CVE-2015-0355", url: "https://bugzilla.suse.com/927089", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "moderate", }, ], title: "CVE-2015-0355", }, { cve: "CVE-2015-0356", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-0356", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code by leveraging an unspecified \"type confusion.\"", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-0356", url: "https://www.suse.com/security/cve/CVE-2015-0356", }, { category: "external", summary: "SUSE Bug 927089 for CVE-2015-0356", url: "https://bugzilla.suse.com/927089", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "moderate", }, ], title: "CVE-2015-0356", }, { cve: "CVE-2015-0357", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-0357", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux does not properly restrict discovery of memory addresses, which allows attackers to bypass the ASLR protection mechanism via unspecified vectors, a different vulnerability than CVE-2015-3040.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-0357", url: "https://www.suse.com/security/cve/CVE-2015-0357", }, { category: "external", summary: "SUSE Bug 927089 for CVE-2015-0357", url: "https://bugzilla.suse.com/927089", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "moderate", }, ], title: "CVE-2015-0357", }, { cve: "CVE-2015-0358", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-0358", }, ], notes: [ { category: "general", text: "Use-after-free vulnerability in Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-0349, CVE-2015-0351, and CVE-2015-3039.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-0358", url: "https://www.suse.com/security/cve/CVE-2015-0358", }, { category: "external", summary: "SUSE Bug 927089 for CVE-2015-0358", url: "https://bugzilla.suse.com/927089", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "moderate", }, ], title: "CVE-2015-0358", }, { cve: "CVE-2015-0359", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-0359", }, ], notes: [ { category: "general", text: "Double free vulnerability in Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-0346.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-0359", url: "https://www.suse.com/security/cve/CVE-2015-0359", }, { category: "external", summary: "SUSE Bug 927089 for CVE-2015-0359", url: "https://bugzilla.suse.com/927089", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "moderate", }, ], title: "CVE-2015-0359", }, { cve: "CVE-2015-0360", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-0360", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-0347, CVE-2015-0350, CVE-2015-0352, CVE-2015-0353, CVE-2015-0354, CVE-2015-0355, CVE-2015-3038, CVE-2015-3041, CVE-2015-3042, and CVE-2015-3043.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-0360", url: "https://www.suse.com/security/cve/CVE-2015-0360", }, { category: "external", summary: "SUSE Bug 927089 for CVE-2015-0360", url: "https://bugzilla.suse.com/927089", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "moderate", }, ], title: "CVE-2015-0360", }, { cve: "CVE-2015-3038", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-3038", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-0347, CVE-2015-0350, CVE-2015-0352, CVE-2015-0353, CVE-2015-0354, CVE-2015-0355, CVE-2015-0360, CVE-2015-3041, CVE-2015-3042, and CVE-2015-3043.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-3038", url: "https://www.suse.com/security/cve/CVE-2015-3038", }, { category: "external", summary: "SUSE Bug 927089 for CVE-2015-3038", url: "https://bugzilla.suse.com/927089", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "moderate", }, ], title: "CVE-2015-3038", }, { cve: "CVE-2015-3039", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-3039", }, ], notes: [ { category: "general", text: "Use-after-free vulnerability in Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-0349, CVE-2015-0351, and CVE-2015-0358.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-3039", url: "https://www.suse.com/security/cve/CVE-2015-3039", }, { category: "external", summary: "SUSE Bug 927089 for CVE-2015-3039", url: "https://bugzilla.suse.com/927089", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "moderate", }, ], title: "CVE-2015-3039", }, { cve: "CVE-2015-3040", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-3040", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux does not properly restrict discovery of memory addresses, which allows attackers to bypass the ASLR protection mechanism via unspecified vectors, a different vulnerability than CVE-2015-0357.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-3040", url: "https://www.suse.com/security/cve/CVE-2015-3040", }, { category: "external", summary: "SUSE Bug 927089 for CVE-2015-3040", url: "https://bugzilla.suse.com/927089", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "moderate", }, ], title: "CVE-2015-3040", }, { cve: "CVE-2015-3041", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-3041", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-0347, CVE-2015-0350, CVE-2015-0352, CVE-2015-0353, CVE-2015-0354, CVE-2015-0355, CVE-2015-0360, CVE-2015-3038, CVE-2015-3042, and CVE-2015-3043.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-3041", url: "https://www.suse.com/security/cve/CVE-2015-3041", }, { category: "external", summary: "SUSE Bug 927089 for CVE-2015-3041", url: "https://bugzilla.suse.com/927089", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "moderate", }, ], title: "CVE-2015-3041", }, { cve: "CVE-2015-3042", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-3042", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-0347, CVE-2015-0350, CVE-2015-0352, CVE-2015-0353, CVE-2015-0354, CVE-2015-0355, CVE-2015-0360, CVE-2015-3038, CVE-2015-3041, and CVE-2015-3043.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-3042", url: "https://www.suse.com/security/cve/CVE-2015-3042", }, { category: "external", summary: "SUSE Bug 927089 for CVE-2015-3042", url: "https://bugzilla.suse.com/927089", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "moderate", }, ], title: "CVE-2015-3042", }, { cve: "CVE-2015-3043", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-3043", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, as exploited in the wild in April 2015, a different vulnerability than CVE-2015-0347, CVE-2015-0350, CVE-2015-0352, CVE-2015-0353, CVE-2015-0354, CVE-2015-0355, CVE-2015-0360, CVE-2015-3038, CVE-2015-3041, and CVE-2015-3042.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-3043", url: "https://www.suse.com/security/cve/CVE-2015-3043", }, { category: "external", summary: "SUSE Bug 927089 for CVE-2015-3043", url: "https://bugzilla.suse.com/927089", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 9.8, baseSeverity: "CRITICAL", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "moderate", }, ], title: "CVE-2015-3043", }, { cve: "CVE-2015-3044", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-3044", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to bypass intended access restrictions and obtain sensitive information via unspecified vectors.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-3044", url: "https://www.suse.com/security/cve/CVE-2015-3044", }, { category: "external", summary: "SUSE Bug 927089 for CVE-2015-3044", url: "https://bugzilla.suse.com/927089", }, { category: "external", summary: "SUSE Bug 930677 for CVE-2015-3044", url: "https://bugzilla.suse.com/930677", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "moderate", }, ], title: "CVE-2015-3044", }, { cve: "CVE-2015-3077", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-3077", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.289 and 14.x through 17.x before 17.0.0.188 on Windows and OS X and before 11.2.202.460 on Linux, Adobe AIR before 17.0.0.172, Adobe AIR SDK before 17.0.0.172, and Adobe AIR SDK & Compiler before 17.0.0.172 allow attackers to execute arbitrary code by leveraging an unspecified \"type confusion,\" a different vulnerability than CVE-2015-3084 and CVE-2015-3086.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-3077", url: "https://www.suse.com/security/cve/CVE-2015-3077", }, { category: "external", summary: "SUSE Bug 930677 for CVE-2015-3077", url: "https://bugzilla.suse.com/930677", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2015-3077", }, { cve: "CVE-2015-3078", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-3078", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.289 and 14.x through 17.x before 17.0.0.188 on Windows and OS X and before 11.2.202.460 on Linux, Adobe AIR before 17.0.0.172, Adobe AIR SDK before 17.0.0.172, and Adobe AIR SDK & Compiler before 17.0.0.172 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-3089, CVE-2015-3090, and CVE-2015-3093.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-3078", url: "https://www.suse.com/security/cve/CVE-2015-3078", }, { category: "external", summary: "SUSE Bug 930677 for CVE-2015-3078", url: "https://bugzilla.suse.com/930677", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2015-3078", }, { cve: "CVE-2015-3079", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-3079", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.289 and 14.x through 17.x before 17.0.0.188 on Windows and OS X and before 11.2.202.460 on Linux, Adobe AIR before 17.0.0.172, Adobe AIR SDK before 17.0.0.172, and Adobe AIR SDK & Compiler before 17.0.0.172 allow attackers to bypass intended access restrictions and obtain sensitive information via unspecified vectors.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-3079", url: "https://www.suse.com/security/cve/CVE-2015-3079", }, { category: "external", summary: "SUSE Bug 930677 for CVE-2015-3079", url: "https://bugzilla.suse.com/930677", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "moderate", }, ], title: "CVE-2015-3079", }, { cve: "CVE-2015-3080", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-3080", }, ], notes: [ { category: "general", text: "Use-after-free vulnerability in Adobe Flash Player before 13.0.0.289 and 14.x through 17.x before 17.0.0.188 on Windows and OS X and before 11.2.202.460 on Linux, Adobe AIR before 17.0.0.172, Adobe AIR SDK before 17.0.0.172, and Adobe AIR SDK & Compiler before 17.0.0.172 allows attackers to execute arbitrary code via unspecified vectors.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-3080", url: "https://www.suse.com/security/cve/CVE-2015-3080", }, { category: "external", summary: "SUSE Bug 930677 for CVE-2015-3080", url: "https://bugzilla.suse.com/930677", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2015-3080", }, { cve: "CVE-2015-3081", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-3081", }, ], notes: [ { category: "general", text: "Race condition in Adobe Flash Player before 13.0.0.289 and 14.x through 17.x before 17.0.0.188 on Windows and OS X and before 11.2.202.460 on Linux, Adobe AIR before 17.0.0.172, Adobe AIR SDK before 17.0.0.172, and Adobe AIR SDK & Compiler before 17.0.0.172 allows attackers to bypass the Internet Explorer Protected Mode protection mechanism via unspecified vectors.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-3081", url: "https://www.suse.com/security/cve/CVE-2015-3081", }, { category: "external", summary: "SUSE Bug 930677 for CVE-2015-3081", url: "https://bugzilla.suse.com/930677", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "moderate", }, ], title: "CVE-2015-3081", }, { cve: "CVE-2015-3082", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-3082", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.289 and 14.x through 17.x before 17.0.0.188 on Windows and OS X and before 11.2.202.460 on Linux, Adobe AIR before 17.0.0.172, Adobe AIR SDK before 17.0.0.172, and Adobe AIR SDK & Compiler before 17.0.0.172 allow remote attackers to bypass intended restrictions on filesystem write operations via unspecified vectors, a different vulnerability than CVE-2015-3083 and CVE-2015-3085.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-3082", url: "https://www.suse.com/security/cve/CVE-2015-3082", }, { category: "external", summary: "SUSE Bug 930677 for CVE-2015-3082", url: "https://bugzilla.suse.com/930677", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2015-3082", }, { cve: "CVE-2015-3083", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-3083", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.289 and 14.x through 17.x before 17.0.0.188 on Windows and OS X and before 11.2.202.460 on Linux, Adobe AIR before 17.0.0.172, Adobe AIR SDK before 17.0.0.172, and Adobe AIR SDK & Compiler before 17.0.0.172 allow remote attackers to bypass intended restrictions on filesystem write operations via unspecified vectors, a different vulnerability than CVE-2015-3082 and CVE-2015-3085.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-3083", url: "https://www.suse.com/security/cve/CVE-2015-3083", }, { category: "external", summary: "SUSE Bug 930677 for CVE-2015-3083", url: "https://bugzilla.suse.com/930677", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2015-3083", }, { cve: "CVE-2015-3084", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-3084", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.289 and 14.x through 17.x before 17.0.0.188 on Windows and OS X and before 11.2.202.460 on Linux, Adobe AIR before 17.0.0.172, Adobe AIR SDK before 17.0.0.172, and Adobe AIR SDK & Compiler before 17.0.0.172 allow attackers to execute arbitrary code by leveraging an unspecified \"type confusion,\" a different vulnerability than CVE-2015-3077 and CVE-2015-3086.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-3084", url: "https://www.suse.com/security/cve/CVE-2015-3084", }, { category: "external", summary: "SUSE Bug 930677 for CVE-2015-3084", url: "https://bugzilla.suse.com/930677", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2015-3084", }, { cve: "CVE-2015-3085", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-3085", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.289 and 14.x through 17.x before 17.0.0.188 on Windows and OS X and before 11.2.202.460 on Linux, Adobe AIR before 17.0.0.172, Adobe AIR SDK before 17.0.0.172, and Adobe AIR SDK & Compiler before 17.0.0.172 allow remote attackers to bypass intended restrictions on filesystem write operations via unspecified vectors, a different vulnerability than CVE-2015-3082 and CVE-2015-3083.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-3085", url: "https://www.suse.com/security/cve/CVE-2015-3085", }, { category: "external", summary: "SUSE Bug 930677 for CVE-2015-3085", url: "https://bugzilla.suse.com/930677", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2015-3085", }, { cve: "CVE-2015-3086", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-3086", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.289 and 14.x through 17.x before 17.0.0.188 on Windows and OS X and before 11.2.202.460 on Linux, Adobe AIR before 17.0.0.172, Adobe AIR SDK before 17.0.0.172, and Adobe AIR SDK & Compiler before 17.0.0.172 allow attackers to execute arbitrary code by leveraging an unspecified \"type confusion,\" a different vulnerability than CVE-2015-3077 and CVE-2015-3084.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-3086", url: "https://www.suse.com/security/cve/CVE-2015-3086", }, { category: "external", summary: "SUSE Bug 930677 for CVE-2015-3086", url: "https://bugzilla.suse.com/930677", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2015-3086", }, { cve: "CVE-2015-3087", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-3087", }, ], notes: [ { category: "general", text: "Integer overflow in Adobe Flash Player before 13.0.0.289 and 14.x through 17.x before 17.0.0.188 on Windows and OS X and before 11.2.202.460 on Linux, Adobe AIR before 17.0.0.172, Adobe AIR SDK before 17.0.0.172, and Adobe AIR SDK & Compiler before 17.0.0.172 allows attackers to execute arbitrary code via unspecified vectors.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-3087", url: "https://www.suse.com/security/cve/CVE-2015-3087", }, { category: "external", summary: "SUSE Bug 930677 for CVE-2015-3087", url: "https://bugzilla.suse.com/930677", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2015-3087", }, { cve: "CVE-2015-3088", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-3088", }, ], notes: [ { category: "general", text: "Heap-based buffer overflow in Adobe Flash Player before 13.0.0.289 and 14.x through 17.x before 17.0.0.188 on Windows and OS X and before 11.2.202.460 on Linux, Adobe AIR before 17.0.0.172, Adobe AIR SDK before 17.0.0.172, and Adobe AIR SDK & Compiler before 17.0.0.172 allows attackers to execute arbitrary code via unspecified vectors.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-3088", url: "https://www.suse.com/security/cve/CVE-2015-3088", }, { category: "external", summary: "SUSE Bug 930677 for CVE-2015-3088", url: "https://bugzilla.suse.com/930677", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2015-3088", }, { cve: "CVE-2015-3089", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-3089", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.289 and 14.x through 17.x before 17.0.0.188 on Windows and OS X and before 11.2.202.460 on Linux, Adobe AIR before 17.0.0.172, Adobe AIR SDK before 17.0.0.172, and Adobe AIR SDK & Compiler before 17.0.0.172 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-3078, CVE-2015-3090, and CVE-2015-3093.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-3089", url: "https://www.suse.com/security/cve/CVE-2015-3089", }, { category: "external", summary: "SUSE Bug 930677 for CVE-2015-3089", url: "https://bugzilla.suse.com/930677", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2015-3089", }, { cve: "CVE-2015-3090", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-3090", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.289 and 14.x through 17.x before 17.0.0.188 on Windows and OS X and before 11.2.202.460 on Linux, Adobe AIR before 17.0.0.172, Adobe AIR SDK before 17.0.0.172, and Adobe AIR SDK & Compiler before 17.0.0.172 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-3078, CVE-2015-3089, and CVE-2015-3093.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-3090", url: "https://www.suse.com/security/cve/CVE-2015-3090", }, { category: "external", summary: "SUSE Bug 930677 for CVE-2015-3090", url: "https://bugzilla.suse.com/930677", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2015-3090", }, { cve: "CVE-2015-3091", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-3091", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.289 and 14.x through 17.x before 17.0.0.188 on Windows and OS X and before 11.2.202.460 on Linux, Adobe AIR before 17.0.0.172, Adobe AIR SDK before 17.0.0.172, and Adobe AIR SDK & Compiler before 17.0.0.172 do not properly restrict discovery of memory addresses, which allows attackers to bypass the ASLR protection mechanism via unspecified vectors, a different vulnerability than CVE-2015-3092.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-3091", url: "https://www.suse.com/security/cve/CVE-2015-3091", }, { category: "external", summary: "SUSE Bug 930677 for CVE-2015-3091", url: "https://bugzilla.suse.com/930677", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2015-3091", }, { cve: "CVE-2015-3092", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-3092", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.289 and 14.x through 17.x before 17.0.0.188 on Windows and OS X and before 11.2.202.460 on Linux, Adobe AIR before 17.0.0.172, Adobe AIR SDK before 17.0.0.172, and Adobe AIR SDK & Compiler before 17.0.0.172 do not properly restrict discovery of memory addresses, which allows attackers to bypass the ASLR protection mechanism via unspecified vectors, a different vulnerability than CVE-2015-3091.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-3092", url: "https://www.suse.com/security/cve/CVE-2015-3092", }, { category: "external", summary: "SUSE Bug 930677 for CVE-2015-3092", url: "https://bugzilla.suse.com/930677", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2015-3092", }, { cve: "CVE-2015-3093", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-3093", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.289 and 14.x through 17.x before 17.0.0.188 on Windows and OS X and before 11.2.202.460 on Linux, Adobe AIR before 17.0.0.172, Adobe AIR SDK before 17.0.0.172, and Adobe AIR SDK & Compiler before 17.0.0.172 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-3078, CVE-2015-3089, and CVE-2015-3090.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-3093", url: "https://www.suse.com/security/cve/CVE-2015-3093", }, { category: "external", summary: "SUSE Bug 930677 for CVE-2015-3093", url: "https://bugzilla.suse.com/930677", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2015-3093", }, { cve: "CVE-2015-3096", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-3096", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.292 and 14.x through 18.x before 18.0.0.160 on Windows and OS X and before 11.2.202.466 on Linux, Adobe AIR before 18.0.0.144 on Windows and before 18.0.0.143 on OS X and Android, Adobe AIR SDK before 18.0.0.144 on Windows and before 18.0.0.143 on OS X, and Adobe AIR SDK & Compiler before 18.0.0.144 on Windows and before 18.0.0.143 on OS X allow remote attackers to bypass a CVE-2014-5333 protection mechanism via unspecified vectors.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-3096", url: "https://www.suse.com/security/cve/CVE-2015-3096", }, { category: "external", summary: "SUSE Bug 934088 for CVE-2015-3096", url: "https://bugzilla.suse.com/934088", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "important", }, ], title: "CVE-2015-3096", }, { cve: "CVE-2015-3098", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-3098", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.292 and 14.x through 18.x before 18.0.0.160 on Windows and OS X and before 11.2.202.466 on Linux, Adobe AIR before 18.0.0.144 on Windows and before 18.0.0.143 on OS X and Android, Adobe AIR SDK before 18.0.0.144 on Windows and before 18.0.0.143 on OS X, and Adobe AIR SDK & Compiler before 18.0.0.144 on Windows and before 18.0.0.143 on OS X allow remote attackers to bypass the Same Origin Policy via unspecified vectors, a different vulnerability than CVE-2015-3099 and CVE-2015-3102.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-3098", url: "https://www.suse.com/security/cve/CVE-2015-3098", }, { category: "external", summary: "SUSE Bug 934088 for CVE-2015-3098", url: "https://bugzilla.suse.com/934088", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "important", }, ], title: "CVE-2015-3098", }, { cve: "CVE-2015-3099", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-3099", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.292 and 14.x through 18.x before 18.0.0.160 on Windows and OS X and before 11.2.202.466 on Linux, Adobe AIR before 18.0.0.144 on Windows and before 18.0.0.143 on OS X and Android, Adobe AIR SDK before 18.0.0.144 on Windows and before 18.0.0.143 on OS X, and Adobe AIR SDK & Compiler before 18.0.0.144 on Windows and before 18.0.0.143 on OS X allow remote attackers to bypass the Same Origin Policy via unspecified vectors, a different vulnerability than CVE-2015-3098 and CVE-2015-3102.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-3099", url: "https://www.suse.com/security/cve/CVE-2015-3099", }, { category: "external", summary: "SUSE Bug 934088 for CVE-2015-3099", url: "https://bugzilla.suse.com/934088", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "important", }, ], title: "CVE-2015-3099", }, { cve: "CVE-2015-3100", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-3100", }, ], notes: [ { category: "general", text: "Stack-based buffer overflow in Adobe Flash Player before 13.0.0.292 and 14.x through 18.x before 18.0.0.160 on Windows and OS X and before 11.2.202.466 on Linux, Adobe AIR before 18.0.0.144 on Windows and before 18.0.0.143 on OS X and Android, Adobe AIR SDK before 18.0.0.144 on Windows and before 18.0.0.143 on OS X, and Adobe AIR SDK & Compiler before 18.0.0.144 on Windows and before 18.0.0.143 on OS X allows attackers to execute arbitrary code via unspecified vectors.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-3100", url: "https://www.suse.com/security/cve/CVE-2015-3100", }, { category: "external", summary: "SUSE Bug 934088 for CVE-2015-3100", url: "https://bugzilla.suse.com/934088", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "important", }, ], title: "CVE-2015-3100", }, { cve: "CVE-2015-3102", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-3102", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.292 and 14.x through 18.x before 18.0.0.160 on Windows and OS X and before 11.2.202.466 on Linux, Adobe AIR before 18.0.0.144 on Windows and before 18.0.0.143 on OS X and Android, Adobe AIR SDK before 18.0.0.144 on Windows and before 18.0.0.143 on OS X, and Adobe AIR SDK & Compiler before 18.0.0.144 on Windows and before 18.0.0.143 on OS X allow remote attackers to bypass the Same Origin Policy via unspecified vectors, a different vulnerability than CVE-2015-3098 and CVE-2015-3099.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-3102", url: "https://www.suse.com/security/cve/CVE-2015-3102", }, { category: "external", summary: "SUSE Bug 934088 for CVE-2015-3102", url: "https://bugzilla.suse.com/934088", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "important", }, ], title: "CVE-2015-3102", }, { cve: "CVE-2015-3103", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-3103", }, ], notes: [ { category: "general", text: "Use-after-free vulnerability in Adobe Flash Player before 13.0.0.292 and 14.x through 18.x before 18.0.0.160 on Windows and OS X and before 11.2.202.466 on Linux, Adobe AIR before 18.0.0.144 on Windows and before 18.0.0.143 on OS X and Android, Adobe AIR SDK before 18.0.0.144 on Windows and before 18.0.0.143 on OS X, and Adobe AIR SDK & Compiler before 18.0.0.144 on Windows and before 18.0.0.143 on OS X allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-3106 and CVE-2015-3107.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-3103", url: "https://www.suse.com/security/cve/CVE-2015-3103", }, { category: "external", summary: "SUSE Bug 934088 for CVE-2015-3103", url: "https://bugzilla.suse.com/934088", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "important", }, ], title: "CVE-2015-3103", }, { cve: "CVE-2015-3106", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-3106", }, ], notes: [ { category: "general", text: "Use-after-free vulnerability in Adobe Flash Player before 13.0.0.292 and 14.x through 18.x before 18.0.0.160 on Windows and OS X and before 11.2.202.466 on Linux, Adobe AIR before 18.0.0.144 on Windows and before 18.0.0.143 on OS X and Android, Adobe AIR SDK before 18.0.0.144 on Windows and before 18.0.0.143 on OS X, and Adobe AIR SDK & Compiler before 18.0.0.144 on Windows and before 18.0.0.143 on OS X allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-3103 and CVE-2015-3107.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-3106", url: "https://www.suse.com/security/cve/CVE-2015-3106", }, { category: "external", summary: "SUSE Bug 934088 for CVE-2015-3106", url: "https://bugzilla.suse.com/934088", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "important", }, ], title: "CVE-2015-3106", }, { cve: "CVE-2015-3107", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-3107", }, ], notes: [ { category: "general", text: "Use-after-free vulnerability in Adobe Flash Player before 13.0.0.292 and 14.x through 18.x before 18.0.0.160 on Windows and OS X and before 11.2.202.466 on Linux, Adobe AIR before 18.0.0.144 on Windows and before 18.0.0.143 on OS X and Android, Adobe AIR SDK before 18.0.0.144 on Windows and before 18.0.0.143 on OS X, and Adobe AIR SDK & Compiler before 18.0.0.144 on Windows and before 18.0.0.143 on OS X allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-3103 and CVE-2015-3106.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-3107", url: "https://www.suse.com/security/cve/CVE-2015-3107", }, { category: "external", summary: "SUSE Bug 934088 for CVE-2015-3107", url: "https://bugzilla.suse.com/934088", }, { category: "external", summary: "SUSE Bug 941239 for CVE-2015-3107", url: "https://bugzilla.suse.com/941239", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "important", }, ], title: "CVE-2015-3107", }, { cve: "CVE-2015-3108", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-3108", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.292 and 14.x through 18.x before 18.0.0.160 on Windows and OS X and before 11.2.202.466 on Linux, Adobe AIR before 18.0.0.144 on Windows and before 18.0.0.143 on OS X and Android, Adobe AIR SDK before 18.0.0.144 on Windows and before 18.0.0.143 on OS X, and Adobe AIR SDK & Compiler before 18.0.0.144 on Windows and before 18.0.0.143 on OS X do not properly restrict discovery of memory addresses, which allows attackers to bypass the ASLR protection mechanism via unspecified vectors.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-3108", url: "https://www.suse.com/security/cve/CVE-2015-3108", }, { category: "external", summary: "SUSE Bug 934088 for CVE-2015-3108", url: "https://bugzilla.suse.com/934088", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "important", }, ], title: "CVE-2015-3108", }, { cve: "CVE-2015-3113", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-3113", }, ], notes: [ { category: "general", text: "Heap-based buffer overflow in Adobe Flash Player before 13.0.0.296 and 14.x through 18.x before 18.0.0.194 on Windows and OS X and before 11.2.202.468 on Linux allows remote attackers to execute arbitrary code via unspecified vectors, as exploited in the wild in June 2015.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-3113", url: "https://www.suse.com/security/cve/CVE-2015-3113", }, { category: "external", summary: "SUSE Bug 935701 for CVE-2015-3113", url: "https://bugzilla.suse.com/935701", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 9.8, baseSeverity: "CRITICAL", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "important", }, ], title: "CVE-2015-3113", }, ], }
suse-su-2015:0493-1
Vulnerability from csaf_suse
Notes
{ document: { aggregate_severity: { namespace: "https://www.suse.com/support/security/rating/", text: "moderate", }, category: "csaf_security_advisory", csaf_version: "2.0", distribution: { text: "Copyright 2024 SUSE LLC. All rights reserved.", tlp: { label: "WHITE", url: "https://www.first.org/tlp/", }, }, lang: "en", notes: [ { category: "summary", text: "Security update for flash-player", title: "Title of the patch", }, { category: "description", text: "\nflash-player was updated to version 11.2.202.418 to fix 18 security issues:\n\n * Memory corruption vulnerabilities that could lead to code execution\n (CVE-2014-0576, CVE-2014-0581, CVE-2014-8440, CVE-2014-8441).\n * Use-after-free vulnerabilities that could lead to code execution\n (CVE-2014-0573, CVE-2014-0588, CVE-2014-8438).\n * A double free vulnerability that could lead to code execution\n (CVE-2014-0574).\n * Type confusion vulnerabilities that could lead to code execution\n (CVE-2014-0577, CVE-2014-0584, CVE-2014-0585, CVE-2014-0586,\n CVE-2014-0590).\n * Heap buffer overflow vulnerabilities that could lead to code\n execution (CVE-2014-0582, CVE-2014-0589).\n * An information disclosure vulnerability that could be exploited to\n disclose session tokens (CVE-2014-8437).\n * A heap buffer overflow vulnerability that could be exploited to\n perform privilege escalation from low to medium integrity level\n (CVE-2014-0583).\n * A permission issue that could be exploited to perform privilege\n escalation from low to medium integrity level (CVE-2014-8442).\n\nFurther information can be found at \nhttp://helpx.adobe.com/security/products/flash-player/apsb14-24.html\n<http://helpx.adobe.com/security/products/flash-player/apsb14-24.html> .\n\nSecurity Issues:\n\n * CVE-2014-0576\n <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0576>\n * CVE-2014-0581\n <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0581>\n * CVE-2014-8440\n <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8440>\n * CVE-2014-8441\n <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8441>\n * CVE-2014-0573\n <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0573>\n * CVE-2014-0588\n <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0588>\n * CVE-2014-8438\n <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8438>\n * CVE-2014-0574\n <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0574>\n * CVE-2014-0577\n <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0577>\n * CVE-2014-0584\n <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0584>\n * CVE-2014-0585\n <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0585>\n * CVE-2014-0586\n <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0586>\n * CVE-2014-0590\n <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0590>\n * CVE-2014-0582\n <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0582>\n * CVE-2014-0589\n <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0589>\n * CVE-2014-8437\n <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8437>\n * CVE-2014-0583\n <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0583>\n * CVE-2014-8442\n <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8442>\n\n", title: "Description of the patch", }, { category: "details", text: "sledsp3-flash-player", title: "Patchnames", }, { category: "legal_disclaimer", text: "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).", title: "Terms of use", }, ], publisher: { category: "vendor", contact_details: "https://www.suse.com/support/security/contact/", name: "SUSE Product Security Team", namespace: "https://www.suse.com/", }, references: [ { category: "external", summary: "SUSE ratings", url: "https://www.suse.com/support/security/rating/", }, { category: "self", summary: "URL of this CSAF notice", url: "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2015_0493-1.json", }, { category: "self", summary: "URL for SUSE-SU-2015:0493-1", url: "https://www.suse.com/support/update/announcement/2015/suse-su-20150493-1/", }, { category: "self", summary: "E-Mail link for SUSE-SU-2015:0493-1", url: "https://lists.suse.com/pipermail/sle-security-updates/2015-March/001286.html", }, { category: "self", summary: "SUSE Bug 824512", url: "https://bugzilla.suse.com/824512", }, { category: "self", summary: "SUSE Bug 828810", url: "https://bugzilla.suse.com/828810", }, { category: "self", summary: "SUSE Bug 839897", url: "https://bugzilla.suse.com/839897", }, { category: "self", summary: "SUSE Bug 850220", url: "https://bugzilla.suse.com/850220", }, { category: "self", summary: "SUSE Bug 854881", url: "https://bugzilla.suse.com/854881", }, { category: "self", summary: "SUSE Bug 856386", url: "https://bugzilla.suse.com/856386", }, { category: "self", summary: "SUSE Bug 858822", url: "https://bugzilla.suse.com/858822", }, { category: "self", summary: "SUSE Bug 862288", url: "https://bugzilla.suse.com/862288", }, { category: "self", summary: "SUSE Bug 865021", url: "https://bugzilla.suse.com/865021", }, { category: "self", summary: "SUSE Bug 867808", url: "https://bugzilla.suse.com/867808", }, { category: "self", summary: "SUSE Bug 872692", url: "https://bugzilla.suse.com/872692", }, { category: "self", summary: "SUSE Bug 875577", url: "https://bugzilla.suse.com/875577", }, { category: "self", summary: "SUSE Bug 877649", url: "https://bugzilla.suse.com/877649", }, { category: "self", summary: "SUSE Bug 882187", url: "https://bugzilla.suse.com/882187", }, { category: "self", summary: "SUSE Bug 886472", url: "https://bugzilla.suse.com/886472", }, { category: "self", summary: "SUSE Bug 891688", url: "https://bugzilla.suse.com/891688", }, { category: "self", summary: "SUSE Bug 895856", url: "https://bugzilla.suse.com/895856", }, { category: "self", summary: "SUSE Bug 901334", url: "https://bugzilla.suse.com/901334", }, { category: "self", summary: "SUSE Bug 905032", url: "https://bugzilla.suse.com/905032", }, { category: "self", summary: "SUSE Bug 907257", url: "https://bugzilla.suse.com/907257", }, { category: "self", summary: "SUSE Bug 909219", url: "https://bugzilla.suse.com/909219", }, { category: "self", summary: "SUSE Bug 913057", url: "https://bugzilla.suse.com/913057", }, { category: "self", summary: "SUSE Bug 914333", url: "https://bugzilla.suse.com/914333", }, { category: "self", summary: "SUSE Bug 914463", url: "https://bugzilla.suse.com/914463", }, { category: "self", summary: "SUSE Bug 915918", url: "https://bugzilla.suse.com/915918", }, { category: "self", summary: "SUSE Bug 922033", url: "https://bugzilla.suse.com/922033", }, { category: "self", summary: "SUSE Bug 927089", url: "https://bugzilla.suse.com/927089", }, { category: "self", summary: "SUSE Bug 930677", url: "https://bugzilla.suse.com/930677", }, { category: "self", summary: "SUSE Bug 934088", url: "https://bugzilla.suse.com/934088", }, { category: "self", summary: "SUSE Bug 935701", url: "https://bugzilla.suse.com/935701", }, { category: "self", summary: "SUSE CVE CVE-2013-3343 page", url: "https://www.suse.com/security/cve/CVE-2013-3343/", }, { category: "self", summary: "SUSE CVE CVE-2013-3344 page", url: "https://www.suse.com/security/cve/CVE-2013-3344/", }, { category: "self", summary: "SUSE CVE CVE-2013-3345 page", url: "https://www.suse.com/security/cve/CVE-2013-3345/", }, { category: "self", summary: "SUSE CVE CVE-2013-3347 page", url: "https://www.suse.com/security/cve/CVE-2013-3347/", }, { category: "self", summary: "SUSE CVE CVE-2013-3361 page", url: "https://www.suse.com/security/cve/CVE-2013-3361/", }, { category: "self", summary: "SUSE CVE CVE-2013-3362 page", url: "https://www.suse.com/security/cve/CVE-2013-3362/", }, { category: "self", summary: "SUSE CVE CVE-2013-3363 page", url: "https://www.suse.com/security/cve/CVE-2013-3363/", }, { category: "self", summary: "SUSE CVE CVE-2013-5324 page", url: "https://www.suse.com/security/cve/CVE-2013-5324/", }, { category: "self", summary: "SUSE CVE CVE-2013-5329 page", url: "https://www.suse.com/security/cve/CVE-2013-5329/", }, { category: "self", summary: "SUSE CVE CVE-2013-5330 page", url: "https://www.suse.com/security/cve/CVE-2013-5330/", }, { category: "self", summary: "SUSE CVE CVE-2013-5331 page", url: "https://www.suse.com/security/cve/CVE-2013-5331/", }, { category: "self", summary: "SUSE CVE CVE-2013-5332 page", url: "https://www.suse.com/security/cve/CVE-2013-5332/", }, { category: "self", summary: "SUSE CVE CVE-2014-0491 page", url: "https://www.suse.com/security/cve/CVE-2014-0491/", }, { category: "self", summary: "SUSE CVE CVE-2014-0492 page", url: "https://www.suse.com/security/cve/CVE-2014-0492/", }, { category: "self", summary: "SUSE CVE CVE-2014-0497 page", url: "https://www.suse.com/security/cve/CVE-2014-0497/", }, { category: "self", summary: "SUSE CVE CVE-2014-0498 page", url: "https://www.suse.com/security/cve/CVE-2014-0498/", }, { category: "self", summary: "SUSE CVE CVE-2014-0499 page", url: "https://www.suse.com/security/cve/CVE-2014-0499/", }, { category: "self", summary: "SUSE CVE CVE-2014-0502 page", url: "https://www.suse.com/security/cve/CVE-2014-0502/", }, { category: "self", summary: "SUSE CVE CVE-2014-0503 page", url: "https://www.suse.com/security/cve/CVE-2014-0503/", }, { category: "self", summary: "SUSE CVE CVE-2014-0504 page", url: "https://www.suse.com/security/cve/CVE-2014-0504/", }, { category: "self", summary: "SUSE CVE CVE-2014-0506 page", url: "https://www.suse.com/security/cve/CVE-2014-0506/", }, { category: "self", summary: "SUSE CVE CVE-2014-0507 page", url: "https://www.suse.com/security/cve/CVE-2014-0507/", }, { category: "self", summary: "SUSE CVE CVE-2014-0508 page", url: "https://www.suse.com/security/cve/CVE-2014-0508/", }, { category: "self", summary: "SUSE CVE CVE-2014-0509 page", url: "https://www.suse.com/security/cve/CVE-2014-0509/", }, { category: "self", summary: "SUSE CVE CVE-2014-0510 page", url: "https://www.suse.com/security/cve/CVE-2014-0510/", }, { category: "self", summary: "SUSE CVE CVE-2014-0515 page", url: "https://www.suse.com/security/cve/CVE-2014-0515/", }, { category: "self", summary: "SUSE CVE CVE-2014-0516 page", url: "https://www.suse.com/security/cve/CVE-2014-0516/", }, { category: "self", summary: "SUSE CVE CVE-2014-0517 page", url: "https://www.suse.com/security/cve/CVE-2014-0517/", }, { category: "self", summary: "SUSE CVE CVE-2014-0518 page", url: "https://www.suse.com/security/cve/CVE-2014-0518/", }, { category: "self", summary: "SUSE CVE CVE-2014-0519 page", url: "https://www.suse.com/security/cve/CVE-2014-0519/", }, { category: "self", summary: "SUSE CVE CVE-2014-0520 page", url: "https://www.suse.com/security/cve/CVE-2014-0520/", }, { category: "self", summary: "SUSE CVE CVE-2014-0531 page", url: "https://www.suse.com/security/cve/CVE-2014-0531/", }, { category: "self", summary: "SUSE CVE CVE-2014-0532 page", url: "https://www.suse.com/security/cve/CVE-2014-0532/", }, { category: "self", summary: "SUSE CVE CVE-2014-0533 page", url: "https://www.suse.com/security/cve/CVE-2014-0533/", }, { category: "self", summary: "SUSE CVE CVE-2014-0534 page", url: "https://www.suse.com/security/cve/CVE-2014-0534/", }, { category: "self", summary: "SUSE CVE CVE-2014-0535 page", url: "https://www.suse.com/security/cve/CVE-2014-0535/", }, { category: "self", summary: "SUSE CVE CVE-2014-0536 page", url: "https://www.suse.com/security/cve/CVE-2014-0536/", }, { category: "self", summary: "SUSE CVE CVE-2014-0537 page", url: "https://www.suse.com/security/cve/CVE-2014-0537/", }, { category: "self", summary: "SUSE CVE CVE-2014-0538 page", url: "https://www.suse.com/security/cve/CVE-2014-0538/", }, { category: "self", summary: "SUSE CVE CVE-2014-0539 page", url: "https://www.suse.com/security/cve/CVE-2014-0539/", }, { category: "self", summary: "SUSE CVE CVE-2014-0540 page", url: "https://www.suse.com/security/cve/CVE-2014-0540/", }, { category: "self", summary: "SUSE CVE CVE-2014-0541 page", url: "https://www.suse.com/security/cve/CVE-2014-0541/", }, { category: "self", summary: "SUSE CVE CVE-2014-0542 page", url: "https://www.suse.com/security/cve/CVE-2014-0542/", }, { category: "self", summary: "SUSE CVE CVE-2014-0543 page", url: "https://www.suse.com/security/cve/CVE-2014-0543/", }, { category: "self", summary: "SUSE CVE CVE-2014-0544 page", url: "https://www.suse.com/security/cve/CVE-2014-0544/", }, { category: "self", summary: "SUSE CVE CVE-2014-0545 page", url: "https://www.suse.com/security/cve/CVE-2014-0545/", }, { category: "self", summary: "SUSE CVE CVE-2014-0547 page", url: "https://www.suse.com/security/cve/CVE-2014-0547/", }, { category: "self", summary: "SUSE CVE CVE-2014-0548 page", url: "https://www.suse.com/security/cve/CVE-2014-0548/", }, { category: "self", summary: "SUSE CVE CVE-2014-0549 page", url: "https://www.suse.com/security/cve/CVE-2014-0549/", }, { category: "self", summary: "SUSE CVE CVE-2014-0550 page", url: "https://www.suse.com/security/cve/CVE-2014-0550/", }, { category: "self", summary: "SUSE CVE CVE-2014-0551 page", url: "https://www.suse.com/security/cve/CVE-2014-0551/", }, { category: "self", summary: "SUSE CVE CVE-2014-0552 page", url: "https://www.suse.com/security/cve/CVE-2014-0552/", }, { category: "self", summary: "SUSE CVE CVE-2014-0553 page", url: "https://www.suse.com/security/cve/CVE-2014-0553/", }, { category: "self", summary: "SUSE CVE CVE-2014-0554 page", url: "https://www.suse.com/security/cve/CVE-2014-0554/", }, { category: "self", summary: "SUSE CVE CVE-2014-0555 page", url: "https://www.suse.com/security/cve/CVE-2014-0555/", }, { category: "self", summary: "SUSE CVE CVE-2014-0556 page", url: "https://www.suse.com/security/cve/CVE-2014-0556/", }, { category: "self", summary: "SUSE CVE CVE-2014-0557 page", url: "https://www.suse.com/security/cve/CVE-2014-0557/", }, { category: "self", summary: "SUSE CVE CVE-2014-0558 page", url: "https://www.suse.com/security/cve/CVE-2014-0558/", }, { category: "self", summary: "SUSE CVE CVE-2014-0559 page", url: "https://www.suse.com/security/cve/CVE-2014-0559/", }, { category: "self", summary: "SUSE CVE CVE-2014-0564 page", url: "https://www.suse.com/security/cve/CVE-2014-0564/", }, { category: "self", summary: "SUSE CVE CVE-2014-0569 page", url: "https://www.suse.com/security/cve/CVE-2014-0569/", }, { category: "self", summary: "SUSE CVE CVE-2014-0573 page", url: "https://www.suse.com/security/cve/CVE-2014-0573/", }, { category: "self", summary: "SUSE CVE CVE-2014-0574 page", url: "https://www.suse.com/security/cve/CVE-2014-0574/", }, { category: "self", summary: "SUSE CVE CVE-2014-0576 page", url: "https://www.suse.com/security/cve/CVE-2014-0576/", }, { category: "self", summary: "SUSE CVE CVE-2014-0577 page", url: "https://www.suse.com/security/cve/CVE-2014-0577/", }, { category: "self", summary: "SUSE CVE CVE-2014-0580 page", url: "https://www.suse.com/security/cve/CVE-2014-0580/", }, { category: "self", summary: "SUSE CVE CVE-2014-0581 page", url: "https://www.suse.com/security/cve/CVE-2014-0581/", }, { category: "self", summary: "SUSE CVE CVE-2014-0582 page", url: "https://www.suse.com/security/cve/CVE-2014-0582/", }, { category: "self", summary: "SUSE CVE CVE-2014-0583 page", url: "https://www.suse.com/security/cve/CVE-2014-0583/", }, { category: "self", summary: "SUSE CVE CVE-2014-0584 page", url: "https://www.suse.com/security/cve/CVE-2014-0584/", }, { category: "self", summary: "SUSE CVE CVE-2014-0585 page", url: "https://www.suse.com/security/cve/CVE-2014-0585/", }, { category: "self", summary: "SUSE CVE CVE-2014-0586 page", url: "https://www.suse.com/security/cve/CVE-2014-0586/", }, { category: "self", summary: "SUSE CVE CVE-2014-0587 page", url: "https://www.suse.com/security/cve/CVE-2014-0587/", }, { category: "self", summary: "SUSE CVE CVE-2014-0588 page", url: "https://www.suse.com/security/cve/CVE-2014-0588/", }, { category: "self", summary: "SUSE CVE CVE-2014-0589 page", url: "https://www.suse.com/security/cve/CVE-2014-0589/", }, { category: "self", summary: "SUSE CVE CVE-2014-0590 page", url: "https://www.suse.com/security/cve/CVE-2014-0590/", }, { category: "self", summary: "SUSE CVE CVE-2014-4671 page", url: "https://www.suse.com/security/cve/CVE-2014-4671/", }, { category: "self", summary: "SUSE CVE CVE-2014-8437 page", url: "https://www.suse.com/security/cve/CVE-2014-8437/", }, { category: "self", summary: "SUSE CVE CVE-2014-8438 page", url: "https://www.suse.com/security/cve/CVE-2014-8438/", }, { category: "self", summary: "SUSE CVE CVE-2014-8439 page", url: "https://www.suse.com/security/cve/CVE-2014-8439/", }, { category: "self", summary: "SUSE CVE CVE-2014-8440 page", url: "https://www.suse.com/security/cve/CVE-2014-8440/", }, { category: "self", summary: "SUSE CVE CVE-2014-8441 page", url: "https://www.suse.com/security/cve/CVE-2014-8441/", }, { category: "self", summary: "SUSE CVE CVE-2014-8442 page", url: "https://www.suse.com/security/cve/CVE-2014-8442/", }, { category: "self", summary: "SUSE CVE CVE-2014-8443 page", url: "https://www.suse.com/security/cve/CVE-2014-8443/", }, { category: "self", summary: "SUSE CVE CVE-2014-9162 page", url: "https://www.suse.com/security/cve/CVE-2014-9162/", }, { category: "self", summary: "SUSE CVE CVE-2014-9163 page", url: "https://www.suse.com/security/cve/CVE-2014-9163/", }, { category: "self", summary: "SUSE CVE CVE-2014-9164 page", url: "https://www.suse.com/security/cve/CVE-2014-9164/", }, { category: "self", summary: "SUSE CVE CVE-2015-0301 page", url: "https://www.suse.com/security/cve/CVE-2015-0301/", }, { category: "self", summary: "SUSE CVE CVE-2015-0302 page", url: "https://www.suse.com/security/cve/CVE-2015-0302/", }, { category: "self", summary: "SUSE CVE CVE-2015-0303 page", url: "https://www.suse.com/security/cve/CVE-2015-0303/", }, { category: "self", summary: "SUSE CVE CVE-2015-0304 page", url: "https://www.suse.com/security/cve/CVE-2015-0304/", }, { category: "self", summary: "SUSE CVE CVE-2015-0305 page", url: "https://www.suse.com/security/cve/CVE-2015-0305/", }, { category: "self", summary: "SUSE CVE CVE-2015-0306 page", url: "https://www.suse.com/security/cve/CVE-2015-0306/", }, { category: "self", summary: "SUSE CVE CVE-2015-0307 page", url: "https://www.suse.com/security/cve/CVE-2015-0307/", }, { category: "self", summary: "SUSE CVE CVE-2015-0308 page", url: "https://www.suse.com/security/cve/CVE-2015-0308/", }, { category: "self", summary: "SUSE CVE CVE-2015-0309 page", url: "https://www.suse.com/security/cve/CVE-2015-0309/", }, { category: "self", summary: "SUSE CVE CVE-2015-0310 page", url: "https://www.suse.com/security/cve/CVE-2015-0310/", }, { category: "self", summary: "SUSE CVE CVE-2015-0311 page", url: "https://www.suse.com/security/cve/CVE-2015-0311/", }, { category: "self", summary: "SUSE CVE CVE-2015-0313 page", url: "https://www.suse.com/security/cve/CVE-2015-0313/", }, { category: "self", summary: "SUSE CVE CVE-2015-0314 page", url: "https://www.suse.com/security/cve/CVE-2015-0314/", }, { category: "self", summary: "SUSE CVE CVE-2015-0315 page", url: "https://www.suse.com/security/cve/CVE-2015-0315/", }, { category: "self", summary: "SUSE CVE CVE-2015-0316 page", url: "https://www.suse.com/security/cve/CVE-2015-0316/", }, { category: "self", summary: "SUSE CVE CVE-2015-0317 page", url: "https://www.suse.com/security/cve/CVE-2015-0317/", }, { category: "self", summary: "SUSE CVE CVE-2015-0318 page", url: "https://www.suse.com/security/cve/CVE-2015-0318/", }, { category: "self", summary: "SUSE CVE CVE-2015-0319 page", url: "https://www.suse.com/security/cve/CVE-2015-0319/", }, { category: "self", summary: "SUSE CVE CVE-2015-0320 page", url: "https://www.suse.com/security/cve/CVE-2015-0320/", }, { category: "self", summary: "SUSE CVE CVE-2015-0321 page", url: "https://www.suse.com/security/cve/CVE-2015-0321/", }, { category: "self", summary: "SUSE CVE CVE-2015-0322 page", url: "https://www.suse.com/security/cve/CVE-2015-0322/", }, { category: "self", summary: "SUSE CVE CVE-2015-0323 page", url: "https://www.suse.com/security/cve/CVE-2015-0323/", }, { category: "self", summary: "SUSE CVE CVE-2015-0324 page", url: "https://www.suse.com/security/cve/CVE-2015-0324/", }, { category: "self", summary: "SUSE CVE CVE-2015-0325 page", url: "https://www.suse.com/security/cve/CVE-2015-0325/", }, { category: "self", summary: "SUSE CVE CVE-2015-0326 page", url: "https://www.suse.com/security/cve/CVE-2015-0326/", }, { category: "self", summary: "SUSE CVE CVE-2015-0327 page", url: "https://www.suse.com/security/cve/CVE-2015-0327/", }, { category: "self", summary: "SUSE CVE CVE-2015-0328 page", url: "https://www.suse.com/security/cve/CVE-2015-0328/", }, { category: "self", summary: "SUSE CVE CVE-2015-0329 page", url: "https://www.suse.com/security/cve/CVE-2015-0329/", }, { category: "self", summary: "SUSE CVE CVE-2015-0330 page", url: "https://www.suse.com/security/cve/CVE-2015-0330/", }, { category: "self", summary: "SUSE CVE CVE-2015-0332 page", url: "https://www.suse.com/security/cve/CVE-2015-0332/", }, { category: "self", summary: "SUSE CVE CVE-2015-0333 page", url: "https://www.suse.com/security/cve/CVE-2015-0333/", }, { category: "self", summary: "SUSE CVE CVE-2015-0334 page", url: "https://www.suse.com/security/cve/CVE-2015-0334/", }, { category: "self", summary: "SUSE CVE CVE-2015-0335 page", url: "https://www.suse.com/security/cve/CVE-2015-0335/", }, { category: "self", summary: "SUSE CVE CVE-2015-0336 page", url: "https://www.suse.com/security/cve/CVE-2015-0336/", }, { category: "self", summary: "SUSE CVE CVE-2015-0337 page", url: "https://www.suse.com/security/cve/CVE-2015-0337/", }, { category: "self", summary: "SUSE CVE CVE-2015-0338 page", url: "https://www.suse.com/security/cve/CVE-2015-0338/", }, { category: "self", summary: "SUSE CVE CVE-2015-0339 page", url: "https://www.suse.com/security/cve/CVE-2015-0339/", }, { category: "self", summary: "SUSE CVE CVE-2015-0340 page", url: "https://www.suse.com/security/cve/CVE-2015-0340/", }, { category: "self", summary: "SUSE CVE CVE-2015-0341 page", url: "https://www.suse.com/security/cve/CVE-2015-0341/", }, { category: "self", summary: "SUSE CVE CVE-2015-0342 page", url: "https://www.suse.com/security/cve/CVE-2015-0342/", }, { category: "self", summary: "SUSE CVE CVE-2015-0346 page", url: "https://www.suse.com/security/cve/CVE-2015-0346/", }, { category: "self", summary: "SUSE CVE CVE-2015-0347 page", url: "https://www.suse.com/security/cve/CVE-2015-0347/", }, { category: "self", summary: "SUSE CVE CVE-2015-0348 page", url: "https://www.suse.com/security/cve/CVE-2015-0348/", }, { category: "self", summary: "SUSE CVE CVE-2015-0349 page", url: "https://www.suse.com/security/cve/CVE-2015-0349/", }, { category: "self", summary: "SUSE CVE CVE-2015-0350 page", url: "https://www.suse.com/security/cve/CVE-2015-0350/", }, { category: "self", summary: "SUSE CVE CVE-2015-0351 page", url: "https://www.suse.com/security/cve/CVE-2015-0351/", }, { category: "self", summary: "SUSE CVE CVE-2015-0352 page", url: "https://www.suse.com/security/cve/CVE-2015-0352/", }, { category: "self", summary: "SUSE CVE CVE-2015-0353 page", url: "https://www.suse.com/security/cve/CVE-2015-0353/", }, { category: "self", summary: "SUSE CVE CVE-2015-0354 page", url: "https://www.suse.com/security/cve/CVE-2015-0354/", }, { category: "self", summary: "SUSE CVE CVE-2015-0355 page", url: "https://www.suse.com/security/cve/CVE-2015-0355/", }, { category: "self", summary: "SUSE CVE CVE-2015-0356 page", url: "https://www.suse.com/security/cve/CVE-2015-0356/", }, { category: "self", summary: "SUSE CVE CVE-2015-0357 page", url: "https://www.suse.com/security/cve/CVE-2015-0357/", }, { category: "self", summary: "SUSE CVE CVE-2015-0358 page", url: "https://www.suse.com/security/cve/CVE-2015-0358/", }, { category: "self", summary: "SUSE CVE CVE-2015-0359 page", url: "https://www.suse.com/security/cve/CVE-2015-0359/", }, { category: "self", summary: "SUSE CVE CVE-2015-0360 page", url: "https://www.suse.com/security/cve/CVE-2015-0360/", }, { category: "self", summary: "SUSE CVE CVE-2015-3038 page", url: "https://www.suse.com/security/cve/CVE-2015-3038/", }, { category: "self", summary: "SUSE CVE CVE-2015-3039 page", url: "https://www.suse.com/security/cve/CVE-2015-3039/", }, { category: "self", summary: "SUSE CVE CVE-2015-3040 page", url: "https://www.suse.com/security/cve/CVE-2015-3040/", }, { category: "self", summary: "SUSE CVE CVE-2015-3041 page", url: "https://www.suse.com/security/cve/CVE-2015-3041/", }, { category: "self", summary: "SUSE CVE CVE-2015-3042 page", url: "https://www.suse.com/security/cve/CVE-2015-3042/", }, { category: "self", summary: "SUSE CVE CVE-2015-3043 page", url: "https://www.suse.com/security/cve/CVE-2015-3043/", }, { category: "self", summary: "SUSE CVE CVE-2015-3044 page", url: "https://www.suse.com/security/cve/CVE-2015-3044/", }, { category: "self", summary: "SUSE CVE CVE-2015-3077 page", url: "https://www.suse.com/security/cve/CVE-2015-3077/", }, { category: "self", summary: "SUSE CVE CVE-2015-3078 page", url: "https://www.suse.com/security/cve/CVE-2015-3078/", }, { category: "self", summary: "SUSE CVE CVE-2015-3079 page", url: "https://www.suse.com/security/cve/CVE-2015-3079/", }, { category: "self", summary: "SUSE CVE CVE-2015-3080 page", url: "https://www.suse.com/security/cve/CVE-2015-3080/", }, { category: "self", summary: "SUSE CVE CVE-2015-3081 page", url: "https://www.suse.com/security/cve/CVE-2015-3081/", }, { category: "self", summary: "SUSE CVE CVE-2015-3082 page", url: "https://www.suse.com/security/cve/CVE-2015-3082/", }, { category: "self", summary: "SUSE CVE CVE-2015-3083 page", url: "https://www.suse.com/security/cve/CVE-2015-3083/", }, { category: "self", summary: "SUSE CVE CVE-2015-3084 page", url: "https://www.suse.com/security/cve/CVE-2015-3084/", }, { category: "self", summary: "SUSE CVE CVE-2015-3085 page", url: "https://www.suse.com/security/cve/CVE-2015-3085/", }, { category: "self", summary: "SUSE CVE CVE-2015-3086 page", url: "https://www.suse.com/security/cve/CVE-2015-3086/", }, { category: "self", summary: "SUSE CVE CVE-2015-3087 page", url: "https://www.suse.com/security/cve/CVE-2015-3087/", }, { category: "self", summary: "SUSE CVE CVE-2015-3088 page", url: "https://www.suse.com/security/cve/CVE-2015-3088/", }, { category: "self", summary: "SUSE CVE CVE-2015-3089 page", url: "https://www.suse.com/security/cve/CVE-2015-3089/", }, { category: "self", summary: "SUSE CVE CVE-2015-3090 page", url: "https://www.suse.com/security/cve/CVE-2015-3090/", }, { category: "self", summary: "SUSE CVE CVE-2015-3091 page", url: "https://www.suse.com/security/cve/CVE-2015-3091/", }, { category: "self", summary: "SUSE CVE CVE-2015-3092 page", url: "https://www.suse.com/security/cve/CVE-2015-3092/", }, { category: "self", summary: "SUSE CVE CVE-2015-3093 page", url: "https://www.suse.com/security/cve/CVE-2015-3093/", }, { category: "self", summary: "SUSE CVE CVE-2015-3096 page", url: "https://www.suse.com/security/cve/CVE-2015-3096/", }, { category: "self", summary: "SUSE CVE CVE-2015-3098 page", url: "https://www.suse.com/security/cve/CVE-2015-3098/", }, { category: "self", summary: "SUSE CVE CVE-2015-3099 page", url: "https://www.suse.com/security/cve/CVE-2015-3099/", }, { category: "self", summary: "SUSE CVE CVE-2015-3100 page", url: "https://www.suse.com/security/cve/CVE-2015-3100/", }, { category: "self", summary: "SUSE CVE CVE-2015-3102 page", url: "https://www.suse.com/security/cve/CVE-2015-3102/", }, { category: "self", summary: "SUSE CVE CVE-2015-3103 page", url: "https://www.suse.com/security/cve/CVE-2015-3103/", }, { category: "self", summary: "SUSE CVE CVE-2015-3106 page", url: "https://www.suse.com/security/cve/CVE-2015-3106/", }, { category: "self", summary: "SUSE CVE CVE-2015-3107 page", url: "https://www.suse.com/security/cve/CVE-2015-3107/", }, { category: "self", summary: "SUSE CVE CVE-2015-3108 page", url: "https://www.suse.com/security/cve/CVE-2015-3108/", }, { category: "self", summary: "SUSE CVE CVE-2015-3113 page", url: "https://www.suse.com/security/cve/CVE-2015-3113/", }, ], title: "Security update for flash-player", tracking: { current_release_date: "2014-11-14T12:52:02Z", generator: { date: "2014-11-14T12:52:02Z", engine: { name: "cve-database.git:bin/generate-csaf.pl", version: "1", }, }, id: "SUSE-SU-2015:0493-1", initial_release_date: "2014-11-14T12:52:02Z", revision_history: [ { date: "2014-11-14T12:52:02Z", number: "1", summary: "Current version", }, ], status: "final", version: "1", }, }, product_tree: { branches: [ { branches: [ { branches: [ { category: "product_version", name: "flash-player-11.2.202.418-0.3.1.i586", product: { name: "flash-player-11.2.202.418-0.3.1.i586", product_id: "flash-player-11.2.202.418-0.3.1.i586", }, }, { category: "product_version", name: "flash-player-gnome-11.2.202.418-0.3.1.i586", product: { name: "flash-player-gnome-11.2.202.418-0.3.1.i586", product_id: "flash-player-gnome-11.2.202.418-0.3.1.i586", }, }, { category: "product_version", name: "flash-player-kde4-11.2.202.418-0.3.1.i586", product: { name: "flash-player-kde4-11.2.202.418-0.3.1.i586", product_id: "flash-player-kde4-11.2.202.418-0.3.1.i586", }, }, ], category: "architecture", name: "i586", }, { branches: [ { category: "product_version", name: "flash-player-11.2.202.418-0.3.1.x86_64", product: { name: "flash-player-11.2.202.418-0.3.1.x86_64", product_id: "flash-player-11.2.202.418-0.3.1.x86_64", }, }, { category: "product_version", name: "flash-player-gnome-11.2.202.418-0.3.1.x86_64", product: { name: "flash-player-gnome-11.2.202.418-0.3.1.x86_64", product_id: "flash-player-gnome-11.2.202.418-0.3.1.x86_64", }, }, { category: "product_version", name: "flash-player-kde4-11.2.202.418-0.3.1.x86_64", product: { name: "flash-player-kde4-11.2.202.418-0.3.1.x86_64", product_id: "flash-player-kde4-11.2.202.418-0.3.1.x86_64", }, }, ], category: "architecture", name: "x86_64", }, { branches: [ { category: "product_name", name: "SUSE Linux Enterprise Desktop 11 SP3", product: { name: "SUSE Linux Enterprise Desktop 11 SP3", product_id: "SUSE Linux Enterprise Desktop 11 SP3", product_identification_helper: { cpe: "cpe:/o:suse:suse_sled:11:sp3", }, }, }, ], category: "product_family", name: "SUSE Linux Enterprise", }, ], category: "vendor", name: "SUSE", }, ], relationships: [ { category: "default_component_of", full_product_name: { name: "flash-player-11.2.202.418-0.3.1.i586 as component of SUSE Linux Enterprise Desktop 11 SP3", product_id: "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", }, product_reference: "flash-player-11.2.202.418-0.3.1.i586", relates_to_product_reference: "SUSE Linux Enterprise Desktop 11 SP3", }, { category: "default_component_of", full_product_name: { name: "flash-player-11.2.202.418-0.3.1.x86_64 as component of SUSE Linux Enterprise Desktop 11 SP3", product_id: "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", }, product_reference: "flash-player-11.2.202.418-0.3.1.x86_64", relates_to_product_reference: "SUSE Linux Enterprise Desktop 11 SP3", }, { category: "default_component_of", full_product_name: { name: "flash-player-gnome-11.2.202.418-0.3.1.i586 as component of SUSE Linux Enterprise Desktop 11 SP3", product_id: "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", }, product_reference: "flash-player-gnome-11.2.202.418-0.3.1.i586", relates_to_product_reference: "SUSE Linux Enterprise Desktop 11 SP3", }, { category: "default_component_of", full_product_name: { name: "flash-player-gnome-11.2.202.418-0.3.1.x86_64 as component of SUSE Linux Enterprise Desktop 11 SP3", product_id: "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", }, product_reference: "flash-player-gnome-11.2.202.418-0.3.1.x86_64", relates_to_product_reference: "SUSE Linux Enterprise Desktop 11 SP3", }, { category: "default_component_of", full_product_name: { name: "flash-player-kde4-11.2.202.418-0.3.1.i586 as component of SUSE Linux Enterprise Desktop 11 SP3", product_id: "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", }, product_reference: "flash-player-kde4-11.2.202.418-0.3.1.i586", relates_to_product_reference: "SUSE Linux Enterprise Desktop 11 SP3", }, { category: "default_component_of", full_product_name: { name: "flash-player-kde4-11.2.202.418-0.3.1.x86_64 as component of SUSE Linux Enterprise Desktop 11 SP3", product_id: "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", }, product_reference: "flash-player-kde4-11.2.202.418-0.3.1.x86_64", relates_to_product_reference: "SUSE Linux Enterprise Desktop 11 SP3", }, ], }, vulnerabilities: [ { cve: "CVE-2013-3343", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2013-3343", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 10.3.183.90 and 11.x before 11.7.700.224 on Windows, before 10.3.183.90 and 11.x before 11.7.700.225 on Mac OS X, before 10.3.183.90 and 11.x before 11.2.202.291 on Linux, before 11.1.111.59 on Android 2.x and 3.x, and before 11.1.115.63 on Android 4.x; Adobe AIR before 3.7.0.2090 on Windows and Android and before 3.7.0.2100 on Mac OS X; and Adobe AIR SDK & Compiler before 3.7.0.2090 on Windows and before 3.7.0.2100 on Mac OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2013-3343", url: "https://www.suse.com/security/cve/CVE-2013-3343", }, { category: "external", summary: "SUSE Bug 824512 for CVE-2013-3343", url: "https://bugzilla.suse.com/824512", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2013-3343", }, { cve: "CVE-2013-3344", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2013-3344", }, ], notes: [ { category: "general", text: "Heap-based buffer overflow in Adobe Flash Player before 11.7.700.232 and 11.8.x before 11.8.800.94 on Windows and Mac OS X, before 11.2.202.297 on Linux, before 11.1.111.64 on Android 2.x and 3.x, and before 11.1.115.69 on Android 4.x allows attackers to execute arbitrary code via unspecified vectors.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2013-3344", url: "https://www.suse.com/security/cve/CVE-2013-3344", }, { category: "external", summary: "SUSE Bug 828810 for CVE-2013-3344", url: "https://bugzilla.suse.com/828810", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2013-3344", }, { cve: "CVE-2013-3345", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2013-3345", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 11.7.700.232 and 11.8.x before 11.8.800.94 on Windows and Mac OS X, before 11.2.202.297 on Linux, before 11.1.111.64 on Android 2.x and 3.x, and before 11.1.115.69 on Android 4.x allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2013-3345", url: "https://www.suse.com/security/cve/CVE-2013-3345", }, { category: "external", summary: "SUSE Bug 828810 for CVE-2013-3345", url: "https://bugzilla.suse.com/828810", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "low", }, ], title: "CVE-2013-3345", }, { cve: "CVE-2013-3347", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2013-3347", }, ], notes: [ { category: "general", text: "Integer overflow in Adobe Flash Player before 11.7.700.232 and 11.8.x before 11.8.800.94 on Windows and Mac OS X, before 11.2.202.297 on Linux, before 11.1.111.64 on Android 2.x and 3.x, and before 11.1.115.69 on Android 4.x allows attackers to execute arbitrary code via PCM data that is not properly handled during resampling.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2013-3347", url: "https://www.suse.com/security/cve/CVE-2013-3347", }, { category: "external", summary: "SUSE Bug 828810 for CVE-2013-3347", url: "https://bugzilla.suse.com/828810", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2013-3347", }, { cve: "CVE-2013-3361", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2013-3361", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 11.7.700.242 and 11.8.x before 11.8.800.168 on Windows and Mac OS X, before 11.2.202.310 on Linux, before 11.1.111.73 on Android 2.x and 3.x, and before 11.1.115.81 on Android 4.x; Adobe AIR before 3.8.0.1430; and Adobe AIR SDK & Compiler before 3.8.0.1430 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2013-3362, CVE-2013-3363, and CVE-2013-5324.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2013-3361", url: "https://www.suse.com/security/cve/CVE-2013-3361", }, { category: "external", summary: "SUSE Bug 839897 for CVE-2013-3361", url: "https://bugzilla.suse.com/839897", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2013-3361", }, { cve: "CVE-2013-3362", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2013-3362", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 11.7.700.242 and 11.8.x before 11.8.800.168 on Windows and Mac OS X, before 11.2.202.310 on Linux, before 11.1.111.73 on Android 2.x and 3.x, and before 11.1.115.81 on Android 4.x; Adobe AIR before 3.8.0.1430; and Adobe AIR SDK & Compiler before 3.8.0.1430 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2013-3361, CVE-2013-3363, and CVE-2013-5324.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2013-3362", url: "https://www.suse.com/security/cve/CVE-2013-3362", }, { category: "external", summary: "SUSE Bug 839897 for CVE-2013-3362", url: "https://bugzilla.suse.com/839897", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2013-3362", }, { cve: "CVE-2013-3363", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2013-3363", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 11.7.700.242 and 11.8.x before 11.8.800.168 on Windows and Mac OS X, before 11.2.202.310 on Linux, before 11.1.111.73 on Android 2.x and 3.x, and before 11.1.115.81 on Android 4.x; Adobe AIR before 3.8.0.1430; and Adobe AIR SDK & Compiler before 3.8.0.1430 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2013-3361, CVE-2013-3362, and CVE-2013-5324.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2013-3363", url: "https://www.suse.com/security/cve/CVE-2013-3363", }, { category: "external", summary: "SUSE Bug 839897 for CVE-2013-3363", url: "https://bugzilla.suse.com/839897", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2013-3363", }, { cve: "CVE-2013-5324", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2013-5324", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 11.7.700.242 and 11.8.x before 11.8.800.168 on Windows and Mac OS X, before 11.2.202.310 on Linux, before 11.1.111.73 on Android 2.x and 3.x, and before 11.1.115.81 on Android 4.x; Adobe AIR before 3.8.0.1430; and Adobe AIR SDK & Compiler before 3.8.0.1430 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2013-3361, CVE-2013-3362, and CVE-2013-3363.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2013-5324", url: "https://www.suse.com/security/cve/CVE-2013-5324", }, { category: "external", summary: "SUSE Bug 839897 for CVE-2013-5324", url: "https://bugzilla.suse.com/839897", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2013-5324", }, { cve: "CVE-2013-5329", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2013-5329", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 11.7.700.252 and 11.8.x and 11.9.x before 11.9.900.152 on Windows and Mac OS X and before 11.2.202.327 on Linux, Adobe AIR before 3.9.0.1210, Adobe AIR SDK before 3.9.0.1210, and Adobe AIR SDK & Compiler before 3.9.0.1210 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2013-5330.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2013-5329", url: "https://www.suse.com/security/cve/CVE-2013-5329", }, { category: "external", summary: "SUSE Bug 850220 for CVE-2013-5329", url: "https://bugzilla.suse.com/850220", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "important", }, ], title: "CVE-2013-5329", }, { cve: "CVE-2013-5330", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2013-5330", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 11.7.700.252 and 11.8.x and 11.9.x before 11.9.900.152 on Windows and Mac OS X and before 11.2.202.327 on Linux, Adobe AIR before 3.9.0.1210, Adobe AIR SDK before 3.9.0.1210, and Adobe AIR SDK & Compiler before 3.9.0.1210 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2013-5329.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2013-5330", url: "https://www.suse.com/security/cve/CVE-2013-5330", }, { category: "external", summary: "SUSE Bug 850220 for CVE-2013-5330", url: "https://bugzilla.suse.com/850220", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "important", }, ], title: "CVE-2013-5330", }, { cve: "CVE-2013-5331", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2013-5331", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 11.7.700.257 and 11.8.x and 11.9.x before 11.9.900.170 on Windows and Mac OS X and before 11.2.202.332 on Linux, Adobe AIR before 3.9.0.1380, Adobe AIR SDK before 3.9.0.1380, and Adobe AIR SDK & Compiler before 3.9.0.1380 allow remote attackers to execute arbitrary code via crafted .swf content that leverages an unspecified \"type confusion,\" as exploited in the wild in December 2013.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2013-5331", url: "https://www.suse.com/security/cve/CVE-2013-5331", }, { category: "external", summary: "SUSE Bug 854881 for CVE-2013-5331", url: "https://bugzilla.suse.com/854881", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2013-5331", }, { cve: "CVE-2013-5332", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2013-5332", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 11.7.700.257 and 11.8.x and 11.9.x before 11.9.900.170 on Windows and Mac OS X and before 11.2.202.332 on Linux, Adobe AIR before 3.9.0.1380, Adobe AIR SDK before 3.9.0.1380, and Adobe AIR SDK & Compiler before 3.9.0.1380 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2013-5332", url: "https://www.suse.com/security/cve/CVE-2013-5332", }, { category: "external", summary: "SUSE Bug 854881 for CVE-2013-5332", url: "https://bugzilla.suse.com/854881", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2013-5332", }, { cve: "CVE-2014-0491", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0491", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 11.7.700.260 and 11.8.x and 11.9.x before 12.0.0.38 on Windows and Mac OS X and before 11.2.202.335 on Linux, Adobe AIR before 4.0.0.1390, Adobe AIR SDK before 4.0.0.1390, and Adobe AIR SDK & Compiler before 4.0.0.1390 allow attackers to bypass unspecified protection mechanisms via unknown vectors.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0491", url: "https://www.suse.com/security/cve/CVE-2014-0491", }, { category: "external", summary: "SUSE Bug 858822 for CVE-2014-0491", url: "https://bugzilla.suse.com/858822", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2014-0491", }, { cve: "CVE-2014-0492", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0492", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 11.7.700.260 and 11.8.x and 11.9.x before 12.0.0.38 on Windows and Mac OS X and before 11.2.202.335 on Linux, Adobe AIR before 4.0.0.1390, Adobe AIR SDK before 4.0.0.1390, and Adobe AIR SDK & Compiler before 4.0.0.1390 allow attackers to defeat the ASLR protection mechanism by leveraging an \"address leak.\"", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0492", url: "https://www.suse.com/security/cve/CVE-2014-0492", }, { category: "external", summary: "SUSE Bug 858822 for CVE-2014-0492", url: "https://bugzilla.suse.com/858822", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2014-0492", }, { cve: "CVE-2014-0497", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0497", }, ], notes: [ { category: "general", text: "Integer underflow in Adobe Flash Player before 11.7.700.261 and 11.8.x through 12.0.x before 12.0.0.44 on Windows and Mac OS X, and before 11.2.202.336 on Linux, allows remote attackers to execute arbitrary code via unspecified vectors.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0497", url: "https://www.suse.com/security/cve/CVE-2014-0497", }, { category: "external", summary: "SUSE Bug 862288 for CVE-2014-0497", url: "https://bugzilla.suse.com/862288", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 9.8, baseSeverity: "CRITICAL", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2014-0497", }, { cve: "CVE-2014-0498", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0498", }, ], notes: [ { category: "general", text: "Stack-based buffer overflow in Adobe Flash Player before 11.7.700.269 and 11.8.x through 12.0.x before 12.0.0.70 on Windows and Mac OS X and before 11.2.202.341 on Linux, Adobe AIR before 4.0.0.1628 on Android, Adobe AIR SDK before 4.0.0.1628, and Adobe AIR SDK & Compiler before 4.0.0.1628 allows attackers to execute arbitrary code via unspecified vectors.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0498", url: "https://www.suse.com/security/cve/CVE-2014-0498", }, { category: "external", summary: "SUSE Bug 865021 for CVE-2014-0498", url: "https://bugzilla.suse.com/865021", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2014-0498", }, { cve: "CVE-2014-0499", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0499", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 11.7.700.269 and 11.8.x through 12.0.x before 12.0.0.70 on Windows and Mac OS X and before 11.2.202.341 on Linux, Adobe AIR before 4.0.0.1628 on Android, Adobe AIR SDK before 4.0.0.1628, and Adobe AIR SDK & Compiler before 4.0.0.1628 do not prevent access to address information, which makes it easier for attackers to bypass the ASLR protection mechanism via unspecified vectors.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0499", url: "https://www.suse.com/security/cve/CVE-2014-0499", }, { category: "external", summary: "SUSE Bug 865021 for CVE-2014-0499", url: "https://bugzilla.suse.com/865021", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2014-0499", }, { cve: "CVE-2014-0502", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0502", }, ], notes: [ { category: "general", text: "Double free vulnerability in Adobe Flash Player before 11.7.700.269 and 11.8.x through 12.0.x before 12.0.0.70 on Windows and Mac OS X and before 11.2.202.341 on Linux, Adobe AIR before 4.0.0.1628 on Android, Adobe AIR SDK before 4.0.0.1628, and Adobe AIR SDK & Compiler before 4.0.0.1628 allows remote attackers to execute arbitrary code via unspecified vectors, as exploited in the wild in February 2014.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0502", url: "https://www.suse.com/security/cve/CVE-2014-0502", }, { category: "external", summary: "SUSE Bug 865021 for CVE-2014-0502", url: "https://bugzilla.suse.com/865021", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 8.8, baseSeverity: "HIGH", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2014-0502", }, { cve: "CVE-2014-0503", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0503", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 11.7.700.272 and 11.8.x through 12.0.x before 12.0.0.77 on Windows and OS X, and before 11.2.202.346 on Linux, allows remote attackers to bypass the Same Origin Policy via unspecified vectors.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0503", url: "https://www.suse.com/security/cve/CVE-2014-0503", }, { category: "external", summary: "SUSE Bug 867808 for CVE-2014-0503", url: "https://bugzilla.suse.com/867808", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2014-0503", }, { cve: "CVE-2014-0504", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0504", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 11.7.700.272 and 11.8.x through 12.0.x before 12.0.0.77 on Windows and OS X, and before 11.2.202.346 on Linux, allows attackers to read the clipboard via unspecified vectors.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0504", url: "https://www.suse.com/security/cve/CVE-2014-0504", }, { category: "external", summary: "SUSE Bug 867808 for CVE-2014-0504", url: "https://bugzilla.suse.com/867808", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2014-0504", }, { cve: "CVE-2014-0506", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0506", }, ], notes: [ { category: "general", text: "Use-after-free vulnerability in Adobe Flash Player before 11.7.700.275 and 11.8.x through 13.0.x before 13.0.0.182 on Windows and OS X and before 11.2.202.350 on Linux, Adobe AIR before 13.0.0.83 on Android, Adobe AIR SDK before 13.0.0.83, and Adobe AIR SDK & Compiler before 13.0.0.83 allows remote attackers to execute arbitrary code, and possibly bypass an Internet Explorer sandbox protection mechanism, via unspecified vectors, as demonstrated by VUPEN during a Pwn2Own competition at CanSecWest 2014.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0506", url: "https://www.suse.com/security/cve/CVE-2014-0506", }, { category: "external", summary: "SUSE Bug 872692 for CVE-2014-0506", url: "https://bugzilla.suse.com/872692", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2014-0506", }, { cve: "CVE-2014-0507", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0507", }, ], notes: [ { category: "general", text: "Buffer overflow in Adobe Flash Player before 11.7.700.275 and 11.8.x through 13.0.x before 13.0.0.182 on Windows and OS X and before 11.2.202.350 on Linux, Adobe AIR before 13.0.0.83 on Android, Adobe AIR SDK before 13.0.0.83, and Adobe AIR SDK & Compiler before 13.0.0.83 allows attackers to execute arbitrary code via unspecified vectors.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0507", url: "https://www.suse.com/security/cve/CVE-2014-0507", }, { category: "external", summary: "SUSE Bug 872692 for CVE-2014-0507", url: "https://bugzilla.suse.com/872692", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2014-0507", }, { cve: "CVE-2014-0508", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0508", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 11.7.700.275 and 11.8.x through 13.0.x before 13.0.0.182 on Windows and OS X and before 11.2.202.350 on Linux, Adobe AIR before 13.0.0.83 on Android, Adobe AIR SDK before 13.0.0.83, and Adobe AIR SDK & Compiler before 13.0.0.83 allow attackers to bypass intended access restrictions and obtain sensitive information via unspecified vectors.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0508", url: "https://www.suse.com/security/cve/CVE-2014-0508", }, { category: "external", summary: "SUSE Bug 872692 for CVE-2014-0508", url: "https://bugzilla.suse.com/872692", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "moderate", }, ], title: "CVE-2014-0508", }, { cve: "CVE-2014-0509", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0509", }, ], notes: [ { category: "general", text: "Cross-site scripting (XSS) vulnerability in Adobe Flash Player before 11.7.700.275 and 11.8.x through 13.0.x before 13.0.0.182 on Windows and OS X and before 11.2.202.350 on Linux, Adobe AIR before 13.0.0.83 on Android, Adobe AIR SDK before 13.0.0.83, and Adobe AIR SDK & Compiler before 13.0.0.83 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0509", url: "https://www.suse.com/security/cve/CVE-2014-0509", }, { category: "external", summary: "SUSE Bug 872692 for CVE-2014-0509", url: "https://bugzilla.suse.com/872692", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "moderate", }, ], title: "CVE-2014-0509", }, { cve: "CVE-2014-0510", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0510", }, ], notes: [ { category: "general", text: "Heap-based buffer overflow in Adobe Flash Player 12.0.0.77 allows remote attackers to execute arbitrary code and bypass a sandbox protection mechanism via unspecified vectors, as demonstrated by Zeguang Zhao and Liang Chen during a Pwn2Own competition at CanSecWest 2014.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0510", url: "https://www.suse.com/security/cve/CVE-2014-0510", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2014-0510", }, { cve: "CVE-2014-0515", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0515", }, ], notes: [ { category: "general", text: "Buffer overflow in Adobe Flash Player before 11.7.700.279 and 11.8.x through 13.0.x before 13.0.0.206 on Windows and OS X, and before 11.2.202.356 on Linux, allows remote attackers to execute arbitrary code via unspecified vectors, as exploited in the wild in April 2014.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0515", url: "https://www.suse.com/security/cve/CVE-2014-0515", }, { category: "external", summary: "SUSE Bug 875577 for CVE-2014-0515", url: "https://bugzilla.suse.com/875577", }, { category: "external", summary: "SUSE Bug 886454 for CVE-2014-0515", url: "https://bugzilla.suse.com/886454", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2014-0515", }, { cve: "CVE-2014-0516", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0516", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.214 on Windows and OS X and before 11.2.202.359 on Linux, Adobe AIR SDK before 13.0.0.111, and Adobe AIR SDK & Compiler before 13.0.0.111 allow remote attackers to bypass the Same Origin Policy via unspecified vectors.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0516", url: "https://www.suse.com/security/cve/CVE-2014-0516", }, { category: "external", summary: "SUSE Bug 877649 for CVE-2014-0516", url: "https://bugzilla.suse.com/877649", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "important", }, ], title: "CVE-2014-0516", }, { cve: "CVE-2014-0517", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0517", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.214 on Windows and OS X and before 11.2.202.359 on Linux, Adobe AIR SDK before 13.0.0.111, and Adobe AIR SDK & Compiler before 13.0.0.111 allow attackers to bypass intended access restrictions via unspecified vectors, a different vulnerability than CVE-2014-0518, CVE-2014-0519, and CVE-2014-0520.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0517", url: "https://www.suse.com/security/cve/CVE-2014-0517", }, { category: "external", summary: "SUSE Bug 877649 for CVE-2014-0517", url: "https://bugzilla.suse.com/877649", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "important", }, ], title: "CVE-2014-0517", }, { cve: "CVE-2014-0518", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0518", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.214 on Windows and OS X and before 11.2.202.359 on Linux, Adobe AIR SDK before 13.0.0.111, and Adobe AIR SDK & Compiler before 13.0.0.111 allow attackers to bypass intended access restrictions via unspecified vectors, a different vulnerability than CVE-2014-0517, CVE-2014-0519, and CVE-2014-0520.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0518", url: "https://www.suse.com/security/cve/CVE-2014-0518", }, { category: "external", summary: "SUSE Bug 877649 for CVE-2014-0518", url: "https://bugzilla.suse.com/877649", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "important", }, ], title: "CVE-2014-0518", }, { cve: "CVE-2014-0519", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0519", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.214 on Windows and OS X and before 11.2.202.359 on Linux, Adobe AIR SDK before 13.0.0.111, and Adobe AIR SDK & Compiler before 13.0.0.111 allow attackers to bypass intended access restrictions via unspecified vectors, a different vulnerability than CVE-2014-0517, CVE-2014-0518, and CVE-2014-0520.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0519", url: "https://www.suse.com/security/cve/CVE-2014-0519", }, { category: "external", summary: "SUSE Bug 877649 for CVE-2014-0519", url: "https://bugzilla.suse.com/877649", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "important", }, ], title: "CVE-2014-0519", }, { cve: "CVE-2014-0520", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0520", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.214 on Windows and OS X and before 11.2.202.359 on Linux, Adobe AIR SDK before 13.0.0.111, and Adobe AIR SDK & Compiler before 13.0.0.111 allow attackers to bypass intended access restrictions via unspecified vectors, a different vulnerability than CVE-2014-0517, CVE-2014-0518, and CVE-2014-0519.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0520", url: "https://www.suse.com/security/cve/CVE-2014-0520", }, { category: "external", summary: "SUSE Bug 877649 for CVE-2014-0520", url: "https://bugzilla.suse.com/877649", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "important", }, ], title: "CVE-2014-0520", }, { cve: "CVE-2014-0531", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0531", }, ], notes: [ { category: "general", text: "Cross-site scripting (XSS) vulnerability in Adobe Flash Player before 13.0.0.223 and 14.x before 14.0.0.125 on Windows and OS X and before 11.2.202.378 on Linux, Adobe AIR before 14.0.0.110, Adobe AIR SDK before 14.0.0.110, and Adobe AIR SDK & Compiler before 14.0.0.110 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2014-0532 and CVE-2014-0533.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0531", url: "https://www.suse.com/security/cve/CVE-2014-0531", }, { category: "external", summary: "SUSE Bug 882187 for CVE-2014-0531", url: "https://bugzilla.suse.com/882187", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2014-0531", }, { cve: "CVE-2014-0532", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0532", }, ], notes: [ { category: "general", text: "Cross-site scripting (XSS) vulnerability in Adobe Flash Player before 13.0.0.223 and 14.x before 14.0.0.125 on Windows and OS X and before 11.2.202.378 on Linux, Adobe AIR before 14.0.0.110, Adobe AIR SDK before 14.0.0.110, and Adobe AIR SDK & Compiler before 14.0.0.110 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2014-0531 and CVE-2014-0533.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0532", url: "https://www.suse.com/security/cve/CVE-2014-0532", }, { category: "external", summary: "SUSE Bug 882187 for CVE-2014-0532", url: "https://bugzilla.suse.com/882187", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2014-0532", }, { cve: "CVE-2014-0533", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0533", }, ], notes: [ { category: "general", text: "Cross-site scripting (XSS) vulnerability in Adobe Flash Player before 13.0.0.223 and 14.x before 14.0.0.125 on Windows and OS X and before 11.2.202.378 on Linux, Adobe AIR before 14.0.0.110, Adobe AIR SDK before 14.0.0.110, and Adobe AIR SDK & Compiler before 14.0.0.110 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2014-0531 and CVE-2014-0532.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0533", url: "https://www.suse.com/security/cve/CVE-2014-0533", }, { category: "external", summary: "SUSE Bug 882187 for CVE-2014-0533", url: "https://bugzilla.suse.com/882187", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2014-0533", }, { cve: "CVE-2014-0534", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0534", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.223 and 14.x before 14.0.0.125 on Windows and OS X and before 11.2.202.378 on Linux, Adobe AIR before 14.0.0.110, Adobe AIR SDK before 14.0.0.110, and Adobe AIR SDK & Compiler before 14.0.0.110 allow attackers to bypass intended access restrictions via unspecified vectors, a different vulnerability than CVE-2014-0535.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0534", url: "https://www.suse.com/security/cve/CVE-2014-0534", }, { category: "external", summary: "SUSE Bug 882187 for CVE-2014-0534", url: "https://bugzilla.suse.com/882187", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2014-0534", }, { cve: "CVE-2014-0535", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0535", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.223 and 14.x before 14.0.0.125 on Windows and OS X and before 11.2.202.378 on Linux, Adobe AIR before 14.0.0.110, Adobe AIR SDK before 14.0.0.110, and Adobe AIR SDK & Compiler before 14.0.0.110 allow attackers to bypass intended access restrictions via unspecified vectors, a different vulnerability than CVE-2014-0534.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0535", url: "https://www.suse.com/security/cve/CVE-2014-0535", }, { category: "external", summary: "SUSE Bug 882187 for CVE-2014-0535", url: "https://bugzilla.suse.com/882187", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2014-0535", }, { cve: "CVE-2014-0536", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0536", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.223 and 14.x before 14.0.0.125 on Windows and OS X and before 11.2.202.378 on Linux, Adobe AIR before 14.0.0.110, Adobe AIR SDK before 14.0.0.110, and Adobe AIR SDK & Compiler before 14.0.0.110 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0536", url: "https://www.suse.com/security/cve/CVE-2014-0536", }, { category: "external", summary: "SUSE Bug 882187 for CVE-2014-0536", url: "https://bugzilla.suse.com/882187", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2014-0536", }, { cve: "CVE-2014-0537", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0537", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.231 and 14.x before 14.0.0.145 on Windows and OS X and before 11.2.202.394 on Linux, Adobe AIR before 14.0.0.137 on Android, Adobe AIR SDK before 14.0.0.137, and Adobe AIR SDK & Compiler before 14.0.0.137 allow attackers to bypass intended access restrictions via unspecified vectors, a different vulnerability than CVE-2014-0539.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0537", url: "https://www.suse.com/security/cve/CVE-2014-0537", }, { category: "external", summary: "SUSE Bug 886454 for CVE-2014-0537", url: "https://bugzilla.suse.com/886454", }, { category: "external", summary: "SUSE Bug 886472 for CVE-2014-0537", url: "https://bugzilla.suse.com/886472", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2014-0537", }, { cve: "CVE-2014-0538", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0538", }, ], notes: [ { category: "general", text: "Use-after-free vulnerability in Adobe Flash Player before 13.0.0.241 and 14.x before 14.0.0.176 on Windows and OS X and before 11.2.202.400 on Linux, Adobe AIR before 14.0.0.178 on Windows and OS X and before 14.0.0.179 on Android, Adobe AIR SDK before 14.0.0.178, and Adobe AIR SDK & Compiler before 14.0.0.178 allows attackers to execute arbitrary code via unspecified vectors.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0538", url: "https://www.suse.com/security/cve/CVE-2014-0538", }, { category: "external", summary: "SUSE Bug 891688 for CVE-2014-0538", url: "https://bugzilla.suse.com/891688", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2014-0538", }, { cve: "CVE-2014-0539", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0539", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.231 and 14.x before 14.0.0.145 on Windows and OS X and before 11.2.202.394 on Linux, Adobe AIR before 14.0.0.137 on Android, Adobe AIR SDK before 14.0.0.137, and Adobe AIR SDK & Compiler before 14.0.0.137 allow attackers to bypass intended access restrictions via unspecified vectors, a different vulnerability than CVE-2014-0537.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0539", url: "https://www.suse.com/security/cve/CVE-2014-0539", }, { category: "external", summary: "SUSE Bug 886454 for CVE-2014-0539", url: "https://bugzilla.suse.com/886454", }, { category: "external", summary: "SUSE Bug 886472 for CVE-2014-0539", url: "https://bugzilla.suse.com/886472", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2014-0539", }, { cve: "CVE-2014-0540", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0540", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.241 and 14.x before 14.0.0.176 on Windows and OS X and before 11.2.202.400 on Linux, Adobe AIR before 14.0.0.178 on Windows and OS X and before 14.0.0.179 on Android, Adobe AIR SDK before 14.0.0.178, and Adobe AIR SDK & Compiler before 14.0.0.178 do not properly restrict discovery of memory addresses, which allows attackers to bypass the ASLR protection mechanism via unspecified vectors, a different vulnerability than CVE-2014-0542, CVE-2014-0543, CVE-2014-0544, and CVE-2014-0545.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0540", url: "https://www.suse.com/security/cve/CVE-2014-0540", }, { category: "external", summary: "SUSE Bug 891688 for CVE-2014-0540", url: "https://bugzilla.suse.com/891688", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2014-0540", }, { cve: "CVE-2014-0541", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0541", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.241 and 14.x before 14.0.0.176 on Windows and OS X and before 11.2.202.400 on Linux, Adobe AIR before 14.0.0.178 on Windows and OS X and before 14.0.0.179 on Android, Adobe AIR SDK before 14.0.0.178, and Adobe AIR SDK & Compiler before 14.0.0.178 allow attackers to bypass intended access restrictions via unspecified vectors.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0541", url: "https://www.suse.com/security/cve/CVE-2014-0541", }, { category: "external", summary: "SUSE Bug 891688 for CVE-2014-0541", url: "https://bugzilla.suse.com/891688", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2014-0541", }, { cve: "CVE-2014-0542", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0542", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.241 and 14.x before 14.0.0.176 on Windows and OS X and before 11.2.202.400 on Linux, Adobe AIR before 14.0.0.178 on Windows and OS X and before 14.0.0.179 on Android, Adobe AIR SDK before 14.0.0.178, and Adobe AIR SDK & Compiler before 14.0.0.178 do not properly restrict discovery of memory addresses, which allows attackers to bypass the ASLR protection mechanism via unspecified vectors, a different vulnerability than CVE-2014-0540, CVE-2014-0543, CVE-2014-0544, and CVE-2014-0545.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0542", url: "https://www.suse.com/security/cve/CVE-2014-0542", }, { category: "external", summary: "SUSE Bug 891688 for CVE-2014-0542", url: "https://bugzilla.suse.com/891688", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2014-0542", }, { cve: "CVE-2014-0543", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0543", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.241 and 14.x before 14.0.0.176 on Windows and OS X and before 11.2.202.400 on Linux, Adobe AIR before 14.0.0.178 on Windows and OS X and before 14.0.0.179 on Android, Adobe AIR SDK before 14.0.0.178, and Adobe AIR SDK & Compiler before 14.0.0.178 do not properly restrict discovery of memory addresses, which allows attackers to bypass the ASLR protection mechanism via unspecified vectors, a different vulnerability than CVE-2014-0540, CVE-2014-0542, CVE-2014-0544, and CVE-2014-0545.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0543", url: "https://www.suse.com/security/cve/CVE-2014-0543", }, { category: "external", summary: "SUSE Bug 891688 for CVE-2014-0543", url: "https://bugzilla.suse.com/891688", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2014-0543", }, { cve: "CVE-2014-0544", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0544", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.241 and 14.x before 14.0.0.176 on Windows and OS X and before 11.2.202.400 on Linux, Adobe AIR before 14.0.0.178 on Windows and OS X and before 14.0.0.179 on Android, Adobe AIR SDK before 14.0.0.178, and Adobe AIR SDK & Compiler before 14.0.0.178 do not properly restrict discovery of memory addresses, which allows attackers to bypass the ASLR protection mechanism via unspecified vectors, a different vulnerability than CVE-2014-0540, CVE-2014-0542, CVE-2014-0543, and CVE-2014-0545.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0544", url: "https://www.suse.com/security/cve/CVE-2014-0544", }, { category: "external", summary: "SUSE Bug 891688 for CVE-2014-0544", url: "https://bugzilla.suse.com/891688", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2014-0544", }, { cve: "CVE-2014-0545", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0545", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.241 and 14.x before 14.0.0.176 on Windows and OS X and before 11.2.202.400 on Linux, Adobe AIR before 14.0.0.178 on Windows and OS X and before 14.0.0.179 on Android, Adobe AIR SDK before 14.0.0.178, and Adobe AIR SDK & Compiler before 14.0.0.178 do not properly restrict discovery of memory addresses, which allows attackers to bypass the ASLR protection mechanism via unspecified vectors, a different vulnerability than CVE-2014-0540, CVE-2014-0542, CVE-2014-0543, and CVE-2014-0544.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0545", url: "https://www.suse.com/security/cve/CVE-2014-0545", }, { category: "external", summary: "SUSE Bug 891688 for CVE-2014-0545", url: "https://bugzilla.suse.com/891688", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2014-0545", }, { cve: "CVE-2014-0547", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0547", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.244 and 14.x and 15.x before 15.0.0.152 on Windows and OS X and before 11.2.202.406 on Linux, Adobe AIR before 15.0.0.249 on Windows and OS X and before 15.0.0.252 on Android, Adobe AIR SDK before 15.0.0.249, and Adobe AIR SDK & Compiler before 15.0.0.249 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2014-0549, CVE-2014-0550, CVE-2014-0551, CVE-2014-0552, and CVE-2014-0555.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0547", url: "https://www.suse.com/security/cve/CVE-2014-0547", }, { category: "external", summary: "SUSE Bug 895856 for CVE-2014-0547", url: "https://bugzilla.suse.com/895856", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2014-0547", }, { cve: "CVE-2014-0548", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0548", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.244 and 14.x and 15.x before 15.0.0.152 on Windows and OS X and before 11.2.202.406 on Linux, Adobe AIR before 15.0.0.249 on Windows and OS X and before 15.0.0.252 on Android, Adobe AIR SDK before 15.0.0.249, and Adobe AIR SDK & Compiler before 15.0.0.249 allow remote attackers to bypass the Same Origin Policy via unspecified vectors.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0548", url: "https://www.suse.com/security/cve/CVE-2014-0548", }, { category: "external", summary: "SUSE Bug 895856 for CVE-2014-0548", url: "https://bugzilla.suse.com/895856", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2014-0548", }, { cve: "CVE-2014-0549", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0549", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.244 and 14.x and 15.x before 15.0.0.152 on Windows and OS X and before 11.2.202.406 on Linux, Adobe AIR before 15.0.0.249 on Windows and OS X and before 15.0.0.252 on Android, Adobe AIR SDK before 15.0.0.249, and Adobe AIR SDK & Compiler before 15.0.0.249 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2014-0547, CVE-2014-0550, CVE-2014-0551, CVE-2014-0552, and CVE-2014-0555.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0549", url: "https://www.suse.com/security/cve/CVE-2014-0549", }, { category: "external", summary: "SUSE Bug 895856 for CVE-2014-0549", url: "https://bugzilla.suse.com/895856", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2014-0549", }, { cve: "CVE-2014-0550", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0550", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.244 and 14.x and 15.x before 15.0.0.152 on Windows and OS X and before 11.2.202.406 on Linux, Adobe AIR before 15.0.0.249 on Windows and OS X and before 15.0.0.252 on Android, Adobe AIR SDK before 15.0.0.249, and Adobe AIR SDK & Compiler before 15.0.0.249 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2014-0547, CVE-2014-0549, CVE-2014-0551, CVE-2014-0552, and CVE-2014-0555.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0550", url: "https://www.suse.com/security/cve/CVE-2014-0550", }, { category: "external", summary: "SUSE Bug 895856 for CVE-2014-0550", url: "https://bugzilla.suse.com/895856", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2014-0550", }, { cve: "CVE-2014-0551", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0551", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.244 and 14.x and 15.x before 15.0.0.152 on Windows and OS X and before 11.2.202.406 on Linux, Adobe AIR before 15.0.0.249 on Windows and OS X and before 15.0.0.252 on Android, Adobe AIR SDK before 15.0.0.249, and Adobe AIR SDK & Compiler before 15.0.0.249 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2014-0547, CVE-2014-0549, CVE-2014-0550, CVE-2014-0552, and CVE-2014-0555.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0551", url: "https://www.suse.com/security/cve/CVE-2014-0551", }, { category: "external", summary: "SUSE Bug 895856 for CVE-2014-0551", url: "https://bugzilla.suse.com/895856", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2014-0551", }, { cve: "CVE-2014-0552", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0552", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.244 and 14.x and 15.x before 15.0.0.152 on Windows and OS X and before 11.2.202.406 on Linux, Adobe AIR before 15.0.0.249 on Windows and OS X and before 15.0.0.252 on Android, Adobe AIR SDK before 15.0.0.249, and Adobe AIR SDK & Compiler before 15.0.0.249 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2014-0547, CVE-2014-0549, CVE-2014-0550, CVE-2014-0551, and CVE-2014-0555.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0552", url: "https://www.suse.com/security/cve/CVE-2014-0552", }, { category: "external", summary: "SUSE Bug 895856 for CVE-2014-0552", url: "https://bugzilla.suse.com/895856", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2014-0552", }, { cve: "CVE-2014-0553", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0553", }, ], notes: [ { category: "general", text: "Use-after-free vulnerability in Adobe Flash Player before 13.0.0.244 and 14.x and 15.x before 15.0.0.152 on Windows and OS X and before 11.2.202.406 on Linux, Adobe AIR before 15.0.0.249 on Windows and OS X and before 15.0.0.252 on Android, Adobe AIR SDK before 15.0.0.249, and Adobe AIR SDK & Compiler before 15.0.0.249 allows attackers to execute arbitrary code via unspecified vectors.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0553", url: "https://www.suse.com/security/cve/CVE-2014-0553", }, { category: "external", summary: "SUSE Bug 895856 for CVE-2014-0553", url: "https://bugzilla.suse.com/895856", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2014-0553", }, { cve: "CVE-2014-0554", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0554", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.244 and 14.x and 15.x before 15.0.0.152 on Windows and OS X and before 11.2.202.406 on Linux, Adobe AIR before 15.0.0.249 on Windows and OS X and before 15.0.0.252 on Android, Adobe AIR SDK before 15.0.0.249, and Adobe AIR SDK & Compiler before 15.0.0.249 allow attackers to bypass intended access restrictions via unspecified vectors.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0554", url: "https://www.suse.com/security/cve/CVE-2014-0554", }, { category: "external", summary: "SUSE Bug 895856 for CVE-2014-0554", url: "https://bugzilla.suse.com/895856", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2014-0554", }, { cve: "CVE-2014-0555", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0555", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.244 and 14.x and 15.x before 15.0.0.152 on Windows and OS X and before 11.2.202.406 on Linux, Adobe AIR before 15.0.0.249 on Windows and OS X and before 15.0.0.252 on Android, Adobe AIR SDK before 15.0.0.249, and Adobe AIR SDK & Compiler before 15.0.0.249 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2014-0547, CVE-2014-0549, CVE-2014-0550, CVE-2014-0551, and CVE-2014-0552.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0555", url: "https://www.suse.com/security/cve/CVE-2014-0555", }, { category: "external", summary: "SUSE Bug 895856 for CVE-2014-0555", url: "https://bugzilla.suse.com/895856", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2014-0555", }, { cve: "CVE-2014-0556", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0556", }, ], notes: [ { category: "general", text: "Heap-based buffer overflow in Adobe Flash Player before 13.0.0.244 and 14.x and 15.x before 15.0.0.152 on Windows and OS X and before 11.2.202.406 on Linux, Adobe AIR before 15.0.0.249 on Windows and OS X and before 15.0.0.252 on Android, Adobe AIR SDK before 15.0.0.249, and Adobe AIR SDK & Compiler before 15.0.0.249 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2014-0559.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0556", url: "https://www.suse.com/security/cve/CVE-2014-0556", }, { category: "external", summary: "SUSE Bug 895856 for CVE-2014-0556", url: "https://bugzilla.suse.com/895856", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2014-0556", }, { cve: "CVE-2014-0557", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0557", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.244 and 14.x and 15.x before 15.0.0.152 on Windows and OS X and before 11.2.202.406 on Linux, Adobe AIR before 15.0.0.249 on Windows and OS X and before 15.0.0.252 on Android, Adobe AIR SDK before 15.0.0.249, and Adobe AIR SDK & Compiler before 15.0.0.249 do not properly restrict discovery of memory addresses, which allows attackers to bypass the ASLR protection mechanism via unspecified vectors.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0557", url: "https://www.suse.com/security/cve/CVE-2014-0557", }, { category: "external", summary: "SUSE Bug 895856 for CVE-2014-0557", url: "https://bugzilla.suse.com/895856", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2014-0557", }, { cve: "CVE-2014-0558", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0558", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.250 and 14.x and 15.x before 15.0.0.189 on Windows and OS X and before 11.2.202.411 on Linux, Adobe AIR before 15.0.0.293, Adobe AIR SDK before 15.0.0.302, and Adobe AIR SDK & Compiler before 15.0.0.302 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2014-0564.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0558", url: "https://www.suse.com/security/cve/CVE-2014-0558", }, { category: "external", summary: "SUSE Bug 901334 for CVE-2014-0558", url: "https://bugzilla.suse.com/901334", }, { category: "external", summary: "SUSE Bug 905032 for CVE-2014-0558", url: "https://bugzilla.suse.com/905032", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "moderate", }, ], title: "CVE-2014-0558", }, { cve: "CVE-2014-0559", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0559", }, ], notes: [ { category: "general", text: "Heap-based buffer overflow in Adobe Flash Player before 13.0.0.244 and 14.x and 15.x before 15.0.0.152 on Windows and OS X and before 11.2.202.406 on Linux, Adobe AIR before 15.0.0.249 on Windows and OS X and before 15.0.0.252 on Android, Adobe AIR SDK before 15.0.0.249, and Adobe AIR SDK & Compiler before 15.0.0.249 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2014-0556.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0559", url: "https://www.suse.com/security/cve/CVE-2014-0559", }, { category: "external", summary: "SUSE Bug 895856 for CVE-2014-0559", url: "https://bugzilla.suse.com/895856", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2014-0559", }, { cve: "CVE-2014-0564", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0564", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.250 and 14.x and 15.x before 15.0.0.189 on Windows and OS X and before 11.2.202.411 on Linux, Adobe AIR before 15.0.0.293, Adobe AIR SDK before 15.0.0.302, and Adobe AIR SDK & Compiler before 15.0.0.302 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2014-0558.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0564", url: "https://www.suse.com/security/cve/CVE-2014-0564", }, { category: "external", summary: "SUSE Bug 901334 for CVE-2014-0564", url: "https://bugzilla.suse.com/901334", }, { category: "external", summary: "SUSE Bug 905032 for CVE-2014-0564", url: "https://bugzilla.suse.com/905032", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "moderate", }, ], title: "CVE-2014-0564", }, { cve: "CVE-2014-0569", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0569", }, ], notes: [ { category: "general", text: "Integer overflow in Adobe Flash Player before 13.0.0.250 and 14.x and 15.x before 15.0.0.189 on Windows and OS X and before 11.2.202.411 on Linux, Adobe AIR before 15.0.0.293, Adobe AIR SDK before 15.0.0.302, and Adobe AIR SDK & Compiler before 15.0.0.302 allows attackers to execute arbitrary code via unspecified vectors.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0569", url: "https://www.suse.com/security/cve/CVE-2014-0569", }, { category: "external", summary: "SUSE Bug 901334 for CVE-2014-0569", url: "https://bugzilla.suse.com/901334", }, { category: "external", summary: "SUSE Bug 905032 for CVE-2014-0569", url: "https://bugzilla.suse.com/905032", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "moderate", }, ], title: "CVE-2014-0569", }, { cve: "CVE-2014-0573", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0573", }, ], notes: [ { category: "general", text: "Use-after-free vulnerability in Adobe Flash Player before 13.0.0.252 and 14.x and 15.x before 15.0.0.223 on Windows and OS X and before 11.2.202.418 on Linux, Adobe AIR before 15.0.0.356, Adobe AIR SDK before 15.0.0.356, and Adobe AIR SDK & Compiler before 15.0.0.356 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2014-0588 and CVE-2014-8438.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0573", url: "https://www.suse.com/security/cve/CVE-2014-0573", }, { category: "external", summary: "SUSE Bug 905032 for CVE-2014-0573", url: "https://bugzilla.suse.com/905032", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2014-0573", }, { cve: "CVE-2014-0574", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0574", }, ], notes: [ { category: "general", text: "Double free vulnerability in Adobe Flash Player before 13.0.0.252 and 14.x and 15.x before 15.0.0.223 on Windows and OS X and before 11.2.202.418 on Linux, Adobe AIR before 15.0.0.356, Adobe AIR SDK before 15.0.0.356, and Adobe AIR SDK & Compiler before 15.0.0.356 allows attackers to execute arbitrary code via unspecified vectors.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0574", url: "https://www.suse.com/security/cve/CVE-2014-0574", }, { category: "external", summary: "SUSE Bug 905032 for CVE-2014-0574", url: "https://bugzilla.suse.com/905032", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2014-0574", }, { cve: "CVE-2014-0576", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0576", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.252 and 14.x and 15.x before 15.0.0.223 on Windows and OS X and before 11.2.202.418 on Linux, Adobe AIR before 15.0.0.356, Adobe AIR SDK before 15.0.0.356, and Adobe AIR SDK & Compiler before 15.0.0.356 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2014-0581, CVE-2014-8440, and CVE-2014-8441.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0576", url: "https://www.suse.com/security/cve/CVE-2014-0576", }, { category: "external", summary: "SUSE Bug 905032 for CVE-2014-0576", url: "https://bugzilla.suse.com/905032", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2014-0576", }, { cve: "CVE-2014-0577", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0577", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.252 and 14.x and 15.x before 15.0.0.223 on Windows and OS X and before 11.2.202.418 on Linux, Adobe AIR before 15.0.0.356, Adobe AIR SDK before 15.0.0.356, and Adobe AIR SDK & Compiler before 15.0.0.356 allow attackers to execute arbitrary code by leveraging an unspecified \"type confusion,\" a different vulnerability than CVE-2014-0584, CVE-2014-0585, CVE-2014-0586, and CVE-2014-0590.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0577", url: "https://www.suse.com/security/cve/CVE-2014-0577", }, { category: "external", summary: "SUSE Bug 905032 for CVE-2014-0577", url: "https://bugzilla.suse.com/905032", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2014-0577", }, { cve: "CVE-2014-0580", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0580", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.259 and 14.x through 16.x before 16.0.0.235 on Windows and OS X and before 11.2.202.425 on Linux allows remote attackers to bypass the Same Origin Policy via unspecified vectors.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0580", url: "https://www.suse.com/security/cve/CVE-2014-0580", }, { category: "external", summary: "SUSE Bug 909219 for CVE-2014-0580", url: "https://bugzilla.suse.com/909219", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2014-0580", }, { cve: "CVE-2014-0581", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0581", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.252 and 14.x and 15.x before 15.0.0.223 on Windows and OS X and before 11.2.202.418 on Linux, Adobe AIR before 15.0.0.356, Adobe AIR SDK before 15.0.0.356, and Adobe AIR SDK & Compiler before 15.0.0.356 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2014-0576, CVE-2014-8440, and CVE-2014-8441.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0581", url: "https://www.suse.com/security/cve/CVE-2014-0581", }, { category: "external", summary: "SUSE Bug 905032 for CVE-2014-0581", url: "https://bugzilla.suse.com/905032", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "important", }, ], title: "CVE-2014-0581", }, { cve: "CVE-2014-0582", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0582", }, ], notes: [ { category: "general", text: "Heap-based buffer overflow in Adobe Flash Player before 13.0.0.252 and 14.x and 15.x before 15.0.0.223 on Windows and OS X and before 11.2.202.418 on Linux, Adobe AIR before 15.0.0.356, Adobe AIR SDK before 15.0.0.356, and Adobe AIR SDK & Compiler before 15.0.0.356 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2014-0589.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0582", url: "https://www.suse.com/security/cve/CVE-2014-0582", }, { category: "external", summary: "SUSE Bug 905032 for CVE-2014-0582", url: "https://bugzilla.suse.com/905032", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "important", }, ], title: "CVE-2014-0582", }, { cve: "CVE-2014-0583", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0583", }, ], notes: [ { category: "general", text: "Heap-based buffer overflow in Adobe Flash Player before 13.0.0.252 and 14.x and 15.x before 15.0.0.223 on Windows and OS X and before 11.2.202.418 on Linux, Adobe AIR before 15.0.0.356, Adobe AIR SDK before 15.0.0.356, and Adobe AIR SDK & Compiler before 15.0.0.356 allows attackers to complete a transition from Low Integrity to Medium Integrity via unspecified vectors.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0583", url: "https://www.suse.com/security/cve/CVE-2014-0583", }, { category: "external", summary: "SUSE Bug 905032 for CVE-2014-0583", url: "https://bugzilla.suse.com/905032", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2014-0583", }, { cve: "CVE-2014-0584", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0584", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.252 and 14.x and 15.x before 15.0.0.223 on Windows and OS X and before 11.2.202.418 on Linux, Adobe AIR before 15.0.0.356, Adobe AIR SDK before 15.0.0.356, and Adobe AIR SDK & Compiler before 15.0.0.356 allow attackers to execute arbitrary code by leveraging an unspecified \"type confusion,\" a different vulnerability than CVE-2014-0577, CVE-2014-0585, CVE-2014-0586, and CVE-2014-0590.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0584", url: "https://www.suse.com/security/cve/CVE-2014-0584", }, { category: "external", summary: "SUSE Bug 905032 for CVE-2014-0584", url: "https://bugzilla.suse.com/905032", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "important", }, ], title: "CVE-2014-0584", }, { cve: "CVE-2014-0585", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0585", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.252 and 14.x and 15.x before 15.0.0.223 on Windows and OS X and before 11.2.202.418 on Linux, Adobe AIR before 15.0.0.356, Adobe AIR SDK before 15.0.0.356, and Adobe AIR SDK & Compiler before 15.0.0.356 allow attackers to execute arbitrary code by leveraging an unspecified \"type confusion,\" a different vulnerability than CVE-2014-0577, CVE-2014-0584, CVE-2014-0586, and CVE-2014-0590.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0585", url: "https://www.suse.com/security/cve/CVE-2014-0585", }, { category: "external", summary: "SUSE Bug 905032 for CVE-2014-0585", url: "https://bugzilla.suse.com/905032", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "important", }, ], title: "CVE-2014-0585", }, { cve: "CVE-2014-0586", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0586", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.252 and 14.x and 15.x before 15.0.0.223 on Windows and OS X and before 11.2.202.418 on Linux, Adobe AIR before 15.0.0.356, Adobe AIR SDK before 15.0.0.356, and Adobe AIR SDK & Compiler before 15.0.0.356 allow attackers to execute arbitrary code by leveraging an unspecified \"type confusion,\" a different vulnerability than CVE-2014-0577, CVE-2014-0584, CVE-2014-0585, and CVE-2014-0590.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0586", url: "https://www.suse.com/security/cve/CVE-2014-0586", }, { category: "external", summary: "SUSE Bug 905032 for CVE-2014-0586", url: "https://bugzilla.suse.com/905032", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "important", }, ], title: "CVE-2014-0586", }, { cve: "CVE-2014-0587", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0587", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.259 and 14.x through 16.x before 16.0.0.235 on Windows and OS X and before 11.2.202.425 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2014-9164.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0587", url: "https://www.suse.com/security/cve/CVE-2014-0587", }, { category: "external", summary: "SUSE Bug 909219 for CVE-2014-0587", url: "https://bugzilla.suse.com/909219", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2014-0587", }, { cve: "CVE-2014-0588", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0588", }, ], notes: [ { category: "general", text: "Use-after-free vulnerability in Adobe Flash Player before 13.0.0.252 and 14.x and 15.x before 15.0.0.223 on Windows and OS X and before 11.2.202.418 on Linux, Adobe AIR before 15.0.0.356, Adobe AIR SDK before 15.0.0.356, and Adobe AIR SDK & Compiler before 15.0.0.356 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2014-0573 and CVE-2014-8438.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0588", url: "https://www.suse.com/security/cve/CVE-2014-0588", }, { category: "external", summary: "SUSE Bug 905032 for CVE-2014-0588", url: "https://bugzilla.suse.com/905032", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "important", }, ], title: "CVE-2014-0588", }, { cve: "CVE-2014-0589", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0589", }, ], notes: [ { category: "general", text: "Heap-based buffer overflow in Adobe Flash Player before 13.0.0.252 and 14.x and 15.x before 15.0.0.223 on Windows and OS X and before 11.2.202.418 on Linux, Adobe AIR before 15.0.0.356, Adobe AIR SDK before 15.0.0.356, and Adobe AIR SDK & Compiler before 15.0.0.356 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2014-0582.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0589", url: "https://www.suse.com/security/cve/CVE-2014-0589", }, { category: "external", summary: "SUSE Bug 905032 for CVE-2014-0589", url: "https://bugzilla.suse.com/905032", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "important", }, ], title: "CVE-2014-0589", }, { cve: "CVE-2014-0590", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0590", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.252 and 14.x and 15.x before 15.0.0.223 on Windows and OS X and before 11.2.202.418 on Linux, Adobe AIR before 15.0.0.356, Adobe AIR SDK before 15.0.0.356, and Adobe AIR SDK & Compiler before 15.0.0.356 allow attackers to execute arbitrary code by leveraging an unspecified \"type confusion,\" a different vulnerability than CVE-2014-0577, CVE-2014-0584, CVE-2014-0585, and CVE-2014-0586.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0590", url: "https://www.suse.com/security/cve/CVE-2014-0590", }, { category: "external", summary: "SUSE Bug 905032 for CVE-2014-0590", url: "https://bugzilla.suse.com/905032", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "important", }, ], title: "CVE-2014-0590", }, { cve: "CVE-2014-4671", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-4671", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.231 and 14.x before 14.0.0.145 on Windows and OS X and before 11.2.202.394 on Linux, Adobe AIR before 14.0.0.137 on Android, Adobe AIR SDK before 14.0.0.137, and Adobe AIR SDK & Compiler before 14.0.0.137 do not properly restrict the SWF file format, which allows remote attackers to conduct cross-site request forgery (CSRF) attacks against JSONP endpoints, and obtain sensitive information, via a crafted OBJECT element with SWF content satisfying the character-set requirements of a callback API.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-4671", url: "https://www.suse.com/security/cve/CVE-2014-4671", }, { category: "external", summary: "SUSE Bug 886454 for CVE-2014-4671", url: "https://bugzilla.suse.com/886454", }, { category: "external", summary: "SUSE Bug 891688 for CVE-2014-4671", url: "https://bugzilla.suse.com/891688", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2014-4671", }, { cve: "CVE-2014-8437", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-8437", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.252 and 14.x and 15.x before 15.0.0.223 on Windows and OS X and before 11.2.202.418 on Linux, Adobe AIR before 15.0.0.356, Adobe AIR SDK before 15.0.0.356, and Adobe AIR SDK & Compiler before 15.0.0.356 allow remote attackers to discover session tokens via unspecified vectors.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-8437", url: "https://www.suse.com/security/cve/CVE-2014-8437", }, { category: "external", summary: "SUSE Bug 905032 for CVE-2014-8437", url: "https://bugzilla.suse.com/905032", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "important", }, ], title: "CVE-2014-8437", }, { cve: "CVE-2014-8438", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-8438", }, ], notes: [ { category: "general", text: "Use-after-free vulnerability in Adobe Flash Player before 13.0.0.252 and 14.x and 15.x before 15.0.0.223 on Windows and OS X and before 11.2.202.418 on Linux, Adobe AIR before 15.0.0.356, Adobe AIR SDK before 15.0.0.356, and Adobe AIR SDK & Compiler before 15.0.0.356 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2014-0573 and CVE-2014-0588.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-8438", url: "https://www.suse.com/security/cve/CVE-2014-8438", }, { category: "external", summary: "SUSE Bug 905032 for CVE-2014-8438", url: "https://bugzilla.suse.com/905032", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "important", }, ], title: "CVE-2014-8438", }, { cve: "CVE-2014-8439", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-8439", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.258 and 14.x and 15.x before 15.0.0.239 on Windows and OS X and before 11.2.202.424 on Linux, Adobe AIR before 15.0.0.293, Adobe AIR SDK before 15.0.0.302, and Adobe AIR SDK & Compiler before 15.0.0.302 allow attackers to execute arbitrary code or cause a denial of service (invalid pointer dereference) via unspecified vectors.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-8439", url: "https://www.suse.com/security/cve/CVE-2014-8439", }, { category: "external", summary: "SUSE Bug 907257 for CVE-2014-8439", url: "https://bugzilla.suse.com/907257", }, { category: "external", summary: "SUSE Bug 909219 for CVE-2014-8439", url: "https://bugzilla.suse.com/909219", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2014-8439", }, { cve: "CVE-2014-8440", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-8440", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.252 and 14.x and 15.x before 15.0.0.223 on Windows and OS X and before 11.2.202.418 on Linux, Adobe AIR before 15.0.0.356, Adobe AIR SDK before 15.0.0.356, and Adobe AIR SDK & Compiler before 15.0.0.356 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2014-0576, CVE-2014-0581, and CVE-2014-8441.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-8440", url: "https://www.suse.com/security/cve/CVE-2014-8440", }, { category: "external", summary: "SUSE Bug 905032 for CVE-2014-8440", url: "https://bugzilla.suse.com/905032", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "important", }, ], title: "CVE-2014-8440", }, { cve: "CVE-2014-8441", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-8441", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.252 and 14.x and 15.x before 15.0.0.223 on Windows and OS X and before 11.2.202.418 on Linux, Adobe AIR before 15.0.0.356, Adobe AIR SDK before 15.0.0.356, and Adobe AIR SDK & Compiler before 15.0.0.356 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2014-0576, CVE-2014-0581, and CVE-2014-8440.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-8441", url: "https://www.suse.com/security/cve/CVE-2014-8441", }, { category: "external", summary: "SUSE Bug 905032 for CVE-2014-8441", url: "https://bugzilla.suse.com/905032", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "important", }, ], title: "CVE-2014-8441", }, { cve: "CVE-2014-8442", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-8442", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.252 and 14.x and 15.x before 15.0.0.223 on Windows and OS X and before 11.2.202.418 on Linux, Adobe AIR before 15.0.0.356, Adobe AIR SDK before 15.0.0.356, and Adobe AIR SDK & Compiler before 15.0.0.356 allow attackers to complete a transition from Low Integrity to Medium Integrity by leveraging incorrect permissions.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-8442", url: "https://www.suse.com/security/cve/CVE-2014-8442", }, { category: "external", summary: "SUSE Bug 905032 for CVE-2014-8442", url: "https://bugzilla.suse.com/905032", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2014-8442", }, { cve: "CVE-2014-8443", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-8443", }, ], notes: [ { category: "general", text: "Use-after-free vulnerability in Adobe Flash Player before 13.0.0.259 and 14.x through 16.x before 16.0.0.235 on Windows and OS X and before 11.2.202.425 on Linux allows attackers to execute arbitrary code via unspecified vectors.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-8443", url: "https://www.suse.com/security/cve/CVE-2014-8443", }, { category: "external", summary: "SUSE Bug 909219 for CVE-2014-8443", url: "https://bugzilla.suse.com/909219", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2014-8443", }, { cve: "CVE-2014-9162", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-9162", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.259 and 14.x through 16.x before 16.0.0.235 on Windows and OS X and before 11.2.202.425 on Linux allows attackers to obtain sensitive information via unspecified vectors.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-9162", url: "https://www.suse.com/security/cve/CVE-2014-9162", }, { category: "external", summary: "SUSE Bug 909219 for CVE-2014-9162", url: "https://bugzilla.suse.com/909219", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2014-9162", }, { cve: "CVE-2014-9163", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-9163", }, ], notes: [ { category: "general", text: "Stack-based buffer overflow in Adobe Flash Player before 13.0.0.259 and 14.x and 15.x before 15.0.0.246 on Windows and OS X and before 11.2.202.425 on Linux allows attackers to execute arbitrary code via unspecified vectors, as exploited in the wild in December 2014.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-9163", url: "https://www.suse.com/security/cve/CVE-2014-9163", }, { category: "external", summary: "SUSE Bug 909219 for CVE-2014-9163", url: "https://bugzilla.suse.com/909219", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2014-9163", }, { cve: "CVE-2014-9164", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-9164", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.259 and 14.x through 16.x before 16.0.0.235 on Windows and OS X and before 11.2.202.425 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2014-0587.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-9164", url: "https://www.suse.com/security/cve/CVE-2014-9164", }, { category: "external", summary: "SUSE Bug 909219 for CVE-2014-9164", url: "https://bugzilla.suse.com/909219", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2014-9164", }, { cve: "CVE-2015-0301", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-0301", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.260 and 14.x through 16.x before 16.0.0.257 on Windows and OS X and before 11.2.202.429 on Linux, Adobe AIR before 16.0.0.245 on Windows and OS X and before 16.0.0.272 on Android, Adobe AIR SDK before 16.0.0.272, and Adobe AIR SDK & Compiler before 16.0.0.272 do not properly validate files, which has unspecified impact and attack vectors.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-0301", url: "https://www.suse.com/security/cve/CVE-2015-0301", }, { category: "external", summary: "SUSE Bug 913057 for CVE-2015-0301", url: "https://bugzilla.suse.com/913057", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2015-0301", }, { cve: "CVE-2015-0302", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-0302", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.260 and 14.x through 16.x before 16.0.0.257 on Windows and OS X and before 11.2.202.429 on Linux, Adobe AIR before 16.0.0.245 on Windows and OS X and before 16.0.0.272 on Android, Adobe AIR SDK before 16.0.0.272, and Adobe AIR SDK & Compiler before 16.0.0.272 allow attackers to obtain sensitive keystroke information via unspecified vectors.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-0302", url: "https://www.suse.com/security/cve/CVE-2015-0302", }, { category: "external", summary: "SUSE Bug 913057 for CVE-2015-0302", url: "https://bugzilla.suse.com/913057", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2015-0302", }, { cve: "CVE-2015-0303", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-0303", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.260 and 14.x through 16.x before 16.0.0.257 on Windows and OS X and before 11.2.202.429 on Linux, Adobe AIR before 16.0.0.245 on Windows and OS X and before 16.0.0.272 on Android, Adobe AIR SDK before 16.0.0.272, and Adobe AIR SDK & Compiler before 16.0.0.272 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-0306.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-0303", url: "https://www.suse.com/security/cve/CVE-2015-0303", }, { category: "external", summary: "SUSE Bug 913057 for CVE-2015-0303", url: "https://bugzilla.suse.com/913057", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2015-0303", }, { cve: "CVE-2015-0304", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-0304", }, ], notes: [ { category: "general", text: "Heap-based buffer overflow in Adobe Flash Player before 13.0.0.260 and 14.x through 16.x before 16.0.0.257 on Windows and OS X and before 11.2.202.429 on Linux, Adobe AIR before 16.0.0.245 on Windows and OS X and before 16.0.0.272 on Android, Adobe AIR SDK before 16.0.0.272, and Adobe AIR SDK & Compiler before 16.0.0.272 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-0309.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-0304", url: "https://www.suse.com/security/cve/CVE-2015-0304", }, { category: "external", summary: "SUSE Bug 913057 for CVE-2015-0304", url: "https://bugzilla.suse.com/913057", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2015-0304", }, { cve: "CVE-2015-0305", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-0305", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.260 and 14.x through 16.x before 16.0.0.257 on Windows and OS X and before 11.2.202.429 on Linux, Adobe AIR before 16.0.0.245 on Windows and OS X and before 16.0.0.272 on Android, Adobe AIR SDK before 16.0.0.272, and Adobe AIR SDK & Compiler before 16.0.0.272 allow attackers to execute arbitrary code by leveraging an unspecified \"type confusion.\"", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-0305", url: "https://www.suse.com/security/cve/CVE-2015-0305", }, { category: "external", summary: "SUSE Bug 913057 for CVE-2015-0305", url: "https://bugzilla.suse.com/913057", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2015-0305", }, { cve: "CVE-2015-0306", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-0306", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.260 and 14.x through 16.x before 16.0.0.257 on Windows and OS X and before 11.2.202.429 on Linux, Adobe AIR before 16.0.0.245 on Windows and OS X and before 16.0.0.272 on Android, Adobe AIR SDK before 16.0.0.272, and Adobe AIR SDK & Compiler before 16.0.0.272 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-0303.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-0306", url: "https://www.suse.com/security/cve/CVE-2015-0306", }, { category: "external", summary: "SUSE Bug 913057 for CVE-2015-0306", url: "https://bugzilla.suse.com/913057", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2015-0306", }, { cve: "CVE-2015-0307", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-0307", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.260 and 14.x through 16.x before 16.0.0.257 on Windows and OS X and before 11.2.202.429 on Linux, Adobe AIR before 16.0.0.245 on Windows and OS X and before 16.0.0.272 on Android, Adobe AIR SDK before 16.0.0.272, and Adobe AIR SDK & Compiler before 16.0.0.272 allow remote attackers to obtain sensitive information from process memory or cause a denial of service (out-of-bounds read) via unspecified vectors.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-0307", url: "https://www.suse.com/security/cve/CVE-2015-0307", }, { category: "external", summary: "SUSE Bug 913057 for CVE-2015-0307", url: "https://bugzilla.suse.com/913057", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2015-0307", }, { cve: "CVE-2015-0308", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-0308", }, ], notes: [ { category: "general", text: "Use-after-free vulnerability in Adobe Flash Player before 13.0.0.260 and 14.x through 16.x before 16.0.0.257 on Windows and OS X and before 11.2.202.429 on Linux, Adobe AIR before 16.0.0.245 on Windows and OS X and before 16.0.0.272 on Android, Adobe AIR SDK before 16.0.0.272, and Adobe AIR SDK & Compiler before 16.0.0.272 allows attackers to execute arbitrary code via unspecified vectors.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-0308", url: "https://www.suse.com/security/cve/CVE-2015-0308", }, { category: "external", summary: "SUSE Bug 913057 for CVE-2015-0308", url: "https://bugzilla.suse.com/913057", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2015-0308", }, { cve: "CVE-2015-0309", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-0309", }, ], notes: [ { category: "general", text: "Heap-based buffer overflow in Adobe Flash Player before 13.0.0.260 and 14.x through 16.x before 16.0.0.257 on Windows and OS X and before 11.2.202.429 on Linux, Adobe AIR before 16.0.0.245 on Windows and OS X and before 16.0.0.272 on Android, Adobe AIR SDK before 16.0.0.272, and Adobe AIR SDK & Compiler before 16.0.0.272 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-0304.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-0309", url: "https://www.suse.com/security/cve/CVE-2015-0309", }, { category: "external", summary: "SUSE Bug 913057 for CVE-2015-0309", url: "https://bugzilla.suse.com/913057", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2015-0309", }, { cve: "CVE-2015-0310", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-0310", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.262 and 14.x through 16.x before 16.0.0.287 on Windows and OS X and before 11.2.202.438 on Linux does not properly restrict discovery of memory addresses, which allows attackers to bypass the ASLR protection mechanism on Windows, and have an unspecified impact on other platforms, via unknown vectors, as exploited in the wild in January 2015.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-0310", url: "https://www.suse.com/security/cve/CVE-2015-0310", }, { category: "external", summary: "SUSE Bug 914333 for CVE-2015-0310", url: "https://bugzilla.suse.com/914333", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2015-0310", }, { cve: "CVE-2015-0311", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-0311", }, ], notes: [ { category: "general", text: "Unspecified vulnerability in Adobe Flash Player through 13.0.0.262 and 14.x, 15.x, and 16.x through 16.0.0.287 on Windows and OS X and through 11.2.202.438 on Linux allows remote attackers to execute arbitrary code via unknown vectors, as exploited in the wild in January 2015.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-0311", url: "https://www.suse.com/security/cve/CVE-2015-0311", }, { category: "external", summary: "SUSE Bug 914463 for CVE-2015-0311", url: "https://bugzilla.suse.com/914463", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 9.8, baseSeverity: "CRITICAL", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2015-0311", }, { cve: "CVE-2015-0313", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-0313", }, ], notes: [ { category: "general", text: "Use-after-free vulnerability in Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows and OS X and before 11.2.202.442 on Linux allows remote attackers to execute arbitrary code via unspecified vectors, as exploited in the wild in February 2015, a different vulnerability than CVE-2015-0315, CVE-2015-0320, and CVE-2015-0322.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-0313", url: "https://www.suse.com/security/cve/CVE-2015-0313", }, { category: "external", summary: "SUSE Bug 915918 for CVE-2015-0313", url: "https://bugzilla.suse.com/915918", }, { category: "external", summary: "SUSE Bug 916374 for CVE-2015-0313", url: "https://bugzilla.suse.com/916374", }, { category: "external", summary: "SUSE Bug 922033 for CVE-2015-0313", url: "https://bugzilla.suse.com/922033", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 9.8, baseSeverity: "CRITICAL", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2015-0313", }, { cve: "CVE-2015-0314", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-0314", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows and OS X and before 11.2.202.442 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-0316, CVE-2015-0318, CVE-2015-0321, CVE-2015-0329, and CVE-2015-0330.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-0314", url: "https://www.suse.com/security/cve/CVE-2015-0314", }, { category: "external", summary: "SUSE Bug 915918 for CVE-2015-0314", url: "https://bugzilla.suse.com/915918", }, { category: "external", summary: "SUSE Bug 922033 for CVE-2015-0314", url: "https://bugzilla.suse.com/922033", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2015-0314", }, { cve: "CVE-2015-0315", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-0315", }, ], notes: [ { category: "general", text: "Use-after-free vulnerability in Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows and OS X and before 11.2.202.442 on Linux allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-0313, CVE-2015-0320, and CVE-2015-0322.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-0315", url: "https://www.suse.com/security/cve/CVE-2015-0315", }, { category: "external", summary: "SUSE Bug 915918 for CVE-2015-0315", url: "https://bugzilla.suse.com/915918", }, { category: "external", summary: "SUSE Bug 922033 for CVE-2015-0315", url: "https://bugzilla.suse.com/922033", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2015-0315", }, { cve: "CVE-2015-0316", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-0316", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows and OS X and before 11.2.202.442 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-0314, CVE-2015-0318, CVE-2015-0321, CVE-2015-0329, and CVE-2015-0330.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-0316", url: "https://www.suse.com/security/cve/CVE-2015-0316", }, { category: "external", summary: "SUSE Bug 915918 for CVE-2015-0316", url: "https://bugzilla.suse.com/915918", }, { category: "external", summary: "SUSE Bug 922033 for CVE-2015-0316", url: "https://bugzilla.suse.com/922033", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2015-0316", }, { cve: "CVE-2015-0317", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-0317", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows and OS X and before 11.2.202.442 on Linux allows attackers to execute arbitrary code by leveraging an unspecified \"type confusion,\" a different vulnerability than CVE-2015-0319.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-0317", url: "https://www.suse.com/security/cve/CVE-2015-0317", }, { category: "external", summary: "SUSE Bug 915918 for CVE-2015-0317", url: "https://bugzilla.suse.com/915918", }, { category: "external", summary: "SUSE Bug 922033 for CVE-2015-0317", url: "https://bugzilla.suse.com/922033", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2015-0317", }, { cve: "CVE-2015-0318", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-0318", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows and OS X and before 11.2.202.442 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-0314, CVE-2015-0316, CVE-2015-0321, CVE-2015-0329, and CVE-2015-0330.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-0318", url: "https://www.suse.com/security/cve/CVE-2015-0318", }, { category: "external", summary: "SUSE Bug 915918 for CVE-2015-0318", url: "https://bugzilla.suse.com/915918", }, { category: "external", summary: "SUSE Bug 922033 for CVE-2015-0318", url: "https://bugzilla.suse.com/922033", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2015-0318", }, { cve: "CVE-2015-0319", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-0319", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows and OS X and before 11.2.202.442 on Linux allows attackers to execute arbitrary code by leveraging an unspecified \"type confusion,\" a different vulnerability than CVE-2015-0317.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-0319", url: "https://www.suse.com/security/cve/CVE-2015-0319", }, { category: "external", summary: "SUSE Bug 915918 for CVE-2015-0319", url: "https://bugzilla.suse.com/915918", }, { category: "external", summary: "SUSE Bug 922033 for CVE-2015-0319", url: "https://bugzilla.suse.com/922033", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2015-0319", }, { cve: "CVE-2015-0320", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-0320", }, ], notes: [ { category: "general", text: "Use-after-free vulnerability in Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows and OS X and before 11.2.202.442 on Linux allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-0313, CVE-2015-0315, and CVE-2015-0322.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-0320", url: "https://www.suse.com/security/cve/CVE-2015-0320", }, { category: "external", summary: "SUSE Bug 915918 for CVE-2015-0320", url: "https://bugzilla.suse.com/915918", }, { category: "external", summary: "SUSE Bug 922033 for CVE-2015-0320", url: "https://bugzilla.suse.com/922033", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2015-0320", }, { cve: "CVE-2015-0321", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-0321", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows and OS X and before 11.2.202.442 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-0314, CVE-2015-0316, CVE-2015-0318, CVE-2015-0329, and CVE-2015-0330.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-0321", url: "https://www.suse.com/security/cve/CVE-2015-0321", }, { category: "external", summary: "SUSE Bug 915918 for CVE-2015-0321", url: "https://bugzilla.suse.com/915918", }, { category: "external", summary: "SUSE Bug 922033 for CVE-2015-0321", url: "https://bugzilla.suse.com/922033", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2015-0321", }, { cve: "CVE-2015-0322", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-0322", }, ], notes: [ { category: "general", text: "Use-after-free vulnerability in Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows and OS X and before 11.2.202.442 on Linux allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-0313, CVE-2015-0315, and CVE-2015-0320.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-0322", url: "https://www.suse.com/security/cve/CVE-2015-0322", }, { category: "external", summary: "SUSE Bug 915918 for CVE-2015-0322", url: "https://bugzilla.suse.com/915918", }, { category: "external", summary: "SUSE Bug 922033 for CVE-2015-0322", url: "https://bugzilla.suse.com/922033", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2015-0322", }, { cve: "CVE-2015-0323", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-0323", }, ], notes: [ { category: "general", text: "Heap-based buffer overflow in Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows and OS X and before 11.2.202.442 on Linux allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-0327.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-0323", url: "https://www.suse.com/security/cve/CVE-2015-0323", }, { category: "external", summary: "SUSE Bug 915918 for CVE-2015-0323", url: "https://bugzilla.suse.com/915918", }, { category: "external", summary: "SUSE Bug 922033 for CVE-2015-0323", url: "https://bugzilla.suse.com/922033", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2015-0323", }, { cve: "CVE-2015-0324", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-0324", }, ], notes: [ { category: "general", text: "Buffer overflow in Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows and OS X and before 11.2.202.442 on Linux allows attackers to execute arbitrary code via unspecified vectors.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-0324", url: "https://www.suse.com/security/cve/CVE-2015-0324", }, { category: "external", summary: "SUSE Bug 915918 for CVE-2015-0324", url: "https://bugzilla.suse.com/915918", }, { category: "external", summary: "SUSE Bug 922033 for CVE-2015-0324", url: "https://bugzilla.suse.com/922033", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2015-0324", }, { cve: "CVE-2015-0325", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-0325", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows and OS X and before 11.2.202.442 on Linux allows attackers to cause a denial of service (NULL pointer dereference) or possibly have unspecified other impact via unknown vectors, a different vulnerability than CVE-2015-0326 and CVE-2015-0328.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-0325", url: "https://www.suse.com/security/cve/CVE-2015-0325", }, { category: "external", summary: "SUSE Bug 915918 for CVE-2015-0325", url: "https://bugzilla.suse.com/915918", }, { category: "external", summary: "SUSE Bug 922033 for CVE-2015-0325", url: "https://bugzilla.suse.com/922033", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2015-0325", }, { cve: "CVE-2015-0326", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-0326", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows and OS X and before 11.2.202.442 on Linux allows attackers to cause a denial of service (NULL pointer dereference) or possibly have unspecified other impact via unknown vectors, a different vulnerability than CVE-2015-0325 and CVE-2015-0328.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-0326", url: "https://www.suse.com/security/cve/CVE-2015-0326", }, { category: "external", summary: "SUSE Bug 915918 for CVE-2015-0326", url: "https://bugzilla.suse.com/915918", }, { category: "external", summary: "SUSE Bug 922033 for CVE-2015-0326", url: "https://bugzilla.suse.com/922033", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2015-0326", }, { cve: "CVE-2015-0327", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-0327", }, ], notes: [ { category: "general", text: "Heap-based buffer overflow in Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows and OS X and before 11.2.202.442 on Linux allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-0323.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-0327", url: "https://www.suse.com/security/cve/CVE-2015-0327", }, { category: "external", summary: "SUSE Bug 915918 for CVE-2015-0327", url: "https://bugzilla.suse.com/915918", }, { category: "external", summary: "SUSE Bug 922033 for CVE-2015-0327", url: "https://bugzilla.suse.com/922033", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2015-0327", }, { cve: "CVE-2015-0328", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-0328", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows and OS X and before 11.2.202.442 on Linux allows attackers to cause a denial of service (NULL pointer dereference) or possibly have unspecified other impact via unknown vectors, a different vulnerability than CVE-2015-0325 and CVE-2015-0326.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-0328", url: "https://www.suse.com/security/cve/CVE-2015-0328", }, { category: "external", summary: "SUSE Bug 915918 for CVE-2015-0328", url: "https://bugzilla.suse.com/915918", }, { category: "external", summary: "SUSE Bug 922033 for CVE-2015-0328", url: "https://bugzilla.suse.com/922033", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2015-0328", }, { cve: "CVE-2015-0329", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-0329", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows and OS X and before 11.2.202.442 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-0314, CVE-2015-0316, CVE-2015-0318, CVE-2015-0321, and CVE-2015-0330.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-0329", url: "https://www.suse.com/security/cve/CVE-2015-0329", }, { category: "external", summary: "SUSE Bug 915918 for CVE-2015-0329", url: "https://bugzilla.suse.com/915918", }, { category: "external", summary: "SUSE Bug 922033 for CVE-2015-0329", url: "https://bugzilla.suse.com/922033", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2015-0329", }, { cve: "CVE-2015-0330", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-0330", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows and OS X and before 11.2.202.442 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-0314, CVE-2015-0316, CVE-2015-0318, CVE-2015-0321, and CVE-2015-0329.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-0330", url: "https://www.suse.com/security/cve/CVE-2015-0330", }, { category: "external", summary: "SUSE Bug 915918 for CVE-2015-0330", url: "https://bugzilla.suse.com/915918", }, { category: "external", summary: "SUSE Bug 922033 for CVE-2015-0330", url: "https://bugzilla.suse.com/922033", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2015-0330", }, { cve: "CVE-2015-0332", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-0332", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.277 and 14.x through 17.x before 17.0.0.134 on Windows and OS X and before 11.2.202.451 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-0333, CVE-2015-0335, and CVE-2015-0339.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-0332", url: "https://www.suse.com/security/cve/CVE-2015-0332", }, { category: "external", summary: "SUSE Bug 922033 for CVE-2015-0332", url: "https://bugzilla.suse.com/922033", }, { category: "external", summary: "SUSE Bug 922296 for CVE-2015-0332", url: "https://bugzilla.suse.com/922296", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2015-0332", }, { cve: "CVE-2015-0333", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-0333", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.277 and 14.x through 17.x before 17.0.0.134 on Windows and OS X and before 11.2.202.451 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-0332, CVE-2015-0335, and CVE-2015-0339.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-0333", url: "https://www.suse.com/security/cve/CVE-2015-0333", }, { category: "external", summary: "SUSE Bug 922033 for CVE-2015-0333", url: "https://bugzilla.suse.com/922033", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2015-0333", }, { cve: "CVE-2015-0334", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-0334", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.277 and 14.x through 17.x before 17.0.0.134 on Windows and OS X and before 11.2.202.451 on Linux allows attackers to execute arbitrary code by leveraging an unspecified \"type confusion,\" a different vulnerability than CVE-2015-0336.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-0334", url: "https://www.suse.com/security/cve/CVE-2015-0334", }, { category: "external", summary: "SUSE Bug 922033 for CVE-2015-0334", url: "https://bugzilla.suse.com/922033", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2015-0334", }, { cve: "CVE-2015-0335", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-0335", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.277 and 14.x through 17.x before 17.0.0.134 on Windows and OS X and before 11.2.202.451 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-0332, CVE-2015-0333, and CVE-2015-0339.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-0335", url: "https://www.suse.com/security/cve/CVE-2015-0335", }, { category: "external", summary: "SUSE Bug 922033 for CVE-2015-0335", url: "https://bugzilla.suse.com/922033", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2015-0335", }, { cve: "CVE-2015-0336", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-0336", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.277 and 14.x through 17.x before 17.0.0.134 on Windows and OS X and before 11.2.202.451 on Linux allows attackers to execute arbitrary code by leveraging an unspecified \"type confusion,\" a different vulnerability than CVE-2015-0334.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-0336", url: "https://www.suse.com/security/cve/CVE-2015-0336", }, { category: "external", summary: "SUSE Bug 922033 for CVE-2015-0336", url: "https://bugzilla.suse.com/922033", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2015-0336", }, { cve: "CVE-2015-0337", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-0337", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.277 and 14.x through 17.x before 17.0.0.134 on Windows and OS X and before 11.2.202.451 on Linux allows remote attackers to bypass the Same Origin Policy via unspecified vectors.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-0337", url: "https://www.suse.com/security/cve/CVE-2015-0337", }, { category: "external", summary: "SUSE Bug 922033 for CVE-2015-0337", url: "https://bugzilla.suse.com/922033", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2015-0337", }, { cve: "CVE-2015-0338", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-0338", }, ], notes: [ { category: "general", text: "Integer overflow in Adobe Flash Player before 13.0.0.277 and 14.x through 17.x before 17.0.0.134 on Windows and OS X and before 11.2.202.451 on Linux allows attackers to execute arbitrary code via unspecified vectors.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-0338", url: "https://www.suse.com/security/cve/CVE-2015-0338", }, { category: "external", summary: "SUSE Bug 922033 for CVE-2015-0338", url: "https://bugzilla.suse.com/922033", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2015-0338", }, { cve: "CVE-2015-0339", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-0339", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.277 and 14.x through 17.x before 17.0.0.134 on Windows and OS X and before 11.2.202.451 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-0332, CVE-2015-0333, and CVE-2015-0335.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-0339", url: "https://www.suse.com/security/cve/CVE-2015-0339", }, { category: "external", summary: "SUSE Bug 922033 for CVE-2015-0339", url: "https://bugzilla.suse.com/922033", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2015-0339", }, { cve: "CVE-2015-0340", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-0340", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.277 and 14.x through 17.x before 17.0.0.134 on Windows and OS X and before 11.2.202.451 on Linux allows remote attackers to bypass intended file-upload restrictions via unspecified vectors.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-0340", url: "https://www.suse.com/security/cve/CVE-2015-0340", }, { category: "external", summary: "SUSE Bug 922033 for CVE-2015-0340", url: "https://bugzilla.suse.com/922033", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2015-0340", }, { cve: "CVE-2015-0341", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-0341", }, ], notes: [ { category: "general", text: "Use-after-free vulnerability in Adobe Flash Player before 13.0.0.277 and 14.x through 17.x before 17.0.0.134 on Windows and OS X and before 11.2.202.451 on Linux allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-0342.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-0341", url: "https://www.suse.com/security/cve/CVE-2015-0341", }, { category: "external", summary: "SUSE Bug 922033 for CVE-2015-0341", url: "https://bugzilla.suse.com/922033", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2015-0341", }, { cve: "CVE-2015-0342", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-0342", }, ], notes: [ { category: "general", text: "Use-after-free vulnerability in Adobe Flash Player before 13.0.0.277 and 14.x through 17.x before 17.0.0.134 on Windows and OS X and before 11.2.202.451 on Linux allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-0341.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-0342", url: "https://www.suse.com/security/cve/CVE-2015-0342", }, { category: "external", summary: "SUSE Bug 922033 for CVE-2015-0342", url: "https://bugzilla.suse.com/922033", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2015-0342", }, { cve: "CVE-2015-0346", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-0346", }, ], notes: [ { category: "general", text: "Double free vulnerability in Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-0359.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-0346", url: "https://www.suse.com/security/cve/CVE-2015-0346", }, { category: "external", summary: "SUSE Bug 927089 for CVE-2015-0346", url: "https://bugzilla.suse.com/927089", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "moderate", }, ], title: "CVE-2015-0346", }, { cve: "CVE-2015-0347", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-0347", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-0350, CVE-2015-0352, CVE-2015-0353, CVE-2015-0354, CVE-2015-0355, CVE-2015-0360, CVE-2015-3038, CVE-2015-3041, CVE-2015-3042, and CVE-2015-3043.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-0347", url: "https://www.suse.com/security/cve/CVE-2015-0347", }, { category: "external", summary: "SUSE Bug 927089 for CVE-2015-0347", url: "https://bugzilla.suse.com/927089", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "moderate", }, ], title: "CVE-2015-0347", }, { cve: "CVE-2015-0348", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-0348", }, ], notes: [ { category: "general", text: "Buffer overflow in Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code via unspecified vectors.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-0348", url: "https://www.suse.com/security/cve/CVE-2015-0348", }, { category: "external", summary: "SUSE Bug 927089 for CVE-2015-0348", url: "https://bugzilla.suse.com/927089", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "moderate", }, ], title: "CVE-2015-0348", }, { cve: "CVE-2015-0349", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-0349", }, ], notes: [ { category: "general", text: "Use-after-free vulnerability in Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-0351, CVE-2015-0358, and CVE-2015-3039.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-0349", url: "https://www.suse.com/security/cve/CVE-2015-0349", }, { category: "external", summary: "SUSE Bug 927089 for CVE-2015-0349", url: "https://bugzilla.suse.com/927089", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "moderate", }, ], title: "CVE-2015-0349", }, { cve: "CVE-2015-0350", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-0350", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-0347, CVE-2015-0352, CVE-2015-0353, CVE-2015-0354, CVE-2015-0355, CVE-2015-0360, CVE-2015-3038, CVE-2015-3041, CVE-2015-3042, and CVE-2015-3043.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-0350", url: "https://www.suse.com/security/cve/CVE-2015-0350", }, { category: "external", summary: "SUSE Bug 927089 for CVE-2015-0350", url: "https://bugzilla.suse.com/927089", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "moderate", }, ], title: "CVE-2015-0350", }, { cve: "CVE-2015-0351", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-0351", }, ], notes: [ { category: "general", text: "Use-after-free vulnerability in Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-0349, CVE-2015-0358, and CVE-2015-3039.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-0351", url: "https://www.suse.com/security/cve/CVE-2015-0351", }, { category: "external", summary: "SUSE Bug 927089 for CVE-2015-0351", url: "https://bugzilla.suse.com/927089", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "moderate", }, ], title: "CVE-2015-0351", }, { cve: "CVE-2015-0352", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-0352", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-0347, CVE-2015-0350, CVE-2015-0353, CVE-2015-0354, CVE-2015-0355, CVE-2015-0360, CVE-2015-3038, CVE-2015-3041, CVE-2015-3042, and CVE-2015-3043.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-0352", url: "https://www.suse.com/security/cve/CVE-2015-0352", }, { category: "external", summary: "SUSE Bug 927089 for CVE-2015-0352", url: "https://bugzilla.suse.com/927089", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "moderate", }, ], title: "CVE-2015-0352", }, { cve: "CVE-2015-0353", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-0353", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-0347, CVE-2015-0350, CVE-2015-0352, CVE-2015-0354, CVE-2015-0355, CVE-2015-0360, CVE-2015-3038, CVE-2015-3041, CVE-2015-3042, and CVE-2015-3043.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-0353", url: "https://www.suse.com/security/cve/CVE-2015-0353", }, { category: "external", summary: "SUSE Bug 927089 for CVE-2015-0353", url: "https://bugzilla.suse.com/927089", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "moderate", }, ], title: "CVE-2015-0353", }, { cve: "CVE-2015-0354", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-0354", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-0347, CVE-2015-0350, CVE-2015-0352, CVE-2015-0353, CVE-2015-0355, CVE-2015-0360, CVE-2015-3038, CVE-2015-3041, CVE-2015-3042, and CVE-2015-3043.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-0354", url: "https://www.suse.com/security/cve/CVE-2015-0354", }, { category: "external", summary: "SUSE Bug 927089 for CVE-2015-0354", url: "https://bugzilla.suse.com/927089", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "moderate", }, ], title: "CVE-2015-0354", }, { cve: "CVE-2015-0355", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-0355", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-0347, CVE-2015-0350, CVE-2015-0352, CVE-2015-0353, CVE-2015-0354, CVE-2015-0360, CVE-2015-3038, CVE-2015-3041, CVE-2015-3042, and CVE-2015-3043.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-0355", url: "https://www.suse.com/security/cve/CVE-2015-0355", }, { category: "external", summary: "SUSE Bug 927089 for CVE-2015-0355", url: "https://bugzilla.suse.com/927089", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "moderate", }, ], title: "CVE-2015-0355", }, { cve: "CVE-2015-0356", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-0356", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code by leveraging an unspecified \"type confusion.\"", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-0356", url: "https://www.suse.com/security/cve/CVE-2015-0356", }, { category: "external", summary: "SUSE Bug 927089 for CVE-2015-0356", url: "https://bugzilla.suse.com/927089", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "moderate", }, ], title: "CVE-2015-0356", }, { cve: "CVE-2015-0357", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-0357", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux does not properly restrict discovery of memory addresses, which allows attackers to bypass the ASLR protection mechanism via unspecified vectors, a different vulnerability than CVE-2015-3040.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-0357", url: "https://www.suse.com/security/cve/CVE-2015-0357", }, { category: "external", summary: "SUSE Bug 927089 for CVE-2015-0357", url: "https://bugzilla.suse.com/927089", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "moderate", }, ], title: "CVE-2015-0357", }, { cve: "CVE-2015-0358", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-0358", }, ], notes: [ { category: "general", text: "Use-after-free vulnerability in Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-0349, CVE-2015-0351, and CVE-2015-3039.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-0358", url: "https://www.suse.com/security/cve/CVE-2015-0358", }, { category: "external", summary: "SUSE Bug 927089 for CVE-2015-0358", url: "https://bugzilla.suse.com/927089", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "moderate", }, ], title: "CVE-2015-0358", }, { cve: "CVE-2015-0359", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-0359", }, ], notes: [ { category: "general", text: "Double free vulnerability in Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-0346.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-0359", url: "https://www.suse.com/security/cve/CVE-2015-0359", }, { category: "external", summary: "SUSE Bug 927089 for CVE-2015-0359", url: "https://bugzilla.suse.com/927089", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "moderate", }, ], title: "CVE-2015-0359", }, { cve: "CVE-2015-0360", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-0360", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-0347, CVE-2015-0350, CVE-2015-0352, CVE-2015-0353, CVE-2015-0354, CVE-2015-0355, CVE-2015-3038, CVE-2015-3041, CVE-2015-3042, and CVE-2015-3043.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-0360", url: "https://www.suse.com/security/cve/CVE-2015-0360", }, { category: "external", summary: "SUSE Bug 927089 for CVE-2015-0360", url: "https://bugzilla.suse.com/927089", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "moderate", }, ], title: "CVE-2015-0360", }, { cve: "CVE-2015-3038", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-3038", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-0347, CVE-2015-0350, CVE-2015-0352, CVE-2015-0353, CVE-2015-0354, CVE-2015-0355, CVE-2015-0360, CVE-2015-3041, CVE-2015-3042, and CVE-2015-3043.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-3038", url: "https://www.suse.com/security/cve/CVE-2015-3038", }, { category: "external", summary: "SUSE Bug 927089 for CVE-2015-3038", url: "https://bugzilla.suse.com/927089", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "moderate", }, ], title: "CVE-2015-3038", }, { cve: "CVE-2015-3039", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-3039", }, ], notes: [ { category: "general", text: "Use-after-free vulnerability in Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-0349, CVE-2015-0351, and CVE-2015-0358.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-3039", url: "https://www.suse.com/security/cve/CVE-2015-3039", }, { category: "external", summary: "SUSE Bug 927089 for CVE-2015-3039", url: "https://bugzilla.suse.com/927089", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "moderate", }, ], title: "CVE-2015-3039", }, { cve: "CVE-2015-3040", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-3040", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux does not properly restrict discovery of memory addresses, which allows attackers to bypass the ASLR protection mechanism via unspecified vectors, a different vulnerability than CVE-2015-0357.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-3040", url: "https://www.suse.com/security/cve/CVE-2015-3040", }, { category: "external", summary: "SUSE Bug 927089 for CVE-2015-3040", url: "https://bugzilla.suse.com/927089", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "moderate", }, ], title: "CVE-2015-3040", }, { cve: "CVE-2015-3041", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-3041", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-0347, CVE-2015-0350, CVE-2015-0352, CVE-2015-0353, CVE-2015-0354, CVE-2015-0355, CVE-2015-0360, CVE-2015-3038, CVE-2015-3042, and CVE-2015-3043.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-3041", url: "https://www.suse.com/security/cve/CVE-2015-3041", }, { category: "external", summary: "SUSE Bug 927089 for CVE-2015-3041", url: "https://bugzilla.suse.com/927089", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "moderate", }, ], title: "CVE-2015-3041", }, { cve: "CVE-2015-3042", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-3042", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-0347, CVE-2015-0350, CVE-2015-0352, CVE-2015-0353, CVE-2015-0354, CVE-2015-0355, CVE-2015-0360, CVE-2015-3038, CVE-2015-3041, and CVE-2015-3043.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-3042", url: "https://www.suse.com/security/cve/CVE-2015-3042", }, { category: "external", summary: "SUSE Bug 927089 for CVE-2015-3042", url: "https://bugzilla.suse.com/927089", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "moderate", }, ], title: "CVE-2015-3042", }, { cve: "CVE-2015-3043", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-3043", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, as exploited in the wild in April 2015, a different vulnerability than CVE-2015-0347, CVE-2015-0350, CVE-2015-0352, CVE-2015-0353, CVE-2015-0354, CVE-2015-0355, CVE-2015-0360, CVE-2015-3038, CVE-2015-3041, and CVE-2015-3042.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-3043", url: "https://www.suse.com/security/cve/CVE-2015-3043", }, { category: "external", summary: "SUSE Bug 927089 for CVE-2015-3043", url: "https://bugzilla.suse.com/927089", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 9.8, baseSeverity: "CRITICAL", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "moderate", }, ], title: "CVE-2015-3043", }, { cve: "CVE-2015-3044", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-3044", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to bypass intended access restrictions and obtain sensitive information via unspecified vectors.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-3044", url: "https://www.suse.com/security/cve/CVE-2015-3044", }, { category: "external", summary: "SUSE Bug 927089 for CVE-2015-3044", url: "https://bugzilla.suse.com/927089", }, { category: "external", summary: "SUSE Bug 930677 for CVE-2015-3044", url: "https://bugzilla.suse.com/930677", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "moderate", }, ], title: "CVE-2015-3044", }, { cve: "CVE-2015-3077", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-3077", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.289 and 14.x through 17.x before 17.0.0.188 on Windows and OS X and before 11.2.202.460 on Linux, Adobe AIR before 17.0.0.172, Adobe AIR SDK before 17.0.0.172, and Adobe AIR SDK & Compiler before 17.0.0.172 allow attackers to execute arbitrary code by leveraging an unspecified \"type confusion,\" a different vulnerability than CVE-2015-3084 and CVE-2015-3086.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-3077", url: "https://www.suse.com/security/cve/CVE-2015-3077", }, { category: "external", summary: "SUSE Bug 930677 for CVE-2015-3077", url: "https://bugzilla.suse.com/930677", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2015-3077", }, { cve: "CVE-2015-3078", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-3078", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.289 and 14.x through 17.x before 17.0.0.188 on Windows and OS X and before 11.2.202.460 on Linux, Adobe AIR before 17.0.0.172, Adobe AIR SDK before 17.0.0.172, and Adobe AIR SDK & Compiler before 17.0.0.172 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-3089, CVE-2015-3090, and CVE-2015-3093.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-3078", url: "https://www.suse.com/security/cve/CVE-2015-3078", }, { category: "external", summary: "SUSE Bug 930677 for CVE-2015-3078", url: "https://bugzilla.suse.com/930677", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2015-3078", }, { cve: "CVE-2015-3079", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-3079", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.289 and 14.x through 17.x before 17.0.0.188 on Windows and OS X and before 11.2.202.460 on Linux, Adobe AIR before 17.0.0.172, Adobe AIR SDK before 17.0.0.172, and Adobe AIR SDK & Compiler before 17.0.0.172 allow attackers to bypass intended access restrictions and obtain sensitive information via unspecified vectors.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-3079", url: "https://www.suse.com/security/cve/CVE-2015-3079", }, { category: "external", summary: "SUSE Bug 930677 for CVE-2015-3079", url: "https://bugzilla.suse.com/930677", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "moderate", }, ], title: "CVE-2015-3079", }, { cve: "CVE-2015-3080", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-3080", }, ], notes: [ { category: "general", text: "Use-after-free vulnerability in Adobe Flash Player before 13.0.0.289 and 14.x through 17.x before 17.0.0.188 on Windows and OS X and before 11.2.202.460 on Linux, Adobe AIR before 17.0.0.172, Adobe AIR SDK before 17.0.0.172, and Adobe AIR SDK & Compiler before 17.0.0.172 allows attackers to execute arbitrary code via unspecified vectors.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-3080", url: "https://www.suse.com/security/cve/CVE-2015-3080", }, { category: "external", summary: "SUSE Bug 930677 for CVE-2015-3080", url: "https://bugzilla.suse.com/930677", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2015-3080", }, { cve: "CVE-2015-3081", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-3081", }, ], notes: [ { category: "general", text: "Race condition in Adobe Flash Player before 13.0.0.289 and 14.x through 17.x before 17.0.0.188 on Windows and OS X and before 11.2.202.460 on Linux, Adobe AIR before 17.0.0.172, Adobe AIR SDK before 17.0.0.172, and Adobe AIR SDK & Compiler before 17.0.0.172 allows attackers to bypass the Internet Explorer Protected Mode protection mechanism via unspecified vectors.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-3081", url: "https://www.suse.com/security/cve/CVE-2015-3081", }, { category: "external", summary: "SUSE Bug 930677 for CVE-2015-3081", url: "https://bugzilla.suse.com/930677", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "moderate", }, ], title: "CVE-2015-3081", }, { cve: "CVE-2015-3082", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-3082", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.289 and 14.x through 17.x before 17.0.0.188 on Windows and OS X and before 11.2.202.460 on Linux, Adobe AIR before 17.0.0.172, Adobe AIR SDK before 17.0.0.172, and Adobe AIR SDK & Compiler before 17.0.0.172 allow remote attackers to bypass intended restrictions on filesystem write operations via unspecified vectors, a different vulnerability than CVE-2015-3083 and CVE-2015-3085.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-3082", url: "https://www.suse.com/security/cve/CVE-2015-3082", }, { category: "external", summary: "SUSE Bug 930677 for CVE-2015-3082", url: "https://bugzilla.suse.com/930677", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2015-3082", }, { cve: "CVE-2015-3083", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-3083", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.289 and 14.x through 17.x before 17.0.0.188 on Windows and OS X and before 11.2.202.460 on Linux, Adobe AIR before 17.0.0.172, Adobe AIR SDK before 17.0.0.172, and Adobe AIR SDK & Compiler before 17.0.0.172 allow remote attackers to bypass intended restrictions on filesystem write operations via unspecified vectors, a different vulnerability than CVE-2015-3082 and CVE-2015-3085.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-3083", url: "https://www.suse.com/security/cve/CVE-2015-3083", }, { category: "external", summary: "SUSE Bug 930677 for CVE-2015-3083", url: "https://bugzilla.suse.com/930677", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2015-3083", }, { cve: "CVE-2015-3084", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-3084", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.289 and 14.x through 17.x before 17.0.0.188 on Windows and OS X and before 11.2.202.460 on Linux, Adobe AIR before 17.0.0.172, Adobe AIR SDK before 17.0.0.172, and Adobe AIR SDK & Compiler before 17.0.0.172 allow attackers to execute arbitrary code by leveraging an unspecified \"type confusion,\" a different vulnerability than CVE-2015-3077 and CVE-2015-3086.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-3084", url: "https://www.suse.com/security/cve/CVE-2015-3084", }, { category: "external", summary: "SUSE Bug 930677 for CVE-2015-3084", url: "https://bugzilla.suse.com/930677", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2015-3084", }, { cve: "CVE-2015-3085", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-3085", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.289 and 14.x through 17.x before 17.0.0.188 on Windows and OS X and before 11.2.202.460 on Linux, Adobe AIR before 17.0.0.172, Adobe AIR SDK before 17.0.0.172, and Adobe AIR SDK & Compiler before 17.0.0.172 allow remote attackers to bypass intended restrictions on filesystem write operations via unspecified vectors, a different vulnerability than CVE-2015-3082 and CVE-2015-3083.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-3085", url: "https://www.suse.com/security/cve/CVE-2015-3085", }, { category: "external", summary: "SUSE Bug 930677 for CVE-2015-3085", url: "https://bugzilla.suse.com/930677", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2015-3085", }, { cve: "CVE-2015-3086", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-3086", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.289 and 14.x through 17.x before 17.0.0.188 on Windows and OS X and before 11.2.202.460 on Linux, Adobe AIR before 17.0.0.172, Adobe AIR SDK before 17.0.0.172, and Adobe AIR SDK & Compiler before 17.0.0.172 allow attackers to execute arbitrary code by leveraging an unspecified \"type confusion,\" a different vulnerability than CVE-2015-3077 and CVE-2015-3084.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-3086", url: "https://www.suse.com/security/cve/CVE-2015-3086", }, { category: "external", summary: "SUSE Bug 930677 for CVE-2015-3086", url: "https://bugzilla.suse.com/930677", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2015-3086", }, { cve: "CVE-2015-3087", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-3087", }, ], notes: [ { category: "general", text: "Integer overflow in Adobe Flash Player before 13.0.0.289 and 14.x through 17.x before 17.0.0.188 on Windows and OS X and before 11.2.202.460 on Linux, Adobe AIR before 17.0.0.172, Adobe AIR SDK before 17.0.0.172, and Adobe AIR SDK & Compiler before 17.0.0.172 allows attackers to execute arbitrary code via unspecified vectors.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-3087", url: "https://www.suse.com/security/cve/CVE-2015-3087", }, { category: "external", summary: "SUSE Bug 930677 for CVE-2015-3087", url: "https://bugzilla.suse.com/930677", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2015-3087", }, { cve: "CVE-2015-3088", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-3088", }, ], notes: [ { category: "general", text: "Heap-based buffer overflow in Adobe Flash Player before 13.0.0.289 and 14.x through 17.x before 17.0.0.188 on Windows and OS X and before 11.2.202.460 on Linux, Adobe AIR before 17.0.0.172, Adobe AIR SDK before 17.0.0.172, and Adobe AIR SDK & Compiler before 17.0.0.172 allows attackers to execute arbitrary code via unspecified vectors.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-3088", url: "https://www.suse.com/security/cve/CVE-2015-3088", }, { category: "external", summary: "SUSE Bug 930677 for CVE-2015-3088", url: "https://bugzilla.suse.com/930677", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2015-3088", }, { cve: "CVE-2015-3089", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-3089", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.289 and 14.x through 17.x before 17.0.0.188 on Windows and OS X and before 11.2.202.460 on Linux, Adobe AIR before 17.0.0.172, Adobe AIR SDK before 17.0.0.172, and Adobe AIR SDK & Compiler before 17.0.0.172 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-3078, CVE-2015-3090, and CVE-2015-3093.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-3089", url: "https://www.suse.com/security/cve/CVE-2015-3089", }, { category: "external", summary: "SUSE Bug 930677 for CVE-2015-3089", url: "https://bugzilla.suse.com/930677", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2015-3089", }, { cve: "CVE-2015-3090", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-3090", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.289 and 14.x through 17.x before 17.0.0.188 on Windows and OS X and before 11.2.202.460 on Linux, Adobe AIR before 17.0.0.172, Adobe AIR SDK before 17.0.0.172, and Adobe AIR SDK & Compiler before 17.0.0.172 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-3078, CVE-2015-3089, and CVE-2015-3093.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-3090", url: "https://www.suse.com/security/cve/CVE-2015-3090", }, { category: "external", summary: "SUSE Bug 930677 for CVE-2015-3090", url: "https://bugzilla.suse.com/930677", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2015-3090", }, { cve: "CVE-2015-3091", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-3091", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.289 and 14.x through 17.x before 17.0.0.188 on Windows and OS X and before 11.2.202.460 on Linux, Adobe AIR before 17.0.0.172, Adobe AIR SDK before 17.0.0.172, and Adobe AIR SDK & Compiler before 17.0.0.172 do not properly restrict discovery of memory addresses, which allows attackers to bypass the ASLR protection mechanism via unspecified vectors, a different vulnerability than CVE-2015-3092.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-3091", url: "https://www.suse.com/security/cve/CVE-2015-3091", }, { category: "external", summary: "SUSE Bug 930677 for CVE-2015-3091", url: "https://bugzilla.suse.com/930677", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2015-3091", }, { cve: "CVE-2015-3092", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-3092", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.289 and 14.x through 17.x before 17.0.0.188 on Windows and OS X and before 11.2.202.460 on Linux, Adobe AIR before 17.0.0.172, Adobe AIR SDK before 17.0.0.172, and Adobe AIR SDK & Compiler before 17.0.0.172 do not properly restrict discovery of memory addresses, which allows attackers to bypass the ASLR protection mechanism via unspecified vectors, a different vulnerability than CVE-2015-3091.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-3092", url: "https://www.suse.com/security/cve/CVE-2015-3092", }, { category: "external", summary: "SUSE Bug 930677 for CVE-2015-3092", url: "https://bugzilla.suse.com/930677", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2015-3092", }, { cve: "CVE-2015-3093", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-3093", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.289 and 14.x through 17.x before 17.0.0.188 on Windows and OS X and before 11.2.202.460 on Linux, Adobe AIR before 17.0.0.172, Adobe AIR SDK before 17.0.0.172, and Adobe AIR SDK & Compiler before 17.0.0.172 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-3078, CVE-2015-3089, and CVE-2015-3090.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-3093", url: "https://www.suse.com/security/cve/CVE-2015-3093", }, { category: "external", summary: "SUSE Bug 930677 for CVE-2015-3093", url: "https://bugzilla.suse.com/930677", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2015-3093", }, { cve: "CVE-2015-3096", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-3096", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.292 and 14.x through 18.x before 18.0.0.160 on Windows and OS X and before 11.2.202.466 on Linux, Adobe AIR before 18.0.0.144 on Windows and before 18.0.0.143 on OS X and Android, Adobe AIR SDK before 18.0.0.144 on Windows and before 18.0.0.143 on OS X, and Adobe AIR SDK & Compiler before 18.0.0.144 on Windows and before 18.0.0.143 on OS X allow remote attackers to bypass a CVE-2014-5333 protection mechanism via unspecified vectors.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-3096", url: "https://www.suse.com/security/cve/CVE-2015-3096", }, { category: "external", summary: "SUSE Bug 934088 for CVE-2015-3096", url: "https://bugzilla.suse.com/934088", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "important", }, ], title: "CVE-2015-3096", }, { cve: "CVE-2015-3098", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-3098", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.292 and 14.x through 18.x before 18.0.0.160 on Windows and OS X and before 11.2.202.466 on Linux, Adobe AIR before 18.0.0.144 on Windows and before 18.0.0.143 on OS X and Android, Adobe AIR SDK before 18.0.0.144 on Windows and before 18.0.0.143 on OS X, and Adobe AIR SDK & Compiler before 18.0.0.144 on Windows and before 18.0.0.143 on OS X allow remote attackers to bypass the Same Origin Policy via unspecified vectors, a different vulnerability than CVE-2015-3099 and CVE-2015-3102.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-3098", url: "https://www.suse.com/security/cve/CVE-2015-3098", }, { category: "external", summary: "SUSE Bug 934088 for CVE-2015-3098", url: "https://bugzilla.suse.com/934088", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "important", }, ], title: "CVE-2015-3098", }, { cve: "CVE-2015-3099", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-3099", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.292 and 14.x through 18.x before 18.0.0.160 on Windows and OS X and before 11.2.202.466 on Linux, Adobe AIR before 18.0.0.144 on Windows and before 18.0.0.143 on OS X and Android, Adobe AIR SDK before 18.0.0.144 on Windows and before 18.0.0.143 on OS X, and Adobe AIR SDK & Compiler before 18.0.0.144 on Windows and before 18.0.0.143 on OS X allow remote attackers to bypass the Same Origin Policy via unspecified vectors, a different vulnerability than CVE-2015-3098 and CVE-2015-3102.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-3099", url: "https://www.suse.com/security/cve/CVE-2015-3099", }, { category: "external", summary: "SUSE Bug 934088 for CVE-2015-3099", url: "https://bugzilla.suse.com/934088", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "important", }, ], title: "CVE-2015-3099", }, { cve: "CVE-2015-3100", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-3100", }, ], notes: [ { category: "general", text: "Stack-based buffer overflow in Adobe Flash Player before 13.0.0.292 and 14.x through 18.x before 18.0.0.160 on Windows and OS X and before 11.2.202.466 on Linux, Adobe AIR before 18.0.0.144 on Windows and before 18.0.0.143 on OS X and Android, Adobe AIR SDK before 18.0.0.144 on Windows and before 18.0.0.143 on OS X, and Adobe AIR SDK & Compiler before 18.0.0.144 on Windows and before 18.0.0.143 on OS X allows attackers to execute arbitrary code via unspecified vectors.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-3100", url: "https://www.suse.com/security/cve/CVE-2015-3100", }, { category: "external", summary: "SUSE Bug 934088 for CVE-2015-3100", url: "https://bugzilla.suse.com/934088", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "important", }, ], title: "CVE-2015-3100", }, { cve: "CVE-2015-3102", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-3102", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.292 and 14.x through 18.x before 18.0.0.160 on Windows and OS X and before 11.2.202.466 on Linux, Adobe AIR before 18.0.0.144 on Windows and before 18.0.0.143 on OS X and Android, Adobe AIR SDK before 18.0.0.144 on Windows and before 18.0.0.143 on OS X, and Adobe AIR SDK & Compiler before 18.0.0.144 on Windows and before 18.0.0.143 on OS X allow remote attackers to bypass the Same Origin Policy via unspecified vectors, a different vulnerability than CVE-2015-3098 and CVE-2015-3099.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-3102", url: "https://www.suse.com/security/cve/CVE-2015-3102", }, { category: "external", summary: "SUSE Bug 934088 for CVE-2015-3102", url: "https://bugzilla.suse.com/934088", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "important", }, ], title: "CVE-2015-3102", }, { cve: "CVE-2015-3103", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-3103", }, ], notes: [ { category: "general", text: "Use-after-free vulnerability in Adobe Flash Player before 13.0.0.292 and 14.x through 18.x before 18.0.0.160 on Windows and OS X and before 11.2.202.466 on Linux, Adobe AIR before 18.0.0.144 on Windows and before 18.0.0.143 on OS X and Android, Adobe AIR SDK before 18.0.0.144 on Windows and before 18.0.0.143 on OS X, and Adobe AIR SDK & Compiler before 18.0.0.144 on Windows and before 18.0.0.143 on OS X allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-3106 and CVE-2015-3107.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-3103", url: "https://www.suse.com/security/cve/CVE-2015-3103", }, { category: "external", summary: "SUSE Bug 934088 for CVE-2015-3103", url: "https://bugzilla.suse.com/934088", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "important", }, ], title: "CVE-2015-3103", }, { cve: "CVE-2015-3106", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-3106", }, ], notes: [ { category: "general", text: "Use-after-free vulnerability in Adobe Flash Player before 13.0.0.292 and 14.x through 18.x before 18.0.0.160 on Windows and OS X and before 11.2.202.466 on Linux, Adobe AIR before 18.0.0.144 on Windows and before 18.0.0.143 on OS X and Android, Adobe AIR SDK before 18.0.0.144 on Windows and before 18.0.0.143 on OS X, and Adobe AIR SDK & Compiler before 18.0.0.144 on Windows and before 18.0.0.143 on OS X allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-3103 and CVE-2015-3107.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-3106", url: "https://www.suse.com/security/cve/CVE-2015-3106", }, { category: "external", summary: "SUSE Bug 934088 for CVE-2015-3106", url: "https://bugzilla.suse.com/934088", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "important", }, ], title: "CVE-2015-3106", }, { cve: "CVE-2015-3107", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-3107", }, ], notes: [ { category: "general", text: "Use-after-free vulnerability in Adobe Flash Player before 13.0.0.292 and 14.x through 18.x before 18.0.0.160 on Windows and OS X and before 11.2.202.466 on Linux, Adobe AIR before 18.0.0.144 on Windows and before 18.0.0.143 on OS X and Android, Adobe AIR SDK before 18.0.0.144 on Windows and before 18.0.0.143 on OS X, and Adobe AIR SDK & Compiler before 18.0.0.144 on Windows and before 18.0.0.143 on OS X allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-3103 and CVE-2015-3106.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-3107", url: "https://www.suse.com/security/cve/CVE-2015-3107", }, { category: "external", summary: "SUSE Bug 934088 for CVE-2015-3107", url: "https://bugzilla.suse.com/934088", }, { category: "external", summary: "SUSE Bug 941239 for CVE-2015-3107", url: "https://bugzilla.suse.com/941239", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "important", }, ], title: "CVE-2015-3107", }, { cve: "CVE-2015-3108", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-3108", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.292 and 14.x through 18.x before 18.0.0.160 on Windows and OS X and before 11.2.202.466 on Linux, Adobe AIR before 18.0.0.144 on Windows and before 18.0.0.143 on OS X and Android, Adobe AIR SDK before 18.0.0.144 on Windows and before 18.0.0.143 on OS X, and Adobe AIR SDK & Compiler before 18.0.0.144 on Windows and before 18.0.0.143 on OS X do not properly restrict discovery of memory addresses, which allows attackers to bypass the ASLR protection mechanism via unspecified vectors.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-3108", url: "https://www.suse.com/security/cve/CVE-2015-3108", }, { category: "external", summary: "SUSE Bug 934088 for CVE-2015-3108", url: "https://bugzilla.suse.com/934088", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "important", }, ], title: "CVE-2015-3108", }, { cve: "CVE-2015-3113", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-3113", }, ], notes: [ { category: "general", text: "Heap-based buffer overflow in Adobe Flash Player before 13.0.0.296 and 14.x through 18.x before 18.0.0.194 on Windows and OS X and before 11.2.202.468 on Linux allows remote attackers to execute arbitrary code via unspecified vectors, as exploited in the wild in June 2015.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-3113", url: "https://www.suse.com/security/cve/CVE-2015-3113", }, { category: "external", summary: "SUSE Bug 935701 for CVE-2015-3113", url: "https://bugzilla.suse.com/935701", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 9.8, baseSeverity: "CRITICAL", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "important", }, ], title: "CVE-2015-3113", }, ], }
suse-su-2015:1373-1
Vulnerability from csaf_suse
Notes
{ document: { aggregate_severity: { namespace: "https://www.suse.com/support/security/rating/", text: "critical", }, category: "csaf_security_advisory", csaf_version: "2.0", distribution: { text: "Copyright 2024 SUSE LLC. All rights reserved.", tlp: { label: "WHITE", url: "https://www.first.org/tlp/", }, }, lang: "en", notes: [ { category: "summary", text: "Security update for flash-player", title: "Title of the patch", }, { category: "description", text: "\n\nThis security update to 11.2.202.508 (bsc#941239) fixes the\nfollowing issues:\n\n * APSB15-19: CVE-2015-3107, CVE-2015-5124, CVE-2015-5125,\n CVE-2015-5127, CVE-2015-5128, CVE-2015-5129, CVE-2015-5130,\n CVE-2015-5131, CVE-2015-5132, CVE-2015-5133, CVE-2015-5134,\n CVE-2015-5539, CVE-2015-5540, CVE-2015-5541, CVE-2015-5544,\n CVE-2015-5545, CVE-2015-5546, CVE-2015-5547, CVE-2015-5548,\n CVE-2015-5549, CVE-2015-5550, CVE-2015-5551, CVE-2015-5552,\n CVE-2015-5553, CVE-2015-5554, CVE-2015-5555, CVE-2015-5556,\n CVE-2015-5557, CVE-2015-5558, CVE-2015-5559, CVE-2015-5560,\n CVE-2015-5561, CVE-2015-5562, CVE-2015-5563\n", title: "Description of the patch", }, { category: "details", text: "sledsp3-flash-player-12025,sledsp4-flash-player-12025", title: "Patchnames", }, { category: "legal_disclaimer", text: "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).", title: "Terms of use", }, ], publisher: { category: "vendor", contact_details: "https://www.suse.com/support/security/contact/", name: "SUSE Product Security Team", namespace: "https://www.suse.com/", }, references: [ { category: "external", summary: "SUSE ratings", url: "https://www.suse.com/support/security/rating/", }, { category: "self", summary: "URL of this CSAF notice", url: "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2015_1373-1.json", }, { category: "self", summary: "URL for SUSE-SU-2015:1373-1", url: "https://www.suse.com/support/update/announcement/2015/suse-su-20151373-1/", }, { category: "self", summary: "E-Mail link for SUSE-SU-2015:1373-1", url: "https://lists.suse.com/pipermail/sle-security-updates/2015-August/001532.html", }, { category: "self", summary: "SUSE Bug 941239", url: "https://bugzilla.suse.com/941239", }, { category: "self", summary: "SUSE CVE CVE-2015-3107 page", url: "https://www.suse.com/security/cve/CVE-2015-3107/", }, { category: "self", summary: "SUSE CVE CVE-2015-5124 page", url: "https://www.suse.com/security/cve/CVE-2015-5124/", }, { category: "self", summary: "SUSE CVE CVE-2015-5125 page", url: "https://www.suse.com/security/cve/CVE-2015-5125/", }, { category: "self", summary: "SUSE CVE CVE-2015-5127 page", url: "https://www.suse.com/security/cve/CVE-2015-5127/", }, { category: "self", summary: "SUSE CVE CVE-2015-5128 page", url: "https://www.suse.com/security/cve/CVE-2015-5128/", }, { category: "self", summary: "SUSE CVE CVE-2015-5129 page", url: "https://www.suse.com/security/cve/CVE-2015-5129/", }, { category: "self", summary: "SUSE CVE CVE-2015-5130 page", url: "https://www.suse.com/security/cve/CVE-2015-5130/", }, { category: "self", summary: "SUSE CVE CVE-2015-5131 page", url: "https://www.suse.com/security/cve/CVE-2015-5131/", }, { category: "self", summary: "SUSE CVE CVE-2015-5132 page", url: "https://www.suse.com/security/cve/CVE-2015-5132/", }, { category: "self", summary: "SUSE CVE CVE-2015-5133 page", url: "https://www.suse.com/security/cve/CVE-2015-5133/", }, { category: "self", summary: "SUSE CVE CVE-2015-5134 page", url: "https://www.suse.com/security/cve/CVE-2015-5134/", }, { category: "self", summary: "SUSE CVE CVE-2015-5539 page", url: "https://www.suse.com/security/cve/CVE-2015-5539/", }, { category: "self", summary: "SUSE CVE CVE-2015-5540 page", url: "https://www.suse.com/security/cve/CVE-2015-5540/", }, { category: "self", summary: "SUSE CVE CVE-2015-5541 page", url: "https://www.suse.com/security/cve/CVE-2015-5541/", }, { category: "self", summary: "SUSE CVE CVE-2015-5544 page", url: "https://www.suse.com/security/cve/CVE-2015-5544/", }, { category: "self", summary: "SUSE CVE CVE-2015-5545 page", url: "https://www.suse.com/security/cve/CVE-2015-5545/", }, { category: "self", summary: "SUSE CVE CVE-2015-5546 page", url: "https://www.suse.com/security/cve/CVE-2015-5546/", }, { category: "self", summary: "SUSE CVE CVE-2015-5547 page", url: "https://www.suse.com/security/cve/CVE-2015-5547/", }, { category: "self", summary: "SUSE CVE CVE-2015-5548 page", url: "https://www.suse.com/security/cve/CVE-2015-5548/", }, { category: "self", summary: "SUSE CVE CVE-2015-5549 page", url: "https://www.suse.com/security/cve/CVE-2015-5549/", }, { category: "self", summary: "SUSE CVE CVE-2015-5550 page", url: "https://www.suse.com/security/cve/CVE-2015-5550/", }, { category: "self", summary: "SUSE CVE CVE-2015-5551 page", url: "https://www.suse.com/security/cve/CVE-2015-5551/", }, { category: "self", summary: "SUSE CVE CVE-2015-5552 page", url: "https://www.suse.com/security/cve/CVE-2015-5552/", }, { category: "self", summary: "SUSE CVE CVE-2015-5553 page", url: "https://www.suse.com/security/cve/CVE-2015-5553/", }, { category: "self", summary: "SUSE CVE CVE-2015-5554 page", url: "https://www.suse.com/security/cve/CVE-2015-5554/", }, { category: "self", summary: "SUSE CVE CVE-2015-5555 page", url: "https://www.suse.com/security/cve/CVE-2015-5555/", }, { category: "self", summary: "SUSE CVE CVE-2015-5556 page", url: "https://www.suse.com/security/cve/CVE-2015-5556/", }, { category: "self", summary: "SUSE CVE CVE-2015-5557 page", url: "https://www.suse.com/security/cve/CVE-2015-5557/", }, { category: "self", summary: "SUSE CVE CVE-2015-5558 page", url: "https://www.suse.com/security/cve/CVE-2015-5558/", }, { category: "self", summary: "SUSE CVE CVE-2015-5559 page", url: "https://www.suse.com/security/cve/CVE-2015-5559/", }, { category: "self", summary: "SUSE CVE CVE-2015-5560 page", url: "https://www.suse.com/security/cve/CVE-2015-5560/", }, { category: "self", summary: "SUSE CVE CVE-2015-5561 page", url: "https://www.suse.com/security/cve/CVE-2015-5561/", }, { category: "self", summary: "SUSE CVE CVE-2015-5562 page", url: "https://www.suse.com/security/cve/CVE-2015-5562/", }, { category: "self", summary: "SUSE CVE CVE-2015-5563 page", url: "https://www.suse.com/security/cve/CVE-2015-5563/", }, ], title: "Security update for flash-player", tracking: { current_release_date: "2015-08-12T07:49:53Z", generator: { date: "2015-08-12T07:49:53Z", engine: { name: "cve-database.git:bin/generate-csaf.pl", version: "1", }, }, id: "SUSE-SU-2015:1373-1", initial_release_date: "2015-08-12T07:49:53Z", revision_history: [ { date: "2015-08-12T07:49:53Z", number: "1", summary: "Current version", }, ], status: "final", version: "1", }, }, product_tree: { branches: [ { branches: [ { branches: [ { category: "product_version", name: "flash-player-11.2.202.508-0.14.1.i586", product: { name: "flash-player-11.2.202.508-0.14.1.i586", product_id: "flash-player-11.2.202.508-0.14.1.i586", }, }, { category: "product_version", name: "flash-player-gnome-11.2.202.508-0.14.1.i586", product: { name: "flash-player-gnome-11.2.202.508-0.14.1.i586", product_id: "flash-player-gnome-11.2.202.508-0.14.1.i586", }, }, { category: "product_version", name: "flash-player-kde4-11.2.202.508-0.14.1.i586", product: { name: "flash-player-kde4-11.2.202.508-0.14.1.i586", product_id: "flash-player-kde4-11.2.202.508-0.14.1.i586", }, }, ], category: "architecture", name: "i586", }, { branches: [ { category: "product_version", name: "flash-player-11.2.202.508-0.14.1.x86_64", product: { name: "flash-player-11.2.202.508-0.14.1.x86_64", product_id: "flash-player-11.2.202.508-0.14.1.x86_64", }, }, { category: "product_version", name: "flash-player-gnome-11.2.202.508-0.14.1.x86_64", product: { name: "flash-player-gnome-11.2.202.508-0.14.1.x86_64", product_id: "flash-player-gnome-11.2.202.508-0.14.1.x86_64", }, }, { category: "product_version", name: "flash-player-kde4-11.2.202.508-0.14.1.x86_64", product: { name: "flash-player-kde4-11.2.202.508-0.14.1.x86_64", product_id: "flash-player-kde4-11.2.202.508-0.14.1.x86_64", }, }, ], category: "architecture", name: "x86_64", }, { branches: [ { category: "product_name", name: "SUSE Linux Enterprise Desktop 11 SP3", product: { name: "SUSE Linux Enterprise Desktop 11 SP3", product_id: "SUSE Linux Enterprise Desktop 11 SP3", product_identification_helper: { cpe: "cpe:/o:suse:suse_sled:11:sp3", }, }, }, { category: "product_name", name: "SUSE Linux Enterprise Desktop 11 SP4", product: { name: "SUSE Linux Enterprise Desktop 11 SP4", product_id: "SUSE Linux Enterprise Desktop 11 SP4", product_identification_helper: { cpe: "cpe:/o:suse:suse_sled:11:sp4", }, }, }, ], category: "product_family", name: "SUSE Linux Enterprise", }, ], category: "vendor", name: "SUSE", }, ], relationships: [ { category: "default_component_of", full_product_name: { name: "flash-player-11.2.202.508-0.14.1.i586 as component of SUSE Linux Enterprise Desktop 11 SP3", product_id: "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.508-0.14.1.i586", }, product_reference: "flash-player-11.2.202.508-0.14.1.i586", relates_to_product_reference: "SUSE Linux Enterprise Desktop 11 SP3", }, { category: "default_component_of", full_product_name: { name: "flash-player-11.2.202.508-0.14.1.x86_64 as component of SUSE Linux Enterprise Desktop 11 SP3", product_id: "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.508-0.14.1.x86_64", }, product_reference: "flash-player-11.2.202.508-0.14.1.x86_64", relates_to_product_reference: "SUSE Linux Enterprise Desktop 11 SP3", }, { category: "default_component_of", full_product_name: { name: "flash-player-gnome-11.2.202.508-0.14.1.i586 as component of SUSE Linux Enterprise Desktop 11 SP3", product_id: "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.508-0.14.1.i586", }, product_reference: "flash-player-gnome-11.2.202.508-0.14.1.i586", relates_to_product_reference: "SUSE Linux Enterprise Desktop 11 SP3", }, { category: "default_component_of", full_product_name: { name: "flash-player-gnome-11.2.202.508-0.14.1.x86_64 as component of SUSE Linux Enterprise Desktop 11 SP3", product_id: "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.508-0.14.1.x86_64", }, product_reference: "flash-player-gnome-11.2.202.508-0.14.1.x86_64", relates_to_product_reference: "SUSE Linux Enterprise Desktop 11 SP3", }, { category: "default_component_of", full_product_name: { name: "flash-player-kde4-11.2.202.508-0.14.1.i586 as component of SUSE Linux Enterprise Desktop 11 SP3", product_id: "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.508-0.14.1.i586", }, product_reference: "flash-player-kde4-11.2.202.508-0.14.1.i586", relates_to_product_reference: "SUSE Linux Enterprise Desktop 11 SP3", }, { category: "default_component_of", full_product_name: { name: "flash-player-kde4-11.2.202.508-0.14.1.x86_64 as component of SUSE Linux Enterprise Desktop 11 SP3", product_id: "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.508-0.14.1.x86_64", }, product_reference: "flash-player-kde4-11.2.202.508-0.14.1.x86_64", relates_to_product_reference: "SUSE Linux Enterprise Desktop 11 SP3", }, { category: "default_component_of", full_product_name: { name: "flash-player-11.2.202.508-0.14.1.i586 as component of SUSE Linux Enterprise Desktop 11 SP4", product_id: "SUSE Linux Enterprise Desktop 11 SP4:flash-player-11.2.202.508-0.14.1.i586", }, product_reference: "flash-player-11.2.202.508-0.14.1.i586", relates_to_product_reference: "SUSE Linux Enterprise Desktop 11 SP4", }, { category: "default_component_of", full_product_name: { name: "flash-player-11.2.202.508-0.14.1.x86_64 as component of SUSE Linux Enterprise Desktop 11 SP4", product_id: "SUSE Linux Enterprise Desktop 11 SP4:flash-player-11.2.202.508-0.14.1.x86_64", }, product_reference: "flash-player-11.2.202.508-0.14.1.x86_64", relates_to_product_reference: "SUSE Linux Enterprise Desktop 11 SP4", }, { category: "default_component_of", full_product_name: { name: "flash-player-gnome-11.2.202.508-0.14.1.i586 as component of SUSE Linux Enterprise Desktop 11 SP4", product_id: "SUSE Linux Enterprise Desktop 11 SP4:flash-player-gnome-11.2.202.508-0.14.1.i586", }, product_reference: "flash-player-gnome-11.2.202.508-0.14.1.i586", relates_to_product_reference: "SUSE Linux Enterprise Desktop 11 SP4", }, { category: "default_component_of", full_product_name: { name: "flash-player-gnome-11.2.202.508-0.14.1.x86_64 as component of SUSE Linux Enterprise Desktop 11 SP4", product_id: "SUSE Linux Enterprise Desktop 11 SP4:flash-player-gnome-11.2.202.508-0.14.1.x86_64", }, product_reference: "flash-player-gnome-11.2.202.508-0.14.1.x86_64", relates_to_product_reference: "SUSE Linux Enterprise Desktop 11 SP4", }, { category: "default_component_of", full_product_name: { name: "flash-player-kde4-11.2.202.508-0.14.1.i586 as component of SUSE Linux Enterprise Desktop 11 SP4", product_id: "SUSE Linux Enterprise Desktop 11 SP4:flash-player-kde4-11.2.202.508-0.14.1.i586", }, product_reference: "flash-player-kde4-11.2.202.508-0.14.1.i586", relates_to_product_reference: "SUSE Linux Enterprise Desktop 11 SP4", }, { category: "default_component_of", full_product_name: { name: "flash-player-kde4-11.2.202.508-0.14.1.x86_64 as component of SUSE Linux Enterprise Desktop 11 SP4", product_id: "SUSE Linux Enterprise Desktop 11 SP4:flash-player-kde4-11.2.202.508-0.14.1.x86_64", }, product_reference: "flash-player-kde4-11.2.202.508-0.14.1.x86_64", relates_to_product_reference: "SUSE Linux Enterprise Desktop 11 SP4", }, ], }, vulnerabilities: [ { cve: "CVE-2015-3107", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-3107", }, ], notes: [ { category: "general", text: "Use-after-free vulnerability in Adobe Flash Player before 13.0.0.292 and 14.x through 18.x before 18.0.0.160 on Windows and OS X and before 11.2.202.466 on Linux, Adobe AIR before 18.0.0.144 on Windows and before 18.0.0.143 on OS X and Android, Adobe AIR SDK before 18.0.0.144 on Windows and before 18.0.0.143 on OS X, and Adobe AIR SDK & Compiler before 18.0.0.144 on Windows and before 18.0.0.143 on OS X allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-3103 and CVE-2015-3106.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.508-0.14.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.508-0.14.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.508-0.14.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-11.2.202.508-0.14.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-gnome-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-gnome-11.2.202.508-0.14.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-kde4-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-kde4-11.2.202.508-0.14.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-3107", url: "https://www.suse.com/security/cve/CVE-2015-3107", }, { category: "external", summary: "SUSE Bug 934088 for CVE-2015-3107", url: "https://bugzilla.suse.com/934088", }, { category: "external", summary: "SUSE Bug 941239 for CVE-2015-3107", url: "https://bugzilla.suse.com/941239", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.508-0.14.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.508-0.14.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.508-0.14.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-11.2.202.508-0.14.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-gnome-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-gnome-11.2.202.508-0.14.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-kde4-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-kde4-11.2.202.508-0.14.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2015-08-12T07:49:53Z", details: "important", }, ], title: "CVE-2015-3107", }, { cve: "CVE-2015-5124", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-5124", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.302 and 14.x through 18.x before 18.0.0.203 on Windows and OS X and before 11.2.202.481 on Linux, Adobe AIR before 18.0.0.180, Adobe AIR SDK before 18.0.0.180, and Adobe AIR SDK & Compiler before 18.0.0.180 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-3117, CVE-2015-3123, CVE-2015-3130, CVE-2015-3133, CVE-2015-3134, and CVE-2015-4431.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.508-0.14.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.508-0.14.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.508-0.14.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-11.2.202.508-0.14.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-gnome-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-gnome-11.2.202.508-0.14.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-kde4-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-kde4-11.2.202.508-0.14.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-5124", url: "https://www.suse.com/security/cve/CVE-2015-5124", }, { category: "external", summary: "SUSE Bug 941239 for CVE-2015-5124", url: "https://bugzilla.suse.com/941239", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.508-0.14.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.508-0.14.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.508-0.14.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-11.2.202.508-0.14.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-gnome-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-gnome-11.2.202.508-0.14.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-kde4-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-kde4-11.2.202.508-0.14.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2015-08-12T07:49:53Z", details: "critical", }, ], title: "CVE-2015-5124", }, { cve: "CVE-2015-5125", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-5125", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before 18.0.0.199, and Adobe AIR SDK & Compiler before 18.0.0.199 allow attackers to cause a denial of service (vector-length corruption) or possibly have unspecified other impact via unknown vectors.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.508-0.14.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.508-0.14.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.508-0.14.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-11.2.202.508-0.14.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-gnome-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-gnome-11.2.202.508-0.14.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-kde4-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-kde4-11.2.202.508-0.14.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-5125", url: "https://www.suse.com/security/cve/CVE-2015-5125", }, { category: "external", summary: "SUSE Bug 941239 for CVE-2015-5125", url: "https://bugzilla.suse.com/941239", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.508-0.14.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.508-0.14.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.508-0.14.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-11.2.202.508-0.14.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-gnome-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-gnome-11.2.202.508-0.14.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-kde4-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-kde4-11.2.202.508-0.14.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2015-08-12T07:49:53Z", details: "critical", }, ], title: "CVE-2015-5125", }, { cve: "CVE-2015-5127", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-5127", }, ], notes: [ { category: "general", text: "Use-after-free vulnerability in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before 18.0.0.199, and Adobe AIR SDK & Compiler before 18.0.0.199 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-5130, CVE-2015-5134, CVE-2015-5539, CVE-2015-5540, CVE-2015-5550, CVE-2015-5551, CVE-2015-5556, CVE-2015-5557, CVE-2015-5559, CVE-2015-5561, CVE-2015-5563, CVE-2015-5564, and CVE-2015-5565.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.508-0.14.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.508-0.14.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.508-0.14.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-11.2.202.508-0.14.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-gnome-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-gnome-11.2.202.508-0.14.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-kde4-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-kde4-11.2.202.508-0.14.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-5127", url: "https://www.suse.com/security/cve/CVE-2015-5127", }, { category: "external", summary: "SUSE Bug 941239 for CVE-2015-5127", url: "https://bugzilla.suse.com/941239", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.508-0.14.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.508-0.14.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.508-0.14.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-11.2.202.508-0.14.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-gnome-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-gnome-11.2.202.508-0.14.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-kde4-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-kde4-11.2.202.508-0.14.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2015-08-12T07:49:53Z", details: "critical", }, ], title: "CVE-2015-5127", }, { cve: "CVE-2015-5128", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-5128", }, ], notes: [ { category: "general", text: "** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.508-0.14.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.508-0.14.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.508-0.14.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-11.2.202.508-0.14.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-gnome-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-gnome-11.2.202.508-0.14.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-kde4-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-kde4-11.2.202.508-0.14.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-5128", url: "https://www.suse.com/security/cve/CVE-2015-5128", }, { category: "external", summary: "SUSE Bug 941239 for CVE-2015-5128", url: "https://bugzilla.suse.com/941239", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.508-0.14.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.508-0.14.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.508-0.14.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-11.2.202.508-0.14.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-gnome-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-gnome-11.2.202.508-0.14.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-kde4-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-kde4-11.2.202.508-0.14.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2015-08-12T07:49:53Z", details: "low", }, ], title: "CVE-2015-5128", }, { cve: "CVE-2015-5129", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-5129", }, ], notes: [ { category: "general", text: "Heap-based buffer overflow in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before 18.0.0.199, and Adobe AIR SDK & Compiler before 18.0.0.199 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-5541.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.508-0.14.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.508-0.14.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.508-0.14.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-11.2.202.508-0.14.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-gnome-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-gnome-11.2.202.508-0.14.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-kde4-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-kde4-11.2.202.508-0.14.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-5129", url: "https://www.suse.com/security/cve/CVE-2015-5129", }, { category: "external", summary: "SUSE Bug 941239 for CVE-2015-5129", url: "https://bugzilla.suse.com/941239", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.508-0.14.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.508-0.14.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.508-0.14.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-11.2.202.508-0.14.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-gnome-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-gnome-11.2.202.508-0.14.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-kde4-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-kde4-11.2.202.508-0.14.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2015-08-12T07:49:53Z", details: "critical", }, ], title: "CVE-2015-5129", }, { cve: "CVE-2015-5130", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-5130", }, ], notes: [ { category: "general", text: "Use-after-free vulnerability in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before 18.0.0.199, and Adobe AIR SDK & Compiler before 18.0.0.199 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-5127, CVE-2015-5134, CVE-2015-5539, CVE-2015-5540, CVE-2015-5550, CVE-2015-5551, CVE-2015-5556, CVE-2015-5557, CVE-2015-5559, CVE-2015-5561, CVE-2015-5563, CVE-2015-5564, and CVE-2015-5565.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.508-0.14.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.508-0.14.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.508-0.14.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-11.2.202.508-0.14.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-gnome-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-gnome-11.2.202.508-0.14.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-kde4-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-kde4-11.2.202.508-0.14.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-5130", url: "https://www.suse.com/security/cve/CVE-2015-5130", }, { category: "external", summary: "SUSE Bug 941239 for CVE-2015-5130", url: "https://bugzilla.suse.com/941239", }, { category: "external", summary: "SUSE Bug 952254 for CVE-2015-5130", url: "https://bugzilla.suse.com/952254", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.508-0.14.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.508-0.14.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.508-0.14.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-11.2.202.508-0.14.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-gnome-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-gnome-11.2.202.508-0.14.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-kde4-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-kde4-11.2.202.508-0.14.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2015-08-12T07:49:53Z", details: "critical", }, ], title: "CVE-2015-5130", }, { cve: "CVE-2015-5131", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-5131", }, ], notes: [ { category: "general", text: "Buffer overflow in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before 18.0.0.199, and Adobe AIR SDK & Compiler before 18.0.0.199 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-5132 and CVE-2015-5133.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.508-0.14.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.508-0.14.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.508-0.14.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-11.2.202.508-0.14.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-gnome-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-gnome-11.2.202.508-0.14.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-kde4-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-kde4-11.2.202.508-0.14.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-5131", url: "https://www.suse.com/security/cve/CVE-2015-5131", }, { category: "external", summary: "SUSE Bug 941239 for CVE-2015-5131", url: "https://bugzilla.suse.com/941239", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.508-0.14.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.508-0.14.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.508-0.14.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-11.2.202.508-0.14.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-gnome-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-gnome-11.2.202.508-0.14.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-kde4-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-kde4-11.2.202.508-0.14.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2015-08-12T07:49:53Z", details: "critical", }, ], title: "CVE-2015-5131", }, { cve: "CVE-2015-5132", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-5132", }, ], notes: [ { category: "general", text: "Buffer overflow in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before 18.0.0.199, and Adobe AIR SDK & Compiler before 18.0.0.199 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-5131 and CVE-2015-5133.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.508-0.14.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.508-0.14.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.508-0.14.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-11.2.202.508-0.14.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-gnome-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-gnome-11.2.202.508-0.14.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-kde4-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-kde4-11.2.202.508-0.14.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-5132", url: "https://www.suse.com/security/cve/CVE-2015-5132", }, { category: "external", summary: "SUSE Bug 941239 for CVE-2015-5132", url: "https://bugzilla.suse.com/941239", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.508-0.14.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.508-0.14.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.508-0.14.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-11.2.202.508-0.14.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-gnome-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-gnome-11.2.202.508-0.14.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-kde4-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-kde4-11.2.202.508-0.14.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2015-08-12T07:49:53Z", details: "critical", }, ], title: "CVE-2015-5132", }, { cve: "CVE-2015-5133", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-5133", }, ], notes: [ { category: "general", text: "Buffer overflow in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before 18.0.0.199, and Adobe AIR SDK & Compiler before 18.0.0.199 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-5131 and CVE-2015-5132.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.508-0.14.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.508-0.14.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.508-0.14.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-11.2.202.508-0.14.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-gnome-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-gnome-11.2.202.508-0.14.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-kde4-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-kde4-11.2.202.508-0.14.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-5133", url: "https://www.suse.com/security/cve/CVE-2015-5133", }, { category: "external", summary: "SUSE Bug 941239 for CVE-2015-5133", url: "https://bugzilla.suse.com/941239", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.508-0.14.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.508-0.14.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.508-0.14.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-11.2.202.508-0.14.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-gnome-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-gnome-11.2.202.508-0.14.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-kde4-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-kde4-11.2.202.508-0.14.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2015-08-12T07:49:53Z", details: "critical", }, ], title: "CVE-2015-5133", }, { cve: "CVE-2015-5134", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-5134", }, ], notes: [ { category: "general", text: "Use-after-free vulnerability in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before 18.0.0.199, and Adobe AIR SDK & Compiler before 18.0.0.199 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-5127, CVE-2015-5130, CVE-2015-5539, CVE-2015-5540, CVE-2015-5550, CVE-2015-5551, CVE-2015-5556, CVE-2015-5557, CVE-2015-5559, CVE-2015-5561, CVE-2015-5563, CVE-2015-5564, and CVE-2015-5565.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.508-0.14.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.508-0.14.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.508-0.14.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-11.2.202.508-0.14.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-gnome-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-gnome-11.2.202.508-0.14.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-kde4-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-kde4-11.2.202.508-0.14.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-5134", url: "https://www.suse.com/security/cve/CVE-2015-5134", }, { category: "external", summary: "SUSE Bug 941239 for CVE-2015-5134", url: "https://bugzilla.suse.com/941239", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.508-0.14.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.508-0.14.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.508-0.14.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-11.2.202.508-0.14.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-gnome-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-gnome-11.2.202.508-0.14.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-kde4-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-kde4-11.2.202.508-0.14.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2015-08-12T07:49:53Z", details: "critical", }, ], title: "CVE-2015-5134", }, { cve: "CVE-2015-5539", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-5539", }, ], notes: [ { category: "general", text: "Use-after-free vulnerability in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before 18.0.0.199, and Adobe AIR SDK & Compiler before 18.0.0.199 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-5127, CVE-2015-5130, CVE-2015-5134, CVE-2015-5540, CVE-2015-5550, CVE-2015-5551, CVE-2015-5556, CVE-2015-5557, CVE-2015-5559, CVE-2015-5561, CVE-2015-5563, CVE-2015-5564, and CVE-2015-5565.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.508-0.14.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.508-0.14.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.508-0.14.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-11.2.202.508-0.14.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-gnome-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-gnome-11.2.202.508-0.14.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-kde4-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-kde4-11.2.202.508-0.14.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-5539", url: "https://www.suse.com/security/cve/CVE-2015-5539", }, { category: "external", summary: "SUSE Bug 941239 for CVE-2015-5539", url: "https://bugzilla.suse.com/941239", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.508-0.14.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.508-0.14.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.508-0.14.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-11.2.202.508-0.14.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-gnome-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-gnome-11.2.202.508-0.14.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-kde4-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-kde4-11.2.202.508-0.14.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2015-08-12T07:49:53Z", details: "critical", }, ], title: "CVE-2015-5539", }, { cve: "CVE-2015-5540", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-5540", }, ], notes: [ { category: "general", text: "Use-after-free vulnerability in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before 18.0.0.199, and Adobe AIR SDK & Compiler before 18.0.0.199 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-5127, CVE-2015-5130, CVE-2015-5134, CVE-2015-5539, CVE-2015-5550, CVE-2015-5551, CVE-2015-5556, CVE-2015-5557, CVE-2015-5559, CVE-2015-5561, CVE-2015-5563, CVE-2015-5564, and CVE-2015-5565.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.508-0.14.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.508-0.14.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.508-0.14.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-11.2.202.508-0.14.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-gnome-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-gnome-11.2.202.508-0.14.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-kde4-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-kde4-11.2.202.508-0.14.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-5540", url: "https://www.suse.com/security/cve/CVE-2015-5540", }, { category: "external", summary: "SUSE Bug 941239 for CVE-2015-5540", url: "https://bugzilla.suse.com/941239", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.508-0.14.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.508-0.14.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.508-0.14.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-11.2.202.508-0.14.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-gnome-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-gnome-11.2.202.508-0.14.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-kde4-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-kde4-11.2.202.508-0.14.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2015-08-12T07:49:53Z", details: "critical", }, ], title: "CVE-2015-5540", }, { cve: "CVE-2015-5541", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-5541", }, ], notes: [ { category: "general", text: "Heap-based buffer overflow in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before 18.0.0.199, and Adobe AIR SDK & Compiler before 18.0.0.199 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-5129.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.508-0.14.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.508-0.14.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.508-0.14.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-11.2.202.508-0.14.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-gnome-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-gnome-11.2.202.508-0.14.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-kde4-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-kde4-11.2.202.508-0.14.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-5541", url: "https://www.suse.com/security/cve/CVE-2015-5541", }, { category: "external", summary: "SUSE Bug 941239 for CVE-2015-5541", url: "https://bugzilla.suse.com/941239", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.508-0.14.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.508-0.14.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.508-0.14.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-11.2.202.508-0.14.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-gnome-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-gnome-11.2.202.508-0.14.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-kde4-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-kde4-11.2.202.508-0.14.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2015-08-12T07:49:53Z", details: "critical", }, ], title: "CVE-2015-5541", }, { cve: "CVE-2015-5544", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-5544", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before 18.0.0.199, and Adobe AIR SDK & Compiler before 18.0.0.199 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-5545, CVE-2015-5546, CVE-2015-5547, CVE-2015-5548, CVE-2015-5549, CVE-2015-5552, and CVE-2015-5553.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.508-0.14.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.508-0.14.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.508-0.14.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-11.2.202.508-0.14.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-gnome-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-gnome-11.2.202.508-0.14.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-kde4-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-kde4-11.2.202.508-0.14.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-5544", url: "https://www.suse.com/security/cve/CVE-2015-5544", }, { category: "external", summary: "SUSE Bug 941239 for CVE-2015-5544", url: "https://bugzilla.suse.com/941239", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.508-0.14.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.508-0.14.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.508-0.14.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-11.2.202.508-0.14.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-gnome-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-gnome-11.2.202.508-0.14.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-kde4-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-kde4-11.2.202.508-0.14.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2015-08-12T07:49:53Z", details: "critical", }, ], title: "CVE-2015-5544", }, { cve: "CVE-2015-5545", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-5545", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before 18.0.0.199, and Adobe AIR SDK & Compiler before 18.0.0.199 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-5544, CVE-2015-5546, CVE-2015-5547, CVE-2015-5548, CVE-2015-5549, CVE-2015-5552, and CVE-2015-5553.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.508-0.14.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.508-0.14.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.508-0.14.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-11.2.202.508-0.14.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-gnome-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-gnome-11.2.202.508-0.14.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-kde4-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-kde4-11.2.202.508-0.14.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-5545", url: "https://www.suse.com/security/cve/CVE-2015-5545", }, { category: "external", summary: "SUSE Bug 941239 for CVE-2015-5545", url: "https://bugzilla.suse.com/941239", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.508-0.14.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.508-0.14.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.508-0.14.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-11.2.202.508-0.14.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-gnome-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-gnome-11.2.202.508-0.14.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-kde4-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-kde4-11.2.202.508-0.14.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2015-08-12T07:49:53Z", details: "critical", }, ], title: "CVE-2015-5545", }, { cve: "CVE-2015-5546", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-5546", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before 18.0.0.199, and Adobe AIR SDK & Compiler before 18.0.0.199 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-5544, CVE-2015-5545, CVE-2015-5547, CVE-2015-5548, CVE-2015-5549, CVE-2015-5552, and CVE-2015-5553.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.508-0.14.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.508-0.14.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.508-0.14.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-11.2.202.508-0.14.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-gnome-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-gnome-11.2.202.508-0.14.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-kde4-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-kde4-11.2.202.508-0.14.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-5546", url: "https://www.suse.com/security/cve/CVE-2015-5546", }, { category: "external", summary: "SUSE Bug 941239 for CVE-2015-5546", url: "https://bugzilla.suse.com/941239", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.508-0.14.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.508-0.14.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.508-0.14.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-11.2.202.508-0.14.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-gnome-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-gnome-11.2.202.508-0.14.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-kde4-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-kde4-11.2.202.508-0.14.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2015-08-12T07:49:53Z", details: "critical", }, ], title: "CVE-2015-5546", }, { cve: "CVE-2015-5547", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-5547", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before 18.0.0.199, and Adobe AIR SDK & Compiler before 18.0.0.199 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-5544, CVE-2015-5545, CVE-2015-5546, CVE-2015-5548, CVE-2015-5549, CVE-2015-5552, and CVE-2015-5553.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.508-0.14.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.508-0.14.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.508-0.14.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-11.2.202.508-0.14.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-gnome-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-gnome-11.2.202.508-0.14.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-kde4-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-kde4-11.2.202.508-0.14.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-5547", url: "https://www.suse.com/security/cve/CVE-2015-5547", }, { category: "external", summary: "SUSE Bug 941239 for CVE-2015-5547", url: "https://bugzilla.suse.com/941239", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.508-0.14.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.508-0.14.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.508-0.14.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-11.2.202.508-0.14.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-gnome-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-gnome-11.2.202.508-0.14.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-kde4-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-kde4-11.2.202.508-0.14.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2015-08-12T07:49:53Z", details: "critical", }, ], title: "CVE-2015-5547", }, { cve: "CVE-2015-5548", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-5548", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before 18.0.0.199, and Adobe AIR SDK & Compiler before 18.0.0.199 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-5544, CVE-2015-5545, CVE-2015-5546, CVE-2015-5547, CVE-2015-5549, CVE-2015-5552, and CVE-2015-5553.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.508-0.14.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.508-0.14.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.508-0.14.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-11.2.202.508-0.14.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-gnome-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-gnome-11.2.202.508-0.14.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-kde4-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-kde4-11.2.202.508-0.14.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-5548", url: "https://www.suse.com/security/cve/CVE-2015-5548", }, { category: "external", summary: "SUSE Bug 941239 for CVE-2015-5548", url: "https://bugzilla.suse.com/941239", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.508-0.14.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.508-0.14.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.508-0.14.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-11.2.202.508-0.14.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-gnome-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-gnome-11.2.202.508-0.14.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-kde4-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-kde4-11.2.202.508-0.14.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2015-08-12T07:49:53Z", details: "critical", }, ], title: "CVE-2015-5548", }, { cve: "CVE-2015-5549", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-5549", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before 18.0.0.199, and Adobe AIR SDK & Compiler before 18.0.0.199 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-5544, CVE-2015-5545, CVE-2015-5546, CVE-2015-5547, CVE-2015-5548, CVE-2015-5552, and CVE-2015-5553.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.508-0.14.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.508-0.14.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.508-0.14.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-11.2.202.508-0.14.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-gnome-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-gnome-11.2.202.508-0.14.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-kde4-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-kde4-11.2.202.508-0.14.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-5549", url: "https://www.suse.com/security/cve/CVE-2015-5549", }, { category: "external", summary: "SUSE Bug 941239 for CVE-2015-5549", url: "https://bugzilla.suse.com/941239", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.508-0.14.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.508-0.14.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.508-0.14.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-11.2.202.508-0.14.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-gnome-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-gnome-11.2.202.508-0.14.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-kde4-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-kde4-11.2.202.508-0.14.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2015-08-12T07:49:53Z", details: "critical", }, ], title: "CVE-2015-5549", }, { cve: "CVE-2015-5550", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-5550", }, ], notes: [ { category: "general", text: "Use-after-free vulnerability in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before 18.0.0.199, and Adobe AIR SDK & Compiler before 18.0.0.199 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-5127, CVE-2015-5130, CVE-2015-5134, CVE-2015-5539, CVE-2015-5540, CVE-2015-5551, CVE-2015-5556, CVE-2015-5557, CVE-2015-5559, CVE-2015-5561, CVE-2015-5563, CVE-2015-5564, and CVE-2015-5565.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.508-0.14.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.508-0.14.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.508-0.14.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-11.2.202.508-0.14.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-gnome-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-gnome-11.2.202.508-0.14.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-kde4-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-kde4-11.2.202.508-0.14.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-5550", url: "https://www.suse.com/security/cve/CVE-2015-5550", }, { category: "external", summary: "SUSE Bug 941239 for CVE-2015-5550", url: "https://bugzilla.suse.com/941239", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.508-0.14.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.508-0.14.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.508-0.14.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-11.2.202.508-0.14.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-gnome-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-gnome-11.2.202.508-0.14.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-kde4-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-kde4-11.2.202.508-0.14.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2015-08-12T07:49:53Z", details: "critical", }, ], title: "CVE-2015-5550", }, { cve: "CVE-2015-5551", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-5551", }, ], notes: [ { category: "general", text: "Use-after-free vulnerability in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before 18.0.0.199, and Adobe AIR SDK & Compiler before 18.0.0.199 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-5127, CVE-2015-5130, CVE-2015-5134, CVE-2015-5539, CVE-2015-5540, CVE-2015-5550, CVE-2015-5556, CVE-2015-5557, CVE-2015-5559, CVE-2015-5561, CVE-2015-5563, CVE-2015-5564, and CVE-2015-5565.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.508-0.14.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.508-0.14.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.508-0.14.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-11.2.202.508-0.14.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-gnome-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-gnome-11.2.202.508-0.14.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-kde4-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-kde4-11.2.202.508-0.14.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-5551", url: "https://www.suse.com/security/cve/CVE-2015-5551", }, { category: "external", summary: "SUSE Bug 941239 for CVE-2015-5551", url: "https://bugzilla.suse.com/941239", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.508-0.14.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.508-0.14.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.508-0.14.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-11.2.202.508-0.14.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-gnome-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-gnome-11.2.202.508-0.14.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-kde4-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-kde4-11.2.202.508-0.14.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2015-08-12T07:49:53Z", details: "critical", }, ], title: "CVE-2015-5551", }, { cve: "CVE-2015-5552", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-5552", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before 18.0.0.199, and Adobe AIR SDK & Compiler before 18.0.0.199 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-5544, CVE-2015-5545, CVE-2015-5546, CVE-2015-5547, CVE-2015-5548, CVE-2015-5549, and CVE-2015-5553.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.508-0.14.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.508-0.14.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.508-0.14.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-11.2.202.508-0.14.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-gnome-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-gnome-11.2.202.508-0.14.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-kde4-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-kde4-11.2.202.508-0.14.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-5552", url: "https://www.suse.com/security/cve/CVE-2015-5552", }, { category: "external", summary: "SUSE Bug 941239 for CVE-2015-5552", url: "https://bugzilla.suse.com/941239", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.508-0.14.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.508-0.14.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.508-0.14.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-11.2.202.508-0.14.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-gnome-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-gnome-11.2.202.508-0.14.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-kde4-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-kde4-11.2.202.508-0.14.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2015-08-12T07:49:53Z", details: "critical", }, ], title: "CVE-2015-5552", }, { cve: "CVE-2015-5553", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-5553", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before 18.0.0.199, and Adobe AIR SDK & Compiler before 18.0.0.199 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-5544, CVE-2015-5545, CVE-2015-5546, CVE-2015-5547, CVE-2015-5548, CVE-2015-5549, and CVE-2015-5552.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.508-0.14.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.508-0.14.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.508-0.14.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-11.2.202.508-0.14.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-gnome-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-gnome-11.2.202.508-0.14.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-kde4-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-kde4-11.2.202.508-0.14.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-5553", url: "https://www.suse.com/security/cve/CVE-2015-5553", }, { category: "external", summary: "SUSE Bug 941239 for CVE-2015-5553", url: "https://bugzilla.suse.com/941239", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.508-0.14.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.508-0.14.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.508-0.14.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-11.2.202.508-0.14.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-gnome-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-gnome-11.2.202.508-0.14.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-kde4-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-kde4-11.2.202.508-0.14.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2015-08-12T07:49:53Z", details: "critical", }, ], title: "CVE-2015-5553", }, { cve: "CVE-2015-5554", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-5554", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before 18.0.0.199, and Adobe AIR SDK & Compiler before 18.0.0.199 allow attackers to execute arbitrary code by leveraging an unspecified \"type confusion,\" a different vulnerability than CVE-2015-5555, CVE-2015-5558, and CVE-2015-5562.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.508-0.14.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.508-0.14.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.508-0.14.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-11.2.202.508-0.14.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-gnome-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-gnome-11.2.202.508-0.14.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-kde4-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-kde4-11.2.202.508-0.14.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-5554", url: "https://www.suse.com/security/cve/CVE-2015-5554", }, { category: "external", summary: "SUSE Bug 941239 for CVE-2015-5554", url: "https://bugzilla.suse.com/941239", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.508-0.14.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.508-0.14.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.508-0.14.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-11.2.202.508-0.14.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-gnome-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-gnome-11.2.202.508-0.14.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-kde4-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-kde4-11.2.202.508-0.14.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2015-08-12T07:49:53Z", details: "critical", }, ], title: "CVE-2015-5554", }, { cve: "CVE-2015-5555", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-5555", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before 18.0.0.199, and Adobe AIR SDK & Compiler before 18.0.0.199 allow attackers to execute arbitrary code by leveraging an unspecified \"type confusion,\" a different vulnerability than CVE-2015-5554, CVE-2015-5558, and CVE-2015-5562.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.508-0.14.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.508-0.14.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.508-0.14.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-11.2.202.508-0.14.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-gnome-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-gnome-11.2.202.508-0.14.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-kde4-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-kde4-11.2.202.508-0.14.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-5555", url: "https://www.suse.com/security/cve/CVE-2015-5555", }, { category: "external", summary: "SUSE Bug 941239 for CVE-2015-5555", url: "https://bugzilla.suse.com/941239", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.508-0.14.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.508-0.14.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.508-0.14.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-11.2.202.508-0.14.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-gnome-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-gnome-11.2.202.508-0.14.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-kde4-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-kde4-11.2.202.508-0.14.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2015-08-12T07:49:53Z", details: "critical", }, ], title: "CVE-2015-5555", }, { cve: "CVE-2015-5556", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-5556", }, ], notes: [ { category: "general", text: "Use-after-free vulnerability in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before 18.0.0.199, and Adobe AIR SDK & Compiler before 18.0.0.199 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-5127, CVE-2015-5130, CVE-2015-5134, CVE-2015-5539, CVE-2015-5540, CVE-2015-5550, CVE-2015-5551, CVE-2015-5557, CVE-2015-5559, CVE-2015-5561, CVE-2015-5563, CVE-2015-5564, and CVE-2015-5565.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.508-0.14.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.508-0.14.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.508-0.14.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-11.2.202.508-0.14.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-gnome-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-gnome-11.2.202.508-0.14.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-kde4-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-kde4-11.2.202.508-0.14.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-5556", url: "https://www.suse.com/security/cve/CVE-2015-5556", }, { category: "external", summary: "SUSE Bug 941239 for CVE-2015-5556", url: "https://bugzilla.suse.com/941239", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.508-0.14.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.508-0.14.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.508-0.14.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-11.2.202.508-0.14.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-gnome-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-gnome-11.2.202.508-0.14.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-kde4-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-kde4-11.2.202.508-0.14.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2015-08-12T07:49:53Z", details: "critical", }, ], title: "CVE-2015-5556", }, { cve: "CVE-2015-5557", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-5557", }, ], notes: [ { category: "general", text: "Use-after-free vulnerability in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before 18.0.0.199, and Adobe AIR SDK & Compiler before 18.0.0.199 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-5127, CVE-2015-5130, CVE-2015-5134, CVE-2015-5539, CVE-2015-5540, CVE-2015-5550, CVE-2015-5551, CVE-2015-5556, CVE-2015-5559, CVE-2015-5561, CVE-2015-5563, CVE-2015-5564, and CVE-2015-5565.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.508-0.14.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.508-0.14.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.508-0.14.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-11.2.202.508-0.14.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-gnome-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-gnome-11.2.202.508-0.14.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-kde4-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-kde4-11.2.202.508-0.14.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-5557", url: "https://www.suse.com/security/cve/CVE-2015-5557", }, { category: "external", summary: "SUSE Bug 941239 for CVE-2015-5557", url: "https://bugzilla.suse.com/941239", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.508-0.14.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.508-0.14.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.508-0.14.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-11.2.202.508-0.14.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-gnome-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-gnome-11.2.202.508-0.14.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-kde4-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-kde4-11.2.202.508-0.14.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2015-08-12T07:49:53Z", details: "critical", }, ], title: "CVE-2015-5557", }, { cve: "CVE-2015-5558", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-5558", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before 18.0.0.199, and Adobe AIR SDK & Compiler before 18.0.0.199 allow attackers to execute arbitrary code by leveraging an unspecified \"type confusion,\" a different vulnerability than CVE-2015-5554, CVE-2015-5555, and CVE-2015-5562.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.508-0.14.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.508-0.14.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.508-0.14.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-11.2.202.508-0.14.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-gnome-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-gnome-11.2.202.508-0.14.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-kde4-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-kde4-11.2.202.508-0.14.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-5558", url: "https://www.suse.com/security/cve/CVE-2015-5558", }, { category: "external", summary: "SUSE Bug 941239 for CVE-2015-5558", url: "https://bugzilla.suse.com/941239", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.508-0.14.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.508-0.14.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.508-0.14.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-11.2.202.508-0.14.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-gnome-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-gnome-11.2.202.508-0.14.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-kde4-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-kde4-11.2.202.508-0.14.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2015-08-12T07:49:53Z", details: "critical", }, ], title: "CVE-2015-5558", }, { cve: "CVE-2015-5559", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-5559", }, ], notes: [ { category: "general", text: "Use-after-free vulnerability in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before 18.0.0.199, and Adobe AIR SDK & Compiler before 18.0.0.199 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-5127, CVE-2015-5130, CVE-2015-5134, CVE-2015-5539, CVE-2015-5540, CVE-2015-5550, CVE-2015-5551, CVE-2015-5556, CVE-2015-5557, CVE-2015-5561, CVE-2015-5563, CVE-2015-5564, and CVE-2015-5565.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.508-0.14.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.508-0.14.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.508-0.14.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-11.2.202.508-0.14.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-gnome-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-gnome-11.2.202.508-0.14.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-kde4-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-kde4-11.2.202.508-0.14.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-5559", url: "https://www.suse.com/security/cve/CVE-2015-5559", }, { category: "external", summary: "SUSE Bug 941239 for CVE-2015-5559", url: "https://bugzilla.suse.com/941239", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.508-0.14.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.508-0.14.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.508-0.14.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-11.2.202.508-0.14.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-gnome-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-gnome-11.2.202.508-0.14.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-kde4-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-kde4-11.2.202.508-0.14.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2015-08-12T07:49:53Z", details: "critical", }, ], title: "CVE-2015-5559", }, { cve: "CVE-2015-5560", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-5560", }, ], notes: [ { category: "general", text: "Integer overflow in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before 18.0.0.199, and Adobe AIR SDK & Compiler before 18.0.0.199 allows attackers to execute arbitrary code via unspecified vectors.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.508-0.14.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.508-0.14.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.508-0.14.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-11.2.202.508-0.14.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-gnome-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-gnome-11.2.202.508-0.14.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-kde4-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-kde4-11.2.202.508-0.14.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-5560", url: "https://www.suse.com/security/cve/CVE-2015-5560", }, { category: "external", summary: "SUSE Bug 941239 for CVE-2015-5560", url: "https://bugzilla.suse.com/941239", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.508-0.14.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.508-0.14.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.508-0.14.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-11.2.202.508-0.14.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-gnome-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-gnome-11.2.202.508-0.14.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-kde4-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-kde4-11.2.202.508-0.14.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2015-08-12T07:49:53Z", details: "critical", }, ], title: "CVE-2015-5560", }, { cve: "CVE-2015-5561", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-5561", }, ], notes: [ { category: "general", text: "Use-after-free vulnerability in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before 18.0.0.199, and Adobe AIR SDK & Compiler before 18.0.0.199 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-5127, CVE-2015-5130, CVE-2015-5134, CVE-2015-5539, CVE-2015-5540, CVE-2015-5550, CVE-2015-5551, CVE-2015-5556, CVE-2015-5557, CVE-2015-5559, CVE-2015-5563, CVE-2015-5564, and CVE-2015-5565.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.508-0.14.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.508-0.14.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.508-0.14.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-11.2.202.508-0.14.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-gnome-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-gnome-11.2.202.508-0.14.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-kde4-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-kde4-11.2.202.508-0.14.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-5561", url: "https://www.suse.com/security/cve/CVE-2015-5561", }, { category: "external", summary: "SUSE Bug 941239 for CVE-2015-5561", url: "https://bugzilla.suse.com/941239", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.508-0.14.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.508-0.14.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.508-0.14.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-11.2.202.508-0.14.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-gnome-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-gnome-11.2.202.508-0.14.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-kde4-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-kde4-11.2.202.508-0.14.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2015-08-12T07:49:53Z", details: "critical", }, ], title: "CVE-2015-5561", }, { cve: "CVE-2015-5562", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-5562", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before 18.0.0.199, and Adobe AIR SDK & Compiler before 18.0.0.199 allow attackers to execute arbitrary code by leveraging an unspecified \"type confusion,\" a different vulnerability than CVE-2015-5554, CVE-2015-5555, and CVE-2015-5558.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.508-0.14.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.508-0.14.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.508-0.14.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-11.2.202.508-0.14.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-gnome-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-gnome-11.2.202.508-0.14.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-kde4-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-kde4-11.2.202.508-0.14.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-5562", url: "https://www.suse.com/security/cve/CVE-2015-5562", }, { category: "external", summary: "SUSE Bug 941239 for CVE-2015-5562", url: "https://bugzilla.suse.com/941239", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.508-0.14.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.508-0.14.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.508-0.14.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-11.2.202.508-0.14.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-gnome-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-gnome-11.2.202.508-0.14.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-kde4-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-kde4-11.2.202.508-0.14.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2015-08-12T07:49:53Z", details: "critical", }, ], title: "CVE-2015-5562", }, { cve: "CVE-2015-5563", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-5563", }, ], notes: [ { category: "general", text: "Use-after-free vulnerability in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before 18.0.0.199, and Adobe AIR SDK & Compiler before 18.0.0.199 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-5127, CVE-2015-5130, CVE-2015-5134, CVE-2015-5539, CVE-2015-5540, CVE-2015-5550, CVE-2015-5551, CVE-2015-5556, CVE-2015-5557, CVE-2015-5559, CVE-2015-5561, CVE-2015-5564, and CVE-2015-5565.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.508-0.14.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.508-0.14.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.508-0.14.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-11.2.202.508-0.14.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-gnome-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-gnome-11.2.202.508-0.14.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-kde4-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-kde4-11.2.202.508-0.14.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-5563", url: "https://www.suse.com/security/cve/CVE-2015-5563", }, { category: "external", summary: "SUSE Bug 941239 for CVE-2015-5563", url: "https://bugzilla.suse.com/941239", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.508-0.14.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.508-0.14.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.508-0.14.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-11.2.202.508-0.14.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-gnome-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-gnome-11.2.202.508-0.14.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-kde4-11.2.202.508-0.14.1.i586", "SUSE Linux Enterprise Desktop 11 SP4:flash-player-kde4-11.2.202.508-0.14.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2015-08-12T07:49:53Z", details: "critical", }, ], title: "CVE-2015-5563", }, ], }
suse-su-2015:0880-1
Vulnerability from csaf_suse
Notes
{ document: { aggregate_severity: { namespace: "https://www.suse.com/support/security/rating/", text: "moderate", }, category: "csaf_security_advisory", csaf_version: "2.0", distribution: { text: "Copyright 2024 SUSE LLC. All rights reserved.", tlp: { label: "WHITE", url: "https://www.first.org/tlp/", }, }, lang: "en", notes: [ { category: "summary", text: "Security update for flash-player", title: "Title of the patch", }, { category: "description", text: "\nflash-player was updated to version 11.2.202.418 to fix 18 security issues:\n\n * Memory corruption vulnerabilities that could lead to code execution\n (CVE-2014-0576, CVE-2014-0581, CVE-2014-8440, CVE-2014-8441).\n * Use-after-free vulnerabilities that could lead to code execution\n (CVE-2014-0573, CVE-2014-0588, CVE-2014-8438).\n * A double free vulnerability that could lead to code execution\n (CVE-2014-0574).\n * Type confusion vulnerabilities that could lead to code execution\n (CVE-2014-0577, CVE-2014-0584, CVE-2014-0585, CVE-2014-0586,\n CVE-2014-0590).\n * Heap buffer overflow vulnerabilities that could lead to code\n execution (CVE-2014-0582, CVE-2014-0589).\n * An information disclosure vulnerability that could be exploited to\n disclose session tokens (CVE-2014-8437).\n * A heap buffer overflow vulnerability that could be exploited to\n perform privilege escalation from low to medium integrity level\n (CVE-2014-0583).\n * A permission issue that could be exploited to perform privilege\n escalation from low to medium integrity level (CVE-2014-8442).\n\nFurther information can be found at \nhttp://helpx.adobe.com/security/products/flash-player/apsb14-24.html\n<http://helpx.adobe.com/security/products/flash-player/apsb14-24.html> .\n\nSecurity Issues:\n\n * CVE-2014-0576\n <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0576>\n * CVE-2014-0581\n <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0581>\n * CVE-2014-8440\n <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8440>\n * CVE-2014-8441\n <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8441>\n * CVE-2014-0573\n <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0573>\n * CVE-2014-0588\n <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0588>\n * CVE-2014-8438\n <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8438>\n * CVE-2014-0574\n <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0574>\n * CVE-2014-0577\n <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0577>\n * CVE-2014-0584\n <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0584>\n * CVE-2014-0585\n <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0585>\n * CVE-2014-0586\n <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0586>\n * CVE-2014-0590\n <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0590>\n * CVE-2014-0582\n <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0582>\n * CVE-2014-0589\n <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0589>\n * CVE-2014-8437\n <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8437>\n * CVE-2014-0583\n <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0583>\n * CVE-2014-8442\n <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8442>\n\n", title: "Description of the patch", }, { category: "details", text: "sledsp3-flash-player", title: "Patchnames", }, { category: "legal_disclaimer", text: "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).", title: "Terms of use", }, ], publisher: { category: "vendor", contact_details: "https://www.suse.com/support/security/contact/", name: "SUSE Product Security Team", namespace: "https://www.suse.com/", }, references: [ { category: "external", summary: "SUSE ratings", url: "https://www.suse.com/support/security/rating/", }, { category: "self", summary: "URL of this CSAF notice", url: "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2015_0880-1.json", }, { category: "self", summary: "URL for SUSE-SU-2015:0880-1", url: "https://www.suse.com/support/update/announcement/2015/suse-su-20150880-1/", }, { category: "self", summary: "E-Mail link for SUSE-SU-2015:0880-1", url: "https://lists.suse.com/pipermail/sle-security-updates/2015-May/001384.html", }, { category: "self", summary: "SUSE Bug 824512", url: "https://bugzilla.suse.com/824512", }, { category: "self", summary: "SUSE Bug 828810", url: "https://bugzilla.suse.com/828810", }, { category: "self", summary: "SUSE Bug 839897", url: "https://bugzilla.suse.com/839897", }, { category: "self", summary: "SUSE Bug 850220", url: "https://bugzilla.suse.com/850220", }, { category: "self", summary: "SUSE Bug 854881", url: "https://bugzilla.suse.com/854881", }, { category: "self", summary: "SUSE Bug 856386", url: "https://bugzilla.suse.com/856386", }, { category: "self", summary: "SUSE Bug 858822", url: "https://bugzilla.suse.com/858822", }, { category: "self", summary: "SUSE Bug 862288", url: "https://bugzilla.suse.com/862288", }, { category: "self", summary: "SUSE Bug 865021", url: "https://bugzilla.suse.com/865021", }, { category: "self", summary: "SUSE Bug 867808", url: "https://bugzilla.suse.com/867808", }, { category: "self", summary: "SUSE Bug 872692", url: "https://bugzilla.suse.com/872692", }, { category: "self", summary: "SUSE Bug 875577", url: "https://bugzilla.suse.com/875577", }, { category: "self", summary: "SUSE Bug 877649", url: "https://bugzilla.suse.com/877649", }, { category: "self", summary: "SUSE Bug 882187", url: "https://bugzilla.suse.com/882187", }, { category: "self", summary: "SUSE Bug 886472", url: "https://bugzilla.suse.com/886472", }, { category: "self", summary: "SUSE Bug 891688", url: "https://bugzilla.suse.com/891688", }, { category: "self", summary: "SUSE Bug 895856", url: "https://bugzilla.suse.com/895856", }, { category: "self", summary: "SUSE Bug 901334", url: "https://bugzilla.suse.com/901334", }, { category: "self", summary: "SUSE Bug 905032", url: "https://bugzilla.suse.com/905032", }, { category: "self", summary: "SUSE Bug 907257", url: "https://bugzilla.suse.com/907257", }, { category: "self", summary: "SUSE Bug 909219", url: "https://bugzilla.suse.com/909219", }, { category: "self", summary: "SUSE Bug 913057", url: "https://bugzilla.suse.com/913057", }, { category: "self", summary: "SUSE Bug 914333", url: "https://bugzilla.suse.com/914333", }, { category: "self", summary: "SUSE Bug 914463", url: "https://bugzilla.suse.com/914463", }, { category: "self", summary: "SUSE Bug 915918", url: "https://bugzilla.suse.com/915918", }, { category: "self", summary: "SUSE Bug 922033", url: "https://bugzilla.suse.com/922033", }, { category: "self", summary: "SUSE Bug 927089", url: "https://bugzilla.suse.com/927089", }, { category: "self", summary: "SUSE Bug 930677", url: "https://bugzilla.suse.com/930677", }, { category: "self", summary: "SUSE Bug 934088", url: "https://bugzilla.suse.com/934088", }, { category: "self", summary: "SUSE Bug 935701", url: "https://bugzilla.suse.com/935701", }, { category: "self", summary: "SUSE CVE CVE-2013-3343 page", url: "https://www.suse.com/security/cve/CVE-2013-3343/", }, { category: "self", summary: "SUSE CVE CVE-2013-3344 page", url: "https://www.suse.com/security/cve/CVE-2013-3344/", }, { category: "self", summary: "SUSE CVE CVE-2013-3345 page", url: "https://www.suse.com/security/cve/CVE-2013-3345/", }, { category: "self", summary: "SUSE CVE CVE-2013-3347 page", url: "https://www.suse.com/security/cve/CVE-2013-3347/", }, { category: "self", summary: "SUSE CVE CVE-2013-3361 page", url: "https://www.suse.com/security/cve/CVE-2013-3361/", }, { category: "self", summary: "SUSE CVE CVE-2013-3362 page", url: "https://www.suse.com/security/cve/CVE-2013-3362/", }, { category: "self", summary: "SUSE CVE CVE-2013-3363 page", url: "https://www.suse.com/security/cve/CVE-2013-3363/", }, { category: "self", summary: "SUSE CVE CVE-2013-5324 page", url: "https://www.suse.com/security/cve/CVE-2013-5324/", }, { category: "self", summary: "SUSE CVE CVE-2013-5329 page", url: "https://www.suse.com/security/cve/CVE-2013-5329/", }, { category: "self", summary: "SUSE CVE CVE-2013-5330 page", url: "https://www.suse.com/security/cve/CVE-2013-5330/", }, { category: "self", summary: "SUSE CVE CVE-2013-5331 page", url: "https://www.suse.com/security/cve/CVE-2013-5331/", }, { category: "self", summary: "SUSE CVE CVE-2013-5332 page", url: "https://www.suse.com/security/cve/CVE-2013-5332/", }, { category: "self", summary: "SUSE CVE CVE-2014-0491 page", url: "https://www.suse.com/security/cve/CVE-2014-0491/", }, { category: "self", summary: "SUSE CVE CVE-2014-0492 page", url: "https://www.suse.com/security/cve/CVE-2014-0492/", }, { category: "self", summary: "SUSE CVE CVE-2014-0497 page", url: "https://www.suse.com/security/cve/CVE-2014-0497/", }, { category: "self", summary: "SUSE CVE CVE-2014-0498 page", url: "https://www.suse.com/security/cve/CVE-2014-0498/", }, { category: "self", summary: "SUSE CVE CVE-2014-0499 page", url: "https://www.suse.com/security/cve/CVE-2014-0499/", }, { category: "self", summary: "SUSE CVE CVE-2014-0502 page", url: "https://www.suse.com/security/cve/CVE-2014-0502/", }, { category: "self", summary: "SUSE CVE CVE-2014-0503 page", url: "https://www.suse.com/security/cve/CVE-2014-0503/", }, { category: "self", summary: "SUSE CVE CVE-2014-0504 page", url: "https://www.suse.com/security/cve/CVE-2014-0504/", }, { category: "self", summary: "SUSE CVE CVE-2014-0506 page", url: "https://www.suse.com/security/cve/CVE-2014-0506/", }, { category: "self", summary: "SUSE CVE CVE-2014-0507 page", url: "https://www.suse.com/security/cve/CVE-2014-0507/", }, { category: "self", summary: "SUSE CVE CVE-2014-0508 page", url: "https://www.suse.com/security/cve/CVE-2014-0508/", }, { category: "self", summary: "SUSE CVE CVE-2014-0509 page", url: "https://www.suse.com/security/cve/CVE-2014-0509/", }, { category: "self", summary: "SUSE CVE CVE-2014-0510 page", url: "https://www.suse.com/security/cve/CVE-2014-0510/", }, { category: "self", summary: "SUSE CVE CVE-2014-0515 page", url: "https://www.suse.com/security/cve/CVE-2014-0515/", }, { category: "self", summary: "SUSE CVE CVE-2014-0516 page", url: "https://www.suse.com/security/cve/CVE-2014-0516/", }, { category: "self", summary: "SUSE CVE CVE-2014-0517 page", url: "https://www.suse.com/security/cve/CVE-2014-0517/", }, { category: "self", summary: "SUSE CVE CVE-2014-0518 page", url: "https://www.suse.com/security/cve/CVE-2014-0518/", }, { category: "self", summary: "SUSE CVE CVE-2014-0519 page", url: "https://www.suse.com/security/cve/CVE-2014-0519/", }, { category: "self", summary: "SUSE CVE CVE-2014-0520 page", url: "https://www.suse.com/security/cve/CVE-2014-0520/", }, { category: "self", summary: "SUSE CVE CVE-2014-0531 page", url: "https://www.suse.com/security/cve/CVE-2014-0531/", }, { category: "self", summary: "SUSE CVE CVE-2014-0532 page", url: "https://www.suse.com/security/cve/CVE-2014-0532/", }, { category: "self", summary: "SUSE CVE CVE-2014-0533 page", url: "https://www.suse.com/security/cve/CVE-2014-0533/", }, { category: "self", summary: "SUSE CVE CVE-2014-0534 page", url: "https://www.suse.com/security/cve/CVE-2014-0534/", }, { category: "self", summary: "SUSE CVE CVE-2014-0535 page", url: "https://www.suse.com/security/cve/CVE-2014-0535/", }, { category: "self", summary: "SUSE CVE CVE-2014-0536 page", url: "https://www.suse.com/security/cve/CVE-2014-0536/", }, { category: "self", summary: "SUSE CVE CVE-2014-0537 page", url: "https://www.suse.com/security/cve/CVE-2014-0537/", }, { category: "self", summary: "SUSE CVE CVE-2014-0538 page", url: "https://www.suse.com/security/cve/CVE-2014-0538/", }, { category: "self", summary: "SUSE CVE CVE-2014-0539 page", url: "https://www.suse.com/security/cve/CVE-2014-0539/", }, { category: "self", summary: "SUSE CVE CVE-2014-0540 page", url: "https://www.suse.com/security/cve/CVE-2014-0540/", }, { category: "self", summary: "SUSE CVE CVE-2014-0541 page", url: "https://www.suse.com/security/cve/CVE-2014-0541/", }, { category: "self", summary: "SUSE CVE CVE-2014-0542 page", url: "https://www.suse.com/security/cve/CVE-2014-0542/", }, { category: "self", summary: "SUSE CVE CVE-2014-0543 page", url: "https://www.suse.com/security/cve/CVE-2014-0543/", }, { category: "self", summary: "SUSE CVE CVE-2014-0544 page", url: "https://www.suse.com/security/cve/CVE-2014-0544/", }, { category: "self", summary: "SUSE CVE CVE-2014-0545 page", url: "https://www.suse.com/security/cve/CVE-2014-0545/", }, { category: "self", summary: "SUSE CVE CVE-2014-0547 page", url: "https://www.suse.com/security/cve/CVE-2014-0547/", }, { category: "self", summary: "SUSE CVE CVE-2014-0548 page", url: "https://www.suse.com/security/cve/CVE-2014-0548/", }, { category: "self", summary: "SUSE CVE CVE-2014-0549 page", url: "https://www.suse.com/security/cve/CVE-2014-0549/", }, { category: "self", summary: "SUSE CVE CVE-2014-0550 page", url: "https://www.suse.com/security/cve/CVE-2014-0550/", }, { category: "self", summary: "SUSE CVE CVE-2014-0551 page", url: "https://www.suse.com/security/cve/CVE-2014-0551/", }, { category: "self", summary: "SUSE CVE CVE-2014-0552 page", url: "https://www.suse.com/security/cve/CVE-2014-0552/", }, { category: "self", summary: "SUSE CVE CVE-2014-0553 page", url: "https://www.suse.com/security/cve/CVE-2014-0553/", }, { category: "self", summary: "SUSE CVE CVE-2014-0554 page", url: "https://www.suse.com/security/cve/CVE-2014-0554/", }, { category: "self", summary: "SUSE CVE CVE-2014-0555 page", url: "https://www.suse.com/security/cve/CVE-2014-0555/", }, { category: "self", summary: "SUSE CVE CVE-2014-0556 page", url: "https://www.suse.com/security/cve/CVE-2014-0556/", }, { category: "self", summary: "SUSE CVE CVE-2014-0557 page", url: "https://www.suse.com/security/cve/CVE-2014-0557/", }, { category: "self", summary: "SUSE CVE CVE-2014-0558 page", url: "https://www.suse.com/security/cve/CVE-2014-0558/", }, { category: "self", summary: "SUSE CVE CVE-2014-0559 page", url: "https://www.suse.com/security/cve/CVE-2014-0559/", }, { category: "self", summary: "SUSE CVE CVE-2014-0564 page", url: "https://www.suse.com/security/cve/CVE-2014-0564/", }, { category: "self", summary: "SUSE CVE CVE-2014-0569 page", url: "https://www.suse.com/security/cve/CVE-2014-0569/", }, { category: "self", summary: "SUSE CVE CVE-2014-0573 page", url: "https://www.suse.com/security/cve/CVE-2014-0573/", }, { category: "self", summary: "SUSE CVE CVE-2014-0574 page", url: "https://www.suse.com/security/cve/CVE-2014-0574/", }, { category: "self", summary: "SUSE CVE CVE-2014-0576 page", url: "https://www.suse.com/security/cve/CVE-2014-0576/", }, { category: "self", summary: "SUSE CVE CVE-2014-0577 page", url: "https://www.suse.com/security/cve/CVE-2014-0577/", }, { category: "self", summary: "SUSE CVE CVE-2014-0580 page", url: "https://www.suse.com/security/cve/CVE-2014-0580/", }, { category: "self", summary: "SUSE CVE CVE-2014-0581 page", url: "https://www.suse.com/security/cve/CVE-2014-0581/", }, { category: "self", summary: "SUSE CVE CVE-2014-0582 page", url: "https://www.suse.com/security/cve/CVE-2014-0582/", }, { category: "self", summary: "SUSE CVE CVE-2014-0583 page", url: "https://www.suse.com/security/cve/CVE-2014-0583/", }, { category: "self", summary: "SUSE CVE CVE-2014-0584 page", url: "https://www.suse.com/security/cve/CVE-2014-0584/", }, { category: "self", summary: "SUSE CVE CVE-2014-0585 page", url: "https://www.suse.com/security/cve/CVE-2014-0585/", }, { category: "self", summary: "SUSE CVE CVE-2014-0586 page", url: "https://www.suse.com/security/cve/CVE-2014-0586/", }, { category: "self", summary: "SUSE CVE CVE-2014-0587 page", url: "https://www.suse.com/security/cve/CVE-2014-0587/", }, { category: "self", summary: "SUSE CVE CVE-2014-0588 page", url: "https://www.suse.com/security/cve/CVE-2014-0588/", }, { category: "self", summary: "SUSE CVE CVE-2014-0589 page", url: "https://www.suse.com/security/cve/CVE-2014-0589/", }, { category: "self", summary: "SUSE CVE CVE-2014-0590 page", url: "https://www.suse.com/security/cve/CVE-2014-0590/", }, { category: "self", summary: "SUSE CVE CVE-2014-4671 page", url: "https://www.suse.com/security/cve/CVE-2014-4671/", }, { category: "self", summary: "SUSE CVE CVE-2014-8437 page", url: "https://www.suse.com/security/cve/CVE-2014-8437/", }, { category: "self", summary: "SUSE CVE CVE-2014-8438 page", url: "https://www.suse.com/security/cve/CVE-2014-8438/", }, { category: "self", summary: "SUSE CVE CVE-2014-8439 page", url: "https://www.suse.com/security/cve/CVE-2014-8439/", }, { category: "self", summary: "SUSE CVE CVE-2014-8440 page", url: "https://www.suse.com/security/cve/CVE-2014-8440/", }, { category: "self", summary: "SUSE CVE CVE-2014-8441 page", url: "https://www.suse.com/security/cve/CVE-2014-8441/", }, { category: "self", summary: "SUSE CVE CVE-2014-8442 page", url: "https://www.suse.com/security/cve/CVE-2014-8442/", }, { category: "self", summary: "SUSE CVE CVE-2014-8443 page", url: "https://www.suse.com/security/cve/CVE-2014-8443/", }, { category: "self", summary: "SUSE CVE CVE-2014-9162 page", url: "https://www.suse.com/security/cve/CVE-2014-9162/", }, { category: "self", summary: "SUSE CVE CVE-2014-9163 page", url: "https://www.suse.com/security/cve/CVE-2014-9163/", }, { category: "self", summary: "SUSE CVE CVE-2014-9164 page", url: "https://www.suse.com/security/cve/CVE-2014-9164/", }, { category: "self", summary: "SUSE CVE CVE-2015-0301 page", url: "https://www.suse.com/security/cve/CVE-2015-0301/", }, { category: "self", summary: "SUSE CVE CVE-2015-0302 page", url: "https://www.suse.com/security/cve/CVE-2015-0302/", }, { category: "self", summary: "SUSE CVE CVE-2015-0303 page", url: "https://www.suse.com/security/cve/CVE-2015-0303/", }, { category: "self", summary: "SUSE CVE CVE-2015-0304 page", url: "https://www.suse.com/security/cve/CVE-2015-0304/", }, { category: "self", summary: "SUSE CVE CVE-2015-0305 page", url: "https://www.suse.com/security/cve/CVE-2015-0305/", }, { category: "self", summary: "SUSE CVE CVE-2015-0306 page", url: "https://www.suse.com/security/cve/CVE-2015-0306/", }, { category: "self", summary: "SUSE CVE CVE-2015-0307 page", url: "https://www.suse.com/security/cve/CVE-2015-0307/", }, { category: "self", summary: "SUSE CVE CVE-2015-0308 page", url: "https://www.suse.com/security/cve/CVE-2015-0308/", }, { category: "self", summary: "SUSE CVE CVE-2015-0309 page", url: "https://www.suse.com/security/cve/CVE-2015-0309/", }, { category: "self", summary: "SUSE CVE CVE-2015-0310 page", url: "https://www.suse.com/security/cve/CVE-2015-0310/", }, { category: "self", summary: "SUSE CVE CVE-2015-0311 page", url: "https://www.suse.com/security/cve/CVE-2015-0311/", }, { category: "self", summary: "SUSE CVE CVE-2015-0313 page", url: "https://www.suse.com/security/cve/CVE-2015-0313/", }, { category: "self", summary: "SUSE CVE CVE-2015-0314 page", url: "https://www.suse.com/security/cve/CVE-2015-0314/", }, { category: "self", summary: "SUSE CVE CVE-2015-0315 page", url: "https://www.suse.com/security/cve/CVE-2015-0315/", }, { category: "self", summary: "SUSE CVE CVE-2015-0316 page", url: "https://www.suse.com/security/cve/CVE-2015-0316/", }, { category: "self", summary: "SUSE CVE CVE-2015-0317 page", url: "https://www.suse.com/security/cve/CVE-2015-0317/", }, { category: "self", summary: "SUSE CVE CVE-2015-0318 page", url: "https://www.suse.com/security/cve/CVE-2015-0318/", }, { category: "self", summary: "SUSE CVE CVE-2015-0319 page", url: "https://www.suse.com/security/cve/CVE-2015-0319/", }, { category: "self", summary: "SUSE CVE CVE-2015-0320 page", url: "https://www.suse.com/security/cve/CVE-2015-0320/", }, { category: "self", summary: "SUSE CVE CVE-2015-0321 page", url: "https://www.suse.com/security/cve/CVE-2015-0321/", }, { category: "self", summary: "SUSE CVE CVE-2015-0322 page", url: "https://www.suse.com/security/cve/CVE-2015-0322/", }, { category: "self", summary: "SUSE CVE CVE-2015-0323 page", url: "https://www.suse.com/security/cve/CVE-2015-0323/", }, { category: "self", summary: "SUSE CVE CVE-2015-0324 page", url: "https://www.suse.com/security/cve/CVE-2015-0324/", }, { category: "self", summary: "SUSE CVE CVE-2015-0325 page", url: "https://www.suse.com/security/cve/CVE-2015-0325/", }, { category: "self", summary: "SUSE CVE CVE-2015-0326 page", url: "https://www.suse.com/security/cve/CVE-2015-0326/", }, { category: "self", summary: "SUSE CVE CVE-2015-0327 page", url: "https://www.suse.com/security/cve/CVE-2015-0327/", }, { category: "self", summary: "SUSE CVE CVE-2015-0328 page", url: "https://www.suse.com/security/cve/CVE-2015-0328/", }, { category: "self", summary: "SUSE CVE CVE-2015-0329 page", url: "https://www.suse.com/security/cve/CVE-2015-0329/", }, { category: "self", summary: "SUSE CVE CVE-2015-0330 page", url: "https://www.suse.com/security/cve/CVE-2015-0330/", }, { category: "self", summary: "SUSE CVE CVE-2015-0332 page", url: "https://www.suse.com/security/cve/CVE-2015-0332/", }, { category: "self", summary: "SUSE CVE CVE-2015-0333 page", url: "https://www.suse.com/security/cve/CVE-2015-0333/", }, { category: "self", summary: "SUSE CVE CVE-2015-0334 page", url: "https://www.suse.com/security/cve/CVE-2015-0334/", }, { category: "self", summary: "SUSE CVE CVE-2015-0335 page", url: "https://www.suse.com/security/cve/CVE-2015-0335/", }, { category: "self", summary: "SUSE CVE CVE-2015-0336 page", url: "https://www.suse.com/security/cve/CVE-2015-0336/", }, { category: "self", summary: "SUSE CVE CVE-2015-0337 page", url: "https://www.suse.com/security/cve/CVE-2015-0337/", }, { category: "self", summary: "SUSE CVE CVE-2015-0338 page", url: "https://www.suse.com/security/cve/CVE-2015-0338/", }, { category: "self", summary: "SUSE CVE CVE-2015-0339 page", url: "https://www.suse.com/security/cve/CVE-2015-0339/", }, { category: "self", summary: "SUSE CVE CVE-2015-0340 page", url: "https://www.suse.com/security/cve/CVE-2015-0340/", }, { category: "self", summary: "SUSE CVE CVE-2015-0341 page", url: "https://www.suse.com/security/cve/CVE-2015-0341/", }, { category: "self", summary: "SUSE CVE CVE-2015-0342 page", url: "https://www.suse.com/security/cve/CVE-2015-0342/", }, { category: "self", summary: "SUSE CVE CVE-2015-0346 page", url: "https://www.suse.com/security/cve/CVE-2015-0346/", }, { category: "self", summary: "SUSE CVE CVE-2015-0347 page", url: "https://www.suse.com/security/cve/CVE-2015-0347/", }, { category: "self", summary: "SUSE CVE CVE-2015-0348 page", url: "https://www.suse.com/security/cve/CVE-2015-0348/", }, { category: "self", summary: "SUSE CVE CVE-2015-0349 page", url: "https://www.suse.com/security/cve/CVE-2015-0349/", }, { category: "self", summary: "SUSE CVE CVE-2015-0350 page", url: "https://www.suse.com/security/cve/CVE-2015-0350/", }, { category: "self", summary: "SUSE CVE CVE-2015-0351 page", url: "https://www.suse.com/security/cve/CVE-2015-0351/", }, { category: "self", summary: "SUSE CVE CVE-2015-0352 page", url: "https://www.suse.com/security/cve/CVE-2015-0352/", }, { category: "self", summary: "SUSE CVE CVE-2015-0353 page", url: "https://www.suse.com/security/cve/CVE-2015-0353/", }, { category: "self", summary: "SUSE CVE CVE-2015-0354 page", url: "https://www.suse.com/security/cve/CVE-2015-0354/", }, { category: "self", summary: "SUSE CVE CVE-2015-0355 page", url: "https://www.suse.com/security/cve/CVE-2015-0355/", }, { category: "self", summary: "SUSE CVE CVE-2015-0356 page", url: "https://www.suse.com/security/cve/CVE-2015-0356/", }, { category: "self", summary: "SUSE CVE CVE-2015-0357 page", url: "https://www.suse.com/security/cve/CVE-2015-0357/", }, { category: "self", summary: "SUSE CVE CVE-2015-0358 page", url: "https://www.suse.com/security/cve/CVE-2015-0358/", }, { category: "self", summary: "SUSE CVE CVE-2015-0359 page", url: "https://www.suse.com/security/cve/CVE-2015-0359/", }, { category: "self", summary: "SUSE CVE CVE-2015-0360 page", url: "https://www.suse.com/security/cve/CVE-2015-0360/", }, { category: "self", summary: "SUSE CVE CVE-2015-3038 page", url: "https://www.suse.com/security/cve/CVE-2015-3038/", }, { category: "self", summary: "SUSE CVE CVE-2015-3039 page", url: "https://www.suse.com/security/cve/CVE-2015-3039/", }, { category: "self", summary: "SUSE CVE CVE-2015-3040 page", url: "https://www.suse.com/security/cve/CVE-2015-3040/", }, { category: "self", summary: "SUSE CVE CVE-2015-3041 page", url: "https://www.suse.com/security/cve/CVE-2015-3041/", }, { category: "self", summary: "SUSE CVE CVE-2015-3042 page", url: "https://www.suse.com/security/cve/CVE-2015-3042/", }, { category: "self", summary: "SUSE CVE CVE-2015-3043 page", url: "https://www.suse.com/security/cve/CVE-2015-3043/", }, { category: "self", summary: "SUSE CVE CVE-2015-3044 page", url: "https://www.suse.com/security/cve/CVE-2015-3044/", }, { category: "self", summary: "SUSE CVE CVE-2015-3077 page", url: "https://www.suse.com/security/cve/CVE-2015-3077/", }, { category: "self", summary: "SUSE CVE CVE-2015-3078 page", url: "https://www.suse.com/security/cve/CVE-2015-3078/", }, { category: "self", summary: "SUSE CVE CVE-2015-3079 page", url: "https://www.suse.com/security/cve/CVE-2015-3079/", }, { category: "self", summary: "SUSE CVE CVE-2015-3080 page", url: "https://www.suse.com/security/cve/CVE-2015-3080/", }, { category: "self", summary: "SUSE CVE CVE-2015-3081 page", url: "https://www.suse.com/security/cve/CVE-2015-3081/", }, { category: "self", summary: "SUSE CVE CVE-2015-3082 page", url: "https://www.suse.com/security/cve/CVE-2015-3082/", }, { category: "self", summary: "SUSE CVE CVE-2015-3083 page", url: "https://www.suse.com/security/cve/CVE-2015-3083/", }, { category: "self", summary: "SUSE CVE CVE-2015-3084 page", url: "https://www.suse.com/security/cve/CVE-2015-3084/", }, { category: "self", summary: "SUSE CVE CVE-2015-3085 page", url: "https://www.suse.com/security/cve/CVE-2015-3085/", }, { category: "self", summary: "SUSE CVE CVE-2015-3086 page", url: "https://www.suse.com/security/cve/CVE-2015-3086/", }, { category: "self", summary: "SUSE CVE CVE-2015-3087 page", url: "https://www.suse.com/security/cve/CVE-2015-3087/", }, { category: "self", summary: "SUSE CVE CVE-2015-3088 page", url: "https://www.suse.com/security/cve/CVE-2015-3088/", }, { category: "self", summary: "SUSE CVE CVE-2015-3089 page", url: "https://www.suse.com/security/cve/CVE-2015-3089/", }, { category: "self", summary: "SUSE CVE CVE-2015-3090 page", url: "https://www.suse.com/security/cve/CVE-2015-3090/", }, { category: "self", summary: "SUSE CVE CVE-2015-3091 page", url: "https://www.suse.com/security/cve/CVE-2015-3091/", }, { category: "self", summary: "SUSE CVE CVE-2015-3092 page", url: "https://www.suse.com/security/cve/CVE-2015-3092/", }, { category: "self", summary: "SUSE CVE CVE-2015-3093 page", url: "https://www.suse.com/security/cve/CVE-2015-3093/", }, { category: "self", summary: "SUSE CVE CVE-2015-3096 page", url: "https://www.suse.com/security/cve/CVE-2015-3096/", }, { category: "self", summary: "SUSE CVE CVE-2015-3098 page", url: "https://www.suse.com/security/cve/CVE-2015-3098/", }, { category: "self", summary: "SUSE CVE CVE-2015-3099 page", url: "https://www.suse.com/security/cve/CVE-2015-3099/", }, { category: "self", summary: "SUSE CVE CVE-2015-3100 page", url: "https://www.suse.com/security/cve/CVE-2015-3100/", }, { category: "self", summary: "SUSE CVE CVE-2015-3102 page", url: "https://www.suse.com/security/cve/CVE-2015-3102/", }, { category: "self", summary: "SUSE CVE CVE-2015-3103 page", url: "https://www.suse.com/security/cve/CVE-2015-3103/", }, { category: "self", summary: "SUSE CVE CVE-2015-3106 page", url: "https://www.suse.com/security/cve/CVE-2015-3106/", }, { category: "self", summary: "SUSE CVE CVE-2015-3107 page", url: "https://www.suse.com/security/cve/CVE-2015-3107/", }, { category: "self", summary: "SUSE CVE CVE-2015-3108 page", url: "https://www.suse.com/security/cve/CVE-2015-3108/", }, { category: "self", summary: "SUSE CVE CVE-2015-3113 page", url: "https://www.suse.com/security/cve/CVE-2015-3113/", }, ], title: "Security update for flash-player", tracking: { current_release_date: "2014-11-14T12:52:02Z", generator: { date: "2014-11-14T12:52:02Z", engine: { name: "cve-database.git:bin/generate-csaf.pl", version: "1", }, }, id: "SUSE-SU-2015:0880-1", initial_release_date: "2014-11-14T12:52:02Z", revision_history: [ { date: "2014-11-14T12:52:02Z", number: "1", summary: "Current version", }, ], status: "final", version: "1", }, }, product_tree: { branches: [ { branches: [ { branches: [ { category: "product_version", name: "flash-player-11.2.202.418-0.3.1.i586", product: { name: "flash-player-11.2.202.418-0.3.1.i586", product_id: "flash-player-11.2.202.418-0.3.1.i586", }, }, { category: "product_version", name: "flash-player-gnome-11.2.202.418-0.3.1.i586", product: { name: "flash-player-gnome-11.2.202.418-0.3.1.i586", product_id: "flash-player-gnome-11.2.202.418-0.3.1.i586", }, }, { category: "product_version", name: "flash-player-kde4-11.2.202.418-0.3.1.i586", product: { name: "flash-player-kde4-11.2.202.418-0.3.1.i586", product_id: "flash-player-kde4-11.2.202.418-0.3.1.i586", }, }, ], category: "architecture", name: "i586", }, { branches: [ { category: "product_version", name: "flash-player-11.2.202.418-0.3.1.x86_64", product: { name: "flash-player-11.2.202.418-0.3.1.x86_64", product_id: "flash-player-11.2.202.418-0.3.1.x86_64", }, }, { category: "product_version", name: "flash-player-gnome-11.2.202.418-0.3.1.x86_64", product: { name: "flash-player-gnome-11.2.202.418-0.3.1.x86_64", product_id: "flash-player-gnome-11.2.202.418-0.3.1.x86_64", }, }, { category: "product_version", name: "flash-player-kde4-11.2.202.418-0.3.1.x86_64", product: { name: "flash-player-kde4-11.2.202.418-0.3.1.x86_64", product_id: "flash-player-kde4-11.2.202.418-0.3.1.x86_64", }, }, ], category: "architecture", name: "x86_64", }, { branches: [ { category: "product_name", name: "SUSE Linux Enterprise Desktop 11 SP3", product: { name: "SUSE Linux Enterprise Desktop 11 SP3", product_id: "SUSE Linux Enterprise Desktop 11 SP3", product_identification_helper: { cpe: "cpe:/o:suse:suse_sled:11:sp3", }, }, }, ], category: "product_family", name: "SUSE Linux Enterprise", }, ], category: "vendor", name: "SUSE", }, ], relationships: [ { category: "default_component_of", full_product_name: { name: "flash-player-11.2.202.418-0.3.1.i586 as component of SUSE Linux Enterprise Desktop 11 SP3", product_id: "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", }, product_reference: "flash-player-11.2.202.418-0.3.1.i586", relates_to_product_reference: "SUSE Linux Enterprise Desktop 11 SP3", }, { category: "default_component_of", full_product_name: { name: "flash-player-11.2.202.418-0.3.1.x86_64 as component of SUSE Linux Enterprise Desktop 11 SP3", product_id: "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", }, product_reference: "flash-player-11.2.202.418-0.3.1.x86_64", relates_to_product_reference: "SUSE Linux Enterprise Desktop 11 SP3", }, { category: "default_component_of", full_product_name: { name: "flash-player-gnome-11.2.202.418-0.3.1.i586 as component of SUSE Linux Enterprise Desktop 11 SP3", product_id: "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", }, product_reference: "flash-player-gnome-11.2.202.418-0.3.1.i586", relates_to_product_reference: "SUSE Linux Enterprise Desktop 11 SP3", }, { category: "default_component_of", full_product_name: { name: "flash-player-gnome-11.2.202.418-0.3.1.x86_64 as component of SUSE Linux Enterprise Desktop 11 SP3", product_id: "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", }, product_reference: "flash-player-gnome-11.2.202.418-0.3.1.x86_64", relates_to_product_reference: "SUSE Linux Enterprise Desktop 11 SP3", }, { category: "default_component_of", full_product_name: { name: "flash-player-kde4-11.2.202.418-0.3.1.i586 as component of SUSE Linux Enterprise Desktop 11 SP3", product_id: "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", }, product_reference: "flash-player-kde4-11.2.202.418-0.3.1.i586", relates_to_product_reference: "SUSE Linux Enterprise Desktop 11 SP3", }, { category: "default_component_of", full_product_name: { name: "flash-player-kde4-11.2.202.418-0.3.1.x86_64 as component of SUSE Linux Enterprise Desktop 11 SP3", product_id: "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", }, product_reference: "flash-player-kde4-11.2.202.418-0.3.1.x86_64", relates_to_product_reference: "SUSE Linux Enterprise Desktop 11 SP3", }, ], }, vulnerabilities: [ { cve: "CVE-2013-3343", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2013-3343", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 10.3.183.90 and 11.x before 11.7.700.224 on Windows, before 10.3.183.90 and 11.x before 11.7.700.225 on Mac OS X, before 10.3.183.90 and 11.x before 11.2.202.291 on Linux, before 11.1.111.59 on Android 2.x and 3.x, and before 11.1.115.63 on Android 4.x; Adobe AIR before 3.7.0.2090 on Windows and Android and before 3.7.0.2100 on Mac OS X; and Adobe AIR SDK & Compiler before 3.7.0.2090 on Windows and before 3.7.0.2100 on Mac OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2013-3343", url: "https://www.suse.com/security/cve/CVE-2013-3343", }, { category: "external", summary: "SUSE Bug 824512 for CVE-2013-3343", url: "https://bugzilla.suse.com/824512", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2013-3343", }, { cve: "CVE-2013-3344", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2013-3344", }, ], notes: [ { category: "general", text: "Heap-based buffer overflow in Adobe Flash Player before 11.7.700.232 and 11.8.x before 11.8.800.94 on Windows and Mac OS X, before 11.2.202.297 on Linux, before 11.1.111.64 on Android 2.x and 3.x, and before 11.1.115.69 on Android 4.x allows attackers to execute arbitrary code via unspecified vectors.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2013-3344", url: "https://www.suse.com/security/cve/CVE-2013-3344", }, { category: "external", summary: "SUSE Bug 828810 for CVE-2013-3344", url: "https://bugzilla.suse.com/828810", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2013-3344", }, { cve: "CVE-2013-3345", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2013-3345", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 11.7.700.232 and 11.8.x before 11.8.800.94 on Windows and Mac OS X, before 11.2.202.297 on Linux, before 11.1.111.64 on Android 2.x and 3.x, and before 11.1.115.69 on Android 4.x allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2013-3345", url: "https://www.suse.com/security/cve/CVE-2013-3345", }, { category: "external", summary: "SUSE Bug 828810 for CVE-2013-3345", url: "https://bugzilla.suse.com/828810", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "low", }, ], title: "CVE-2013-3345", }, { cve: "CVE-2013-3347", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2013-3347", }, ], notes: [ { category: "general", text: "Integer overflow in Adobe Flash Player before 11.7.700.232 and 11.8.x before 11.8.800.94 on Windows and Mac OS X, before 11.2.202.297 on Linux, before 11.1.111.64 on Android 2.x and 3.x, and before 11.1.115.69 on Android 4.x allows attackers to execute arbitrary code via PCM data that is not properly handled during resampling.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2013-3347", url: "https://www.suse.com/security/cve/CVE-2013-3347", }, { category: "external", summary: "SUSE Bug 828810 for CVE-2013-3347", url: "https://bugzilla.suse.com/828810", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2013-3347", }, { cve: "CVE-2013-3361", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2013-3361", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 11.7.700.242 and 11.8.x before 11.8.800.168 on Windows and Mac OS X, before 11.2.202.310 on Linux, before 11.1.111.73 on Android 2.x and 3.x, and before 11.1.115.81 on Android 4.x; Adobe AIR before 3.8.0.1430; and Adobe AIR SDK & Compiler before 3.8.0.1430 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2013-3362, CVE-2013-3363, and CVE-2013-5324.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2013-3361", url: "https://www.suse.com/security/cve/CVE-2013-3361", }, { category: "external", summary: "SUSE Bug 839897 for CVE-2013-3361", url: "https://bugzilla.suse.com/839897", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2013-3361", }, { cve: "CVE-2013-3362", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2013-3362", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 11.7.700.242 and 11.8.x before 11.8.800.168 on Windows and Mac OS X, before 11.2.202.310 on Linux, before 11.1.111.73 on Android 2.x and 3.x, and before 11.1.115.81 on Android 4.x; Adobe AIR before 3.8.0.1430; and Adobe AIR SDK & Compiler before 3.8.0.1430 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2013-3361, CVE-2013-3363, and CVE-2013-5324.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2013-3362", url: "https://www.suse.com/security/cve/CVE-2013-3362", }, { category: "external", summary: "SUSE Bug 839897 for CVE-2013-3362", url: "https://bugzilla.suse.com/839897", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2013-3362", }, { cve: "CVE-2013-3363", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2013-3363", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 11.7.700.242 and 11.8.x before 11.8.800.168 on Windows and Mac OS X, before 11.2.202.310 on Linux, before 11.1.111.73 on Android 2.x and 3.x, and before 11.1.115.81 on Android 4.x; Adobe AIR before 3.8.0.1430; and Adobe AIR SDK & Compiler before 3.8.0.1430 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2013-3361, CVE-2013-3362, and CVE-2013-5324.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2013-3363", url: "https://www.suse.com/security/cve/CVE-2013-3363", }, { category: "external", summary: "SUSE Bug 839897 for CVE-2013-3363", url: "https://bugzilla.suse.com/839897", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2013-3363", }, { cve: "CVE-2013-5324", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2013-5324", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 11.7.700.242 and 11.8.x before 11.8.800.168 on Windows and Mac OS X, before 11.2.202.310 on Linux, before 11.1.111.73 on Android 2.x and 3.x, and before 11.1.115.81 on Android 4.x; Adobe AIR before 3.8.0.1430; and Adobe AIR SDK & Compiler before 3.8.0.1430 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2013-3361, CVE-2013-3362, and CVE-2013-3363.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2013-5324", url: "https://www.suse.com/security/cve/CVE-2013-5324", }, { category: "external", summary: "SUSE Bug 839897 for CVE-2013-5324", url: "https://bugzilla.suse.com/839897", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2013-5324", }, { cve: "CVE-2013-5329", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2013-5329", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 11.7.700.252 and 11.8.x and 11.9.x before 11.9.900.152 on Windows and Mac OS X and before 11.2.202.327 on Linux, Adobe AIR before 3.9.0.1210, Adobe AIR SDK before 3.9.0.1210, and Adobe AIR SDK & Compiler before 3.9.0.1210 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2013-5330.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2013-5329", url: "https://www.suse.com/security/cve/CVE-2013-5329", }, { category: "external", summary: "SUSE Bug 850220 for CVE-2013-5329", url: "https://bugzilla.suse.com/850220", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "important", }, ], title: "CVE-2013-5329", }, { cve: "CVE-2013-5330", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2013-5330", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 11.7.700.252 and 11.8.x and 11.9.x before 11.9.900.152 on Windows and Mac OS X and before 11.2.202.327 on Linux, Adobe AIR before 3.9.0.1210, Adobe AIR SDK before 3.9.0.1210, and Adobe AIR SDK & Compiler before 3.9.0.1210 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2013-5329.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2013-5330", url: "https://www.suse.com/security/cve/CVE-2013-5330", }, { category: "external", summary: "SUSE Bug 850220 for CVE-2013-5330", url: "https://bugzilla.suse.com/850220", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "important", }, ], title: "CVE-2013-5330", }, { cve: "CVE-2013-5331", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2013-5331", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 11.7.700.257 and 11.8.x and 11.9.x before 11.9.900.170 on Windows and Mac OS X and before 11.2.202.332 on Linux, Adobe AIR before 3.9.0.1380, Adobe AIR SDK before 3.9.0.1380, and Adobe AIR SDK & Compiler before 3.9.0.1380 allow remote attackers to execute arbitrary code via crafted .swf content that leverages an unspecified \"type confusion,\" as exploited in the wild in December 2013.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2013-5331", url: "https://www.suse.com/security/cve/CVE-2013-5331", }, { category: "external", summary: "SUSE Bug 854881 for CVE-2013-5331", url: "https://bugzilla.suse.com/854881", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2013-5331", }, { cve: "CVE-2013-5332", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2013-5332", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 11.7.700.257 and 11.8.x and 11.9.x before 11.9.900.170 on Windows and Mac OS X and before 11.2.202.332 on Linux, Adobe AIR before 3.9.0.1380, Adobe AIR SDK before 3.9.0.1380, and Adobe AIR SDK & Compiler before 3.9.0.1380 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2013-5332", url: "https://www.suse.com/security/cve/CVE-2013-5332", }, { category: "external", summary: "SUSE Bug 854881 for CVE-2013-5332", url: "https://bugzilla.suse.com/854881", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2013-5332", }, { cve: "CVE-2014-0491", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0491", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 11.7.700.260 and 11.8.x and 11.9.x before 12.0.0.38 on Windows and Mac OS X and before 11.2.202.335 on Linux, Adobe AIR before 4.0.0.1390, Adobe AIR SDK before 4.0.0.1390, and Adobe AIR SDK & Compiler before 4.0.0.1390 allow attackers to bypass unspecified protection mechanisms via unknown vectors.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0491", url: "https://www.suse.com/security/cve/CVE-2014-0491", }, { category: "external", summary: "SUSE Bug 858822 for CVE-2014-0491", url: "https://bugzilla.suse.com/858822", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2014-0491", }, { cve: "CVE-2014-0492", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0492", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 11.7.700.260 and 11.8.x and 11.9.x before 12.0.0.38 on Windows and Mac OS X and before 11.2.202.335 on Linux, Adobe AIR before 4.0.0.1390, Adobe AIR SDK before 4.0.0.1390, and Adobe AIR SDK & Compiler before 4.0.0.1390 allow attackers to defeat the ASLR protection mechanism by leveraging an \"address leak.\"", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0492", url: "https://www.suse.com/security/cve/CVE-2014-0492", }, { category: "external", summary: "SUSE Bug 858822 for CVE-2014-0492", url: "https://bugzilla.suse.com/858822", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2014-0492", }, { cve: "CVE-2014-0497", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0497", }, ], notes: [ { category: "general", text: "Integer underflow in Adobe Flash Player before 11.7.700.261 and 11.8.x through 12.0.x before 12.0.0.44 on Windows and Mac OS X, and before 11.2.202.336 on Linux, allows remote attackers to execute arbitrary code via unspecified vectors.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0497", url: "https://www.suse.com/security/cve/CVE-2014-0497", }, { category: "external", summary: "SUSE Bug 862288 for CVE-2014-0497", url: "https://bugzilla.suse.com/862288", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 9.8, baseSeverity: "CRITICAL", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2014-0497", }, { cve: "CVE-2014-0498", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0498", }, ], notes: [ { category: "general", text: "Stack-based buffer overflow in Adobe Flash Player before 11.7.700.269 and 11.8.x through 12.0.x before 12.0.0.70 on Windows and Mac OS X and before 11.2.202.341 on Linux, Adobe AIR before 4.0.0.1628 on Android, Adobe AIR SDK before 4.0.0.1628, and Adobe AIR SDK & Compiler before 4.0.0.1628 allows attackers to execute arbitrary code via unspecified vectors.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0498", url: "https://www.suse.com/security/cve/CVE-2014-0498", }, { category: "external", summary: "SUSE Bug 865021 for CVE-2014-0498", url: "https://bugzilla.suse.com/865021", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2014-0498", }, { cve: "CVE-2014-0499", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0499", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 11.7.700.269 and 11.8.x through 12.0.x before 12.0.0.70 on Windows and Mac OS X and before 11.2.202.341 on Linux, Adobe AIR before 4.0.0.1628 on Android, Adobe AIR SDK before 4.0.0.1628, and Adobe AIR SDK & Compiler before 4.0.0.1628 do not prevent access to address information, which makes it easier for attackers to bypass the ASLR protection mechanism via unspecified vectors.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0499", url: "https://www.suse.com/security/cve/CVE-2014-0499", }, { category: "external", summary: "SUSE Bug 865021 for CVE-2014-0499", url: "https://bugzilla.suse.com/865021", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2014-0499", }, { cve: "CVE-2014-0502", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0502", }, ], notes: [ { category: "general", text: "Double free vulnerability in Adobe Flash Player before 11.7.700.269 and 11.8.x through 12.0.x before 12.0.0.70 on Windows and Mac OS X and before 11.2.202.341 on Linux, Adobe AIR before 4.0.0.1628 on Android, Adobe AIR SDK before 4.0.0.1628, and Adobe AIR SDK & Compiler before 4.0.0.1628 allows remote attackers to execute arbitrary code via unspecified vectors, as exploited in the wild in February 2014.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0502", url: "https://www.suse.com/security/cve/CVE-2014-0502", }, { category: "external", summary: "SUSE Bug 865021 for CVE-2014-0502", url: "https://bugzilla.suse.com/865021", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 8.8, baseSeverity: "HIGH", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2014-0502", }, { cve: "CVE-2014-0503", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0503", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 11.7.700.272 and 11.8.x through 12.0.x before 12.0.0.77 on Windows and OS X, and before 11.2.202.346 on Linux, allows remote attackers to bypass the Same Origin Policy via unspecified vectors.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0503", url: "https://www.suse.com/security/cve/CVE-2014-0503", }, { category: "external", summary: "SUSE Bug 867808 for CVE-2014-0503", url: "https://bugzilla.suse.com/867808", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2014-0503", }, { cve: "CVE-2014-0504", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0504", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 11.7.700.272 and 11.8.x through 12.0.x before 12.0.0.77 on Windows and OS X, and before 11.2.202.346 on Linux, allows attackers to read the clipboard via unspecified vectors.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0504", url: "https://www.suse.com/security/cve/CVE-2014-0504", }, { category: "external", summary: "SUSE Bug 867808 for CVE-2014-0504", url: "https://bugzilla.suse.com/867808", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2014-0504", }, { cve: "CVE-2014-0506", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0506", }, ], notes: [ { category: "general", text: "Use-after-free vulnerability in Adobe Flash Player before 11.7.700.275 and 11.8.x through 13.0.x before 13.0.0.182 on Windows and OS X and before 11.2.202.350 on Linux, Adobe AIR before 13.0.0.83 on Android, Adobe AIR SDK before 13.0.0.83, and Adobe AIR SDK & Compiler before 13.0.0.83 allows remote attackers to execute arbitrary code, and possibly bypass an Internet Explorer sandbox protection mechanism, via unspecified vectors, as demonstrated by VUPEN during a Pwn2Own competition at CanSecWest 2014.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0506", url: "https://www.suse.com/security/cve/CVE-2014-0506", }, { category: "external", summary: "SUSE Bug 872692 for CVE-2014-0506", url: "https://bugzilla.suse.com/872692", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2014-0506", }, { cve: "CVE-2014-0507", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0507", }, ], notes: [ { category: "general", text: "Buffer overflow in Adobe Flash Player before 11.7.700.275 and 11.8.x through 13.0.x before 13.0.0.182 on Windows and OS X and before 11.2.202.350 on Linux, Adobe AIR before 13.0.0.83 on Android, Adobe AIR SDK before 13.0.0.83, and Adobe AIR SDK & Compiler before 13.0.0.83 allows attackers to execute arbitrary code via unspecified vectors.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0507", url: "https://www.suse.com/security/cve/CVE-2014-0507", }, { category: "external", summary: "SUSE Bug 872692 for CVE-2014-0507", url: "https://bugzilla.suse.com/872692", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2014-0507", }, { cve: "CVE-2014-0508", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0508", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 11.7.700.275 and 11.8.x through 13.0.x before 13.0.0.182 on Windows and OS X and before 11.2.202.350 on Linux, Adobe AIR before 13.0.0.83 on Android, Adobe AIR SDK before 13.0.0.83, and Adobe AIR SDK & Compiler before 13.0.0.83 allow attackers to bypass intended access restrictions and obtain sensitive information via unspecified vectors.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0508", url: "https://www.suse.com/security/cve/CVE-2014-0508", }, { category: "external", summary: "SUSE Bug 872692 for CVE-2014-0508", url: "https://bugzilla.suse.com/872692", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "moderate", }, ], title: "CVE-2014-0508", }, { cve: "CVE-2014-0509", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0509", }, ], notes: [ { category: "general", text: "Cross-site scripting (XSS) vulnerability in Adobe Flash Player before 11.7.700.275 and 11.8.x through 13.0.x before 13.0.0.182 on Windows and OS X and before 11.2.202.350 on Linux, Adobe AIR before 13.0.0.83 on Android, Adobe AIR SDK before 13.0.0.83, and Adobe AIR SDK & Compiler before 13.0.0.83 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0509", url: "https://www.suse.com/security/cve/CVE-2014-0509", }, { category: "external", summary: "SUSE Bug 872692 for CVE-2014-0509", url: "https://bugzilla.suse.com/872692", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "moderate", }, ], title: "CVE-2014-0509", }, { cve: "CVE-2014-0510", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0510", }, ], notes: [ { category: "general", text: "Heap-based buffer overflow in Adobe Flash Player 12.0.0.77 allows remote attackers to execute arbitrary code and bypass a sandbox protection mechanism via unspecified vectors, as demonstrated by Zeguang Zhao and Liang Chen during a Pwn2Own competition at CanSecWest 2014.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0510", url: "https://www.suse.com/security/cve/CVE-2014-0510", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2014-0510", }, { cve: "CVE-2014-0515", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0515", }, ], notes: [ { category: "general", text: "Buffer overflow in Adobe Flash Player before 11.7.700.279 and 11.8.x through 13.0.x before 13.0.0.206 on Windows and OS X, and before 11.2.202.356 on Linux, allows remote attackers to execute arbitrary code via unspecified vectors, as exploited in the wild in April 2014.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0515", url: "https://www.suse.com/security/cve/CVE-2014-0515", }, { category: "external", summary: "SUSE Bug 875577 for CVE-2014-0515", url: "https://bugzilla.suse.com/875577", }, { category: "external", summary: "SUSE Bug 886454 for CVE-2014-0515", url: "https://bugzilla.suse.com/886454", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2014-0515", }, { cve: "CVE-2014-0516", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0516", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.214 on Windows and OS X and before 11.2.202.359 on Linux, Adobe AIR SDK before 13.0.0.111, and Adobe AIR SDK & Compiler before 13.0.0.111 allow remote attackers to bypass the Same Origin Policy via unspecified vectors.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0516", url: "https://www.suse.com/security/cve/CVE-2014-0516", }, { category: "external", summary: "SUSE Bug 877649 for CVE-2014-0516", url: "https://bugzilla.suse.com/877649", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "important", }, ], title: "CVE-2014-0516", }, { cve: "CVE-2014-0517", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0517", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.214 on Windows and OS X and before 11.2.202.359 on Linux, Adobe AIR SDK before 13.0.0.111, and Adobe AIR SDK & Compiler before 13.0.0.111 allow attackers to bypass intended access restrictions via unspecified vectors, a different vulnerability than CVE-2014-0518, CVE-2014-0519, and CVE-2014-0520.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0517", url: "https://www.suse.com/security/cve/CVE-2014-0517", }, { category: "external", summary: "SUSE Bug 877649 for CVE-2014-0517", url: "https://bugzilla.suse.com/877649", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "important", }, ], title: "CVE-2014-0517", }, { cve: "CVE-2014-0518", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0518", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.214 on Windows and OS X and before 11.2.202.359 on Linux, Adobe AIR SDK before 13.0.0.111, and Adobe AIR SDK & Compiler before 13.0.0.111 allow attackers to bypass intended access restrictions via unspecified vectors, a different vulnerability than CVE-2014-0517, CVE-2014-0519, and CVE-2014-0520.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0518", url: "https://www.suse.com/security/cve/CVE-2014-0518", }, { category: "external", summary: "SUSE Bug 877649 for CVE-2014-0518", url: "https://bugzilla.suse.com/877649", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "important", }, ], title: "CVE-2014-0518", }, { cve: "CVE-2014-0519", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0519", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.214 on Windows and OS X and before 11.2.202.359 on Linux, Adobe AIR SDK before 13.0.0.111, and Adobe AIR SDK & Compiler before 13.0.0.111 allow attackers to bypass intended access restrictions via unspecified vectors, a different vulnerability than CVE-2014-0517, CVE-2014-0518, and CVE-2014-0520.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0519", url: "https://www.suse.com/security/cve/CVE-2014-0519", }, { category: "external", summary: "SUSE Bug 877649 for CVE-2014-0519", url: "https://bugzilla.suse.com/877649", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "important", }, ], title: "CVE-2014-0519", }, { cve: "CVE-2014-0520", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0520", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.214 on Windows and OS X and before 11.2.202.359 on Linux, Adobe AIR SDK before 13.0.0.111, and Adobe AIR SDK & Compiler before 13.0.0.111 allow attackers to bypass intended access restrictions via unspecified vectors, a different vulnerability than CVE-2014-0517, CVE-2014-0518, and CVE-2014-0519.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0520", url: "https://www.suse.com/security/cve/CVE-2014-0520", }, { category: "external", summary: "SUSE Bug 877649 for CVE-2014-0520", url: "https://bugzilla.suse.com/877649", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "important", }, ], title: "CVE-2014-0520", }, { cve: "CVE-2014-0531", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0531", }, ], notes: [ { category: "general", text: "Cross-site scripting (XSS) vulnerability in Adobe Flash Player before 13.0.0.223 and 14.x before 14.0.0.125 on Windows and OS X and before 11.2.202.378 on Linux, Adobe AIR before 14.0.0.110, Adobe AIR SDK before 14.0.0.110, and Adobe AIR SDK & Compiler before 14.0.0.110 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2014-0532 and CVE-2014-0533.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0531", url: "https://www.suse.com/security/cve/CVE-2014-0531", }, { category: "external", summary: "SUSE Bug 882187 for CVE-2014-0531", url: "https://bugzilla.suse.com/882187", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2014-0531", }, { cve: "CVE-2014-0532", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0532", }, ], notes: [ { category: "general", text: "Cross-site scripting (XSS) vulnerability in Adobe Flash Player before 13.0.0.223 and 14.x before 14.0.0.125 on Windows and OS X and before 11.2.202.378 on Linux, Adobe AIR before 14.0.0.110, Adobe AIR SDK before 14.0.0.110, and Adobe AIR SDK & Compiler before 14.0.0.110 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2014-0531 and CVE-2014-0533.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0532", url: "https://www.suse.com/security/cve/CVE-2014-0532", }, { category: "external", summary: "SUSE Bug 882187 for CVE-2014-0532", url: "https://bugzilla.suse.com/882187", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2014-0532", }, { cve: "CVE-2014-0533", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0533", }, ], notes: [ { category: "general", text: "Cross-site scripting (XSS) vulnerability in Adobe Flash Player before 13.0.0.223 and 14.x before 14.0.0.125 on Windows and OS X and before 11.2.202.378 on Linux, Adobe AIR before 14.0.0.110, Adobe AIR SDK before 14.0.0.110, and Adobe AIR SDK & Compiler before 14.0.0.110 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2014-0531 and CVE-2014-0532.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0533", url: "https://www.suse.com/security/cve/CVE-2014-0533", }, { category: "external", summary: "SUSE Bug 882187 for CVE-2014-0533", url: "https://bugzilla.suse.com/882187", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2014-0533", }, { cve: "CVE-2014-0534", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0534", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.223 and 14.x before 14.0.0.125 on Windows and OS X and before 11.2.202.378 on Linux, Adobe AIR before 14.0.0.110, Adobe AIR SDK before 14.0.0.110, and Adobe AIR SDK & Compiler before 14.0.0.110 allow attackers to bypass intended access restrictions via unspecified vectors, a different vulnerability than CVE-2014-0535.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0534", url: "https://www.suse.com/security/cve/CVE-2014-0534", }, { category: "external", summary: "SUSE Bug 882187 for CVE-2014-0534", url: "https://bugzilla.suse.com/882187", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2014-0534", }, { cve: "CVE-2014-0535", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0535", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.223 and 14.x before 14.0.0.125 on Windows and OS X and before 11.2.202.378 on Linux, Adobe AIR before 14.0.0.110, Adobe AIR SDK before 14.0.0.110, and Adobe AIR SDK & Compiler before 14.0.0.110 allow attackers to bypass intended access restrictions via unspecified vectors, a different vulnerability than CVE-2014-0534.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0535", url: "https://www.suse.com/security/cve/CVE-2014-0535", }, { category: "external", summary: "SUSE Bug 882187 for CVE-2014-0535", url: "https://bugzilla.suse.com/882187", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2014-0535", }, { cve: "CVE-2014-0536", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0536", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.223 and 14.x before 14.0.0.125 on Windows and OS X and before 11.2.202.378 on Linux, Adobe AIR before 14.0.0.110, Adobe AIR SDK before 14.0.0.110, and Adobe AIR SDK & Compiler before 14.0.0.110 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0536", url: "https://www.suse.com/security/cve/CVE-2014-0536", }, { category: "external", summary: "SUSE Bug 882187 for CVE-2014-0536", url: "https://bugzilla.suse.com/882187", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2014-0536", }, { cve: "CVE-2014-0537", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0537", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.231 and 14.x before 14.0.0.145 on Windows and OS X and before 11.2.202.394 on Linux, Adobe AIR before 14.0.0.137 on Android, Adobe AIR SDK before 14.0.0.137, and Adobe AIR SDK & Compiler before 14.0.0.137 allow attackers to bypass intended access restrictions via unspecified vectors, a different vulnerability than CVE-2014-0539.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0537", url: "https://www.suse.com/security/cve/CVE-2014-0537", }, { category: "external", summary: "SUSE Bug 886454 for CVE-2014-0537", url: "https://bugzilla.suse.com/886454", }, { category: "external", summary: "SUSE Bug 886472 for CVE-2014-0537", url: "https://bugzilla.suse.com/886472", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2014-0537", }, { cve: "CVE-2014-0538", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0538", }, ], notes: [ { category: "general", text: "Use-after-free vulnerability in Adobe Flash Player before 13.0.0.241 and 14.x before 14.0.0.176 on Windows and OS X and before 11.2.202.400 on Linux, Adobe AIR before 14.0.0.178 on Windows and OS X and before 14.0.0.179 on Android, Adobe AIR SDK before 14.0.0.178, and Adobe AIR SDK & Compiler before 14.0.0.178 allows attackers to execute arbitrary code via unspecified vectors.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0538", url: "https://www.suse.com/security/cve/CVE-2014-0538", }, { category: "external", summary: "SUSE Bug 891688 for CVE-2014-0538", url: "https://bugzilla.suse.com/891688", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2014-0538", }, { cve: "CVE-2014-0539", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0539", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.231 and 14.x before 14.0.0.145 on Windows and OS X and before 11.2.202.394 on Linux, Adobe AIR before 14.0.0.137 on Android, Adobe AIR SDK before 14.0.0.137, and Adobe AIR SDK & Compiler before 14.0.0.137 allow attackers to bypass intended access restrictions via unspecified vectors, a different vulnerability than CVE-2014-0537.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0539", url: "https://www.suse.com/security/cve/CVE-2014-0539", }, { category: "external", summary: "SUSE Bug 886454 for CVE-2014-0539", url: "https://bugzilla.suse.com/886454", }, { category: "external", summary: "SUSE Bug 886472 for CVE-2014-0539", url: "https://bugzilla.suse.com/886472", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2014-0539", }, { cve: "CVE-2014-0540", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0540", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.241 and 14.x before 14.0.0.176 on Windows and OS X and before 11.2.202.400 on Linux, Adobe AIR before 14.0.0.178 on Windows and OS X and before 14.0.0.179 on Android, Adobe AIR SDK before 14.0.0.178, and Adobe AIR SDK & Compiler before 14.0.0.178 do not properly restrict discovery of memory addresses, which allows attackers to bypass the ASLR protection mechanism via unspecified vectors, a different vulnerability than CVE-2014-0542, CVE-2014-0543, CVE-2014-0544, and CVE-2014-0545.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0540", url: "https://www.suse.com/security/cve/CVE-2014-0540", }, { category: "external", summary: "SUSE Bug 891688 for CVE-2014-0540", url: "https://bugzilla.suse.com/891688", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2014-0540", }, { cve: "CVE-2014-0541", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0541", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.241 and 14.x before 14.0.0.176 on Windows and OS X and before 11.2.202.400 on Linux, Adobe AIR before 14.0.0.178 on Windows and OS X and before 14.0.0.179 on Android, Adobe AIR SDK before 14.0.0.178, and Adobe AIR SDK & Compiler before 14.0.0.178 allow attackers to bypass intended access restrictions via unspecified vectors.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0541", url: "https://www.suse.com/security/cve/CVE-2014-0541", }, { category: "external", summary: "SUSE Bug 891688 for CVE-2014-0541", url: "https://bugzilla.suse.com/891688", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2014-0541", }, { cve: "CVE-2014-0542", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0542", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.241 and 14.x before 14.0.0.176 on Windows and OS X and before 11.2.202.400 on Linux, Adobe AIR before 14.0.0.178 on Windows and OS X and before 14.0.0.179 on Android, Adobe AIR SDK before 14.0.0.178, and Adobe AIR SDK & Compiler before 14.0.0.178 do not properly restrict discovery of memory addresses, which allows attackers to bypass the ASLR protection mechanism via unspecified vectors, a different vulnerability than CVE-2014-0540, CVE-2014-0543, CVE-2014-0544, and CVE-2014-0545.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0542", url: "https://www.suse.com/security/cve/CVE-2014-0542", }, { category: "external", summary: "SUSE Bug 891688 for CVE-2014-0542", url: "https://bugzilla.suse.com/891688", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2014-0542", }, { cve: "CVE-2014-0543", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0543", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.241 and 14.x before 14.0.0.176 on Windows and OS X and before 11.2.202.400 on Linux, Adobe AIR before 14.0.0.178 on Windows and OS X and before 14.0.0.179 on Android, Adobe AIR SDK before 14.0.0.178, and Adobe AIR SDK & Compiler before 14.0.0.178 do not properly restrict discovery of memory addresses, which allows attackers to bypass the ASLR protection mechanism via unspecified vectors, a different vulnerability than CVE-2014-0540, CVE-2014-0542, CVE-2014-0544, and CVE-2014-0545.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0543", url: "https://www.suse.com/security/cve/CVE-2014-0543", }, { category: "external", summary: "SUSE Bug 891688 for CVE-2014-0543", url: "https://bugzilla.suse.com/891688", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2014-0543", }, { cve: "CVE-2014-0544", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0544", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.241 and 14.x before 14.0.0.176 on Windows and OS X and before 11.2.202.400 on Linux, Adobe AIR before 14.0.0.178 on Windows and OS X and before 14.0.0.179 on Android, Adobe AIR SDK before 14.0.0.178, and Adobe AIR SDK & Compiler before 14.0.0.178 do not properly restrict discovery of memory addresses, which allows attackers to bypass the ASLR protection mechanism via unspecified vectors, a different vulnerability than CVE-2014-0540, CVE-2014-0542, CVE-2014-0543, and CVE-2014-0545.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0544", url: "https://www.suse.com/security/cve/CVE-2014-0544", }, { category: "external", summary: "SUSE Bug 891688 for CVE-2014-0544", url: "https://bugzilla.suse.com/891688", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2014-0544", }, { cve: "CVE-2014-0545", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0545", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.241 and 14.x before 14.0.0.176 on Windows and OS X and before 11.2.202.400 on Linux, Adobe AIR before 14.0.0.178 on Windows and OS X and before 14.0.0.179 on Android, Adobe AIR SDK before 14.0.0.178, and Adobe AIR SDK & Compiler before 14.0.0.178 do not properly restrict discovery of memory addresses, which allows attackers to bypass the ASLR protection mechanism via unspecified vectors, a different vulnerability than CVE-2014-0540, CVE-2014-0542, CVE-2014-0543, and CVE-2014-0544.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0545", url: "https://www.suse.com/security/cve/CVE-2014-0545", }, { category: "external", summary: "SUSE Bug 891688 for CVE-2014-0545", url: "https://bugzilla.suse.com/891688", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2014-0545", }, { cve: "CVE-2014-0547", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0547", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.244 and 14.x and 15.x before 15.0.0.152 on Windows and OS X and before 11.2.202.406 on Linux, Adobe AIR before 15.0.0.249 on Windows and OS X and before 15.0.0.252 on Android, Adobe AIR SDK before 15.0.0.249, and Adobe AIR SDK & Compiler before 15.0.0.249 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2014-0549, CVE-2014-0550, CVE-2014-0551, CVE-2014-0552, and CVE-2014-0555.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0547", url: "https://www.suse.com/security/cve/CVE-2014-0547", }, { category: "external", summary: "SUSE Bug 895856 for CVE-2014-0547", url: "https://bugzilla.suse.com/895856", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2014-0547", }, { cve: "CVE-2014-0548", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0548", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.244 and 14.x and 15.x before 15.0.0.152 on Windows and OS X and before 11.2.202.406 on Linux, Adobe AIR before 15.0.0.249 on Windows and OS X and before 15.0.0.252 on Android, Adobe AIR SDK before 15.0.0.249, and Adobe AIR SDK & Compiler before 15.0.0.249 allow remote attackers to bypass the Same Origin Policy via unspecified vectors.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0548", url: "https://www.suse.com/security/cve/CVE-2014-0548", }, { category: "external", summary: "SUSE Bug 895856 for CVE-2014-0548", url: "https://bugzilla.suse.com/895856", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2014-0548", }, { cve: "CVE-2014-0549", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0549", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.244 and 14.x and 15.x before 15.0.0.152 on Windows and OS X and before 11.2.202.406 on Linux, Adobe AIR before 15.0.0.249 on Windows and OS X and before 15.0.0.252 on Android, Adobe AIR SDK before 15.0.0.249, and Adobe AIR SDK & Compiler before 15.0.0.249 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2014-0547, CVE-2014-0550, CVE-2014-0551, CVE-2014-0552, and CVE-2014-0555.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0549", url: "https://www.suse.com/security/cve/CVE-2014-0549", }, { category: "external", summary: "SUSE Bug 895856 for CVE-2014-0549", url: "https://bugzilla.suse.com/895856", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2014-0549", }, { cve: "CVE-2014-0550", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0550", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.244 and 14.x and 15.x before 15.0.0.152 on Windows and OS X and before 11.2.202.406 on Linux, Adobe AIR before 15.0.0.249 on Windows and OS X and before 15.0.0.252 on Android, Adobe AIR SDK before 15.0.0.249, and Adobe AIR SDK & Compiler before 15.0.0.249 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2014-0547, CVE-2014-0549, CVE-2014-0551, CVE-2014-0552, and CVE-2014-0555.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0550", url: "https://www.suse.com/security/cve/CVE-2014-0550", }, { category: "external", summary: "SUSE Bug 895856 for CVE-2014-0550", url: "https://bugzilla.suse.com/895856", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2014-0550", }, { cve: "CVE-2014-0551", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0551", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.244 and 14.x and 15.x before 15.0.0.152 on Windows and OS X and before 11.2.202.406 on Linux, Adobe AIR before 15.0.0.249 on Windows and OS X and before 15.0.0.252 on Android, Adobe AIR SDK before 15.0.0.249, and Adobe AIR SDK & Compiler before 15.0.0.249 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2014-0547, CVE-2014-0549, CVE-2014-0550, CVE-2014-0552, and CVE-2014-0555.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0551", url: "https://www.suse.com/security/cve/CVE-2014-0551", }, { category: "external", summary: "SUSE Bug 895856 for CVE-2014-0551", url: "https://bugzilla.suse.com/895856", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2014-0551", }, { cve: "CVE-2014-0552", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0552", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.244 and 14.x and 15.x before 15.0.0.152 on Windows and OS X and before 11.2.202.406 on Linux, Adobe AIR before 15.0.0.249 on Windows and OS X and before 15.0.0.252 on Android, Adobe AIR SDK before 15.0.0.249, and Adobe AIR SDK & Compiler before 15.0.0.249 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2014-0547, CVE-2014-0549, CVE-2014-0550, CVE-2014-0551, and CVE-2014-0555.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0552", url: "https://www.suse.com/security/cve/CVE-2014-0552", }, { category: "external", summary: "SUSE Bug 895856 for CVE-2014-0552", url: "https://bugzilla.suse.com/895856", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2014-0552", }, { cve: "CVE-2014-0553", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0553", }, ], notes: [ { category: "general", text: "Use-after-free vulnerability in Adobe Flash Player before 13.0.0.244 and 14.x and 15.x before 15.0.0.152 on Windows and OS X and before 11.2.202.406 on Linux, Adobe AIR before 15.0.0.249 on Windows and OS X and before 15.0.0.252 on Android, Adobe AIR SDK before 15.0.0.249, and Adobe AIR SDK & Compiler before 15.0.0.249 allows attackers to execute arbitrary code via unspecified vectors.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0553", url: "https://www.suse.com/security/cve/CVE-2014-0553", }, { category: "external", summary: "SUSE Bug 895856 for CVE-2014-0553", url: "https://bugzilla.suse.com/895856", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2014-0553", }, { cve: "CVE-2014-0554", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0554", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.244 and 14.x and 15.x before 15.0.0.152 on Windows and OS X and before 11.2.202.406 on Linux, Adobe AIR before 15.0.0.249 on Windows and OS X and before 15.0.0.252 on Android, Adobe AIR SDK before 15.0.0.249, and Adobe AIR SDK & Compiler before 15.0.0.249 allow attackers to bypass intended access restrictions via unspecified vectors.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0554", url: "https://www.suse.com/security/cve/CVE-2014-0554", }, { category: "external", summary: "SUSE Bug 895856 for CVE-2014-0554", url: "https://bugzilla.suse.com/895856", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2014-0554", }, { cve: "CVE-2014-0555", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0555", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.244 and 14.x and 15.x before 15.0.0.152 on Windows and OS X and before 11.2.202.406 on Linux, Adobe AIR before 15.0.0.249 on Windows and OS X and before 15.0.0.252 on Android, Adobe AIR SDK before 15.0.0.249, and Adobe AIR SDK & Compiler before 15.0.0.249 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2014-0547, CVE-2014-0549, CVE-2014-0550, CVE-2014-0551, and CVE-2014-0552.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0555", url: "https://www.suse.com/security/cve/CVE-2014-0555", }, { category: "external", summary: "SUSE Bug 895856 for CVE-2014-0555", url: "https://bugzilla.suse.com/895856", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2014-0555", }, { cve: "CVE-2014-0556", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0556", }, ], notes: [ { category: "general", text: "Heap-based buffer overflow in Adobe Flash Player before 13.0.0.244 and 14.x and 15.x before 15.0.0.152 on Windows and OS X and before 11.2.202.406 on Linux, Adobe AIR before 15.0.0.249 on Windows and OS X and before 15.0.0.252 on Android, Adobe AIR SDK before 15.0.0.249, and Adobe AIR SDK & Compiler before 15.0.0.249 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2014-0559.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0556", url: "https://www.suse.com/security/cve/CVE-2014-0556", }, { category: "external", summary: "SUSE Bug 895856 for CVE-2014-0556", url: "https://bugzilla.suse.com/895856", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2014-0556", }, { cve: "CVE-2014-0557", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0557", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.244 and 14.x and 15.x before 15.0.0.152 on Windows and OS X and before 11.2.202.406 on Linux, Adobe AIR before 15.0.0.249 on Windows and OS X and before 15.0.0.252 on Android, Adobe AIR SDK before 15.0.0.249, and Adobe AIR SDK & Compiler before 15.0.0.249 do not properly restrict discovery of memory addresses, which allows attackers to bypass the ASLR protection mechanism via unspecified vectors.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0557", url: "https://www.suse.com/security/cve/CVE-2014-0557", }, { category: "external", summary: "SUSE Bug 895856 for CVE-2014-0557", url: "https://bugzilla.suse.com/895856", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2014-0557", }, { cve: "CVE-2014-0558", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0558", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.250 and 14.x and 15.x before 15.0.0.189 on Windows and OS X and before 11.2.202.411 on Linux, Adobe AIR before 15.0.0.293, Adobe AIR SDK before 15.0.0.302, and Adobe AIR SDK & Compiler before 15.0.0.302 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2014-0564.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0558", url: "https://www.suse.com/security/cve/CVE-2014-0558", }, { category: "external", summary: "SUSE Bug 901334 for CVE-2014-0558", url: "https://bugzilla.suse.com/901334", }, { category: "external", summary: "SUSE Bug 905032 for CVE-2014-0558", url: "https://bugzilla.suse.com/905032", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "moderate", }, ], title: "CVE-2014-0558", }, { cve: "CVE-2014-0559", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0559", }, ], notes: [ { category: "general", text: "Heap-based buffer overflow in Adobe Flash Player before 13.0.0.244 and 14.x and 15.x before 15.0.0.152 on Windows and OS X and before 11.2.202.406 on Linux, Adobe AIR before 15.0.0.249 on Windows and OS X and before 15.0.0.252 on Android, Adobe AIR SDK before 15.0.0.249, and Adobe AIR SDK & Compiler before 15.0.0.249 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2014-0556.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0559", url: "https://www.suse.com/security/cve/CVE-2014-0559", }, { category: "external", summary: "SUSE Bug 895856 for CVE-2014-0559", url: "https://bugzilla.suse.com/895856", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2014-0559", }, { cve: "CVE-2014-0564", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0564", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.250 and 14.x and 15.x before 15.0.0.189 on Windows and OS X and before 11.2.202.411 on Linux, Adobe AIR before 15.0.0.293, Adobe AIR SDK before 15.0.0.302, and Adobe AIR SDK & Compiler before 15.0.0.302 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2014-0558.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0564", url: "https://www.suse.com/security/cve/CVE-2014-0564", }, { category: "external", summary: "SUSE Bug 901334 for CVE-2014-0564", url: "https://bugzilla.suse.com/901334", }, { category: "external", summary: "SUSE Bug 905032 for CVE-2014-0564", url: "https://bugzilla.suse.com/905032", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "moderate", }, ], title: "CVE-2014-0564", }, { cve: "CVE-2014-0569", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0569", }, ], notes: [ { category: "general", text: "Integer overflow in Adobe Flash Player before 13.0.0.250 and 14.x and 15.x before 15.0.0.189 on Windows and OS X and before 11.2.202.411 on Linux, Adobe AIR before 15.0.0.293, Adobe AIR SDK before 15.0.0.302, and Adobe AIR SDK & Compiler before 15.0.0.302 allows attackers to execute arbitrary code via unspecified vectors.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0569", url: "https://www.suse.com/security/cve/CVE-2014-0569", }, { category: "external", summary: "SUSE Bug 901334 for CVE-2014-0569", url: "https://bugzilla.suse.com/901334", }, { category: "external", summary: "SUSE Bug 905032 for CVE-2014-0569", url: "https://bugzilla.suse.com/905032", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "moderate", }, ], title: "CVE-2014-0569", }, { cve: "CVE-2014-0573", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0573", }, ], notes: [ { category: "general", text: "Use-after-free vulnerability in Adobe Flash Player before 13.0.0.252 and 14.x and 15.x before 15.0.0.223 on Windows and OS X and before 11.2.202.418 on Linux, Adobe AIR before 15.0.0.356, Adobe AIR SDK before 15.0.0.356, and Adobe AIR SDK & Compiler before 15.0.0.356 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2014-0588 and CVE-2014-8438.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0573", url: "https://www.suse.com/security/cve/CVE-2014-0573", }, { category: "external", summary: "SUSE Bug 905032 for CVE-2014-0573", url: "https://bugzilla.suse.com/905032", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2014-0573", }, { cve: "CVE-2014-0574", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0574", }, ], notes: [ { category: "general", text: "Double free vulnerability in Adobe Flash Player before 13.0.0.252 and 14.x and 15.x before 15.0.0.223 on Windows and OS X and before 11.2.202.418 on Linux, Adobe AIR before 15.0.0.356, Adobe AIR SDK before 15.0.0.356, and Adobe AIR SDK & Compiler before 15.0.0.356 allows attackers to execute arbitrary code via unspecified vectors.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0574", url: "https://www.suse.com/security/cve/CVE-2014-0574", }, { category: "external", summary: "SUSE Bug 905032 for CVE-2014-0574", url: "https://bugzilla.suse.com/905032", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2014-0574", }, { cve: "CVE-2014-0576", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0576", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.252 and 14.x and 15.x before 15.0.0.223 on Windows and OS X and before 11.2.202.418 on Linux, Adobe AIR before 15.0.0.356, Adobe AIR SDK before 15.0.0.356, and Adobe AIR SDK & Compiler before 15.0.0.356 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2014-0581, CVE-2014-8440, and CVE-2014-8441.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0576", url: "https://www.suse.com/security/cve/CVE-2014-0576", }, { category: "external", summary: "SUSE Bug 905032 for CVE-2014-0576", url: "https://bugzilla.suse.com/905032", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2014-0576", }, { cve: "CVE-2014-0577", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0577", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.252 and 14.x and 15.x before 15.0.0.223 on Windows and OS X and before 11.2.202.418 on Linux, Adobe AIR before 15.0.0.356, Adobe AIR SDK before 15.0.0.356, and Adobe AIR SDK & Compiler before 15.0.0.356 allow attackers to execute arbitrary code by leveraging an unspecified \"type confusion,\" a different vulnerability than CVE-2014-0584, CVE-2014-0585, CVE-2014-0586, and CVE-2014-0590.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0577", url: "https://www.suse.com/security/cve/CVE-2014-0577", }, { category: "external", summary: "SUSE Bug 905032 for CVE-2014-0577", url: "https://bugzilla.suse.com/905032", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2014-0577", }, { cve: "CVE-2014-0580", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0580", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.259 and 14.x through 16.x before 16.0.0.235 on Windows and OS X and before 11.2.202.425 on Linux allows remote attackers to bypass the Same Origin Policy via unspecified vectors.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0580", url: "https://www.suse.com/security/cve/CVE-2014-0580", }, { category: "external", summary: "SUSE Bug 909219 for CVE-2014-0580", url: "https://bugzilla.suse.com/909219", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2014-0580", }, { cve: "CVE-2014-0581", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0581", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.252 and 14.x and 15.x before 15.0.0.223 on Windows and OS X and before 11.2.202.418 on Linux, Adobe AIR before 15.0.0.356, Adobe AIR SDK before 15.0.0.356, and Adobe AIR SDK & Compiler before 15.0.0.356 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2014-0576, CVE-2014-8440, and CVE-2014-8441.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0581", url: "https://www.suse.com/security/cve/CVE-2014-0581", }, { category: "external", summary: "SUSE Bug 905032 for CVE-2014-0581", url: "https://bugzilla.suse.com/905032", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "important", }, ], title: "CVE-2014-0581", }, { cve: "CVE-2014-0582", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0582", }, ], notes: [ { category: "general", text: "Heap-based buffer overflow in Adobe Flash Player before 13.0.0.252 and 14.x and 15.x before 15.0.0.223 on Windows and OS X and before 11.2.202.418 on Linux, Adobe AIR before 15.0.0.356, Adobe AIR SDK before 15.0.0.356, and Adobe AIR SDK & Compiler before 15.0.0.356 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2014-0589.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0582", url: "https://www.suse.com/security/cve/CVE-2014-0582", }, { category: "external", summary: "SUSE Bug 905032 for CVE-2014-0582", url: "https://bugzilla.suse.com/905032", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "important", }, ], title: "CVE-2014-0582", }, { cve: "CVE-2014-0583", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0583", }, ], notes: [ { category: "general", text: "Heap-based buffer overflow in Adobe Flash Player before 13.0.0.252 and 14.x and 15.x before 15.0.0.223 on Windows and OS X and before 11.2.202.418 on Linux, Adobe AIR before 15.0.0.356, Adobe AIR SDK before 15.0.0.356, and Adobe AIR SDK & Compiler before 15.0.0.356 allows attackers to complete a transition from Low Integrity to Medium Integrity via unspecified vectors.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0583", url: "https://www.suse.com/security/cve/CVE-2014-0583", }, { category: "external", summary: "SUSE Bug 905032 for CVE-2014-0583", url: "https://bugzilla.suse.com/905032", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2014-0583", }, { cve: "CVE-2014-0584", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0584", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.252 and 14.x and 15.x before 15.0.0.223 on Windows and OS X and before 11.2.202.418 on Linux, Adobe AIR before 15.0.0.356, Adobe AIR SDK before 15.0.0.356, and Adobe AIR SDK & Compiler before 15.0.0.356 allow attackers to execute arbitrary code by leveraging an unspecified \"type confusion,\" a different vulnerability than CVE-2014-0577, CVE-2014-0585, CVE-2014-0586, and CVE-2014-0590.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0584", url: "https://www.suse.com/security/cve/CVE-2014-0584", }, { category: "external", summary: "SUSE Bug 905032 for CVE-2014-0584", url: "https://bugzilla.suse.com/905032", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "important", }, ], title: "CVE-2014-0584", }, { cve: "CVE-2014-0585", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0585", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.252 and 14.x and 15.x before 15.0.0.223 on Windows and OS X and before 11.2.202.418 on Linux, Adobe AIR before 15.0.0.356, Adobe AIR SDK before 15.0.0.356, and Adobe AIR SDK & Compiler before 15.0.0.356 allow attackers to execute arbitrary code by leveraging an unspecified \"type confusion,\" a different vulnerability than CVE-2014-0577, CVE-2014-0584, CVE-2014-0586, and CVE-2014-0590.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0585", url: "https://www.suse.com/security/cve/CVE-2014-0585", }, { category: "external", summary: "SUSE Bug 905032 for CVE-2014-0585", url: "https://bugzilla.suse.com/905032", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "important", }, ], title: "CVE-2014-0585", }, { cve: "CVE-2014-0586", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0586", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.252 and 14.x and 15.x before 15.0.0.223 on Windows and OS X and before 11.2.202.418 on Linux, Adobe AIR before 15.0.0.356, Adobe AIR SDK before 15.0.0.356, and Adobe AIR SDK & Compiler before 15.0.0.356 allow attackers to execute arbitrary code by leveraging an unspecified \"type confusion,\" a different vulnerability than CVE-2014-0577, CVE-2014-0584, CVE-2014-0585, and CVE-2014-0590.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0586", url: "https://www.suse.com/security/cve/CVE-2014-0586", }, { category: "external", summary: "SUSE Bug 905032 for CVE-2014-0586", url: "https://bugzilla.suse.com/905032", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "important", }, ], title: "CVE-2014-0586", }, { cve: "CVE-2014-0587", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0587", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.259 and 14.x through 16.x before 16.0.0.235 on Windows and OS X and before 11.2.202.425 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2014-9164.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0587", url: "https://www.suse.com/security/cve/CVE-2014-0587", }, { category: "external", summary: "SUSE Bug 909219 for CVE-2014-0587", url: "https://bugzilla.suse.com/909219", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2014-0587", }, { cve: "CVE-2014-0588", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0588", }, ], notes: [ { category: "general", text: "Use-after-free vulnerability in Adobe Flash Player before 13.0.0.252 and 14.x and 15.x before 15.0.0.223 on Windows and OS X and before 11.2.202.418 on Linux, Adobe AIR before 15.0.0.356, Adobe AIR SDK before 15.0.0.356, and Adobe AIR SDK & Compiler before 15.0.0.356 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2014-0573 and CVE-2014-8438.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0588", url: "https://www.suse.com/security/cve/CVE-2014-0588", }, { category: "external", summary: "SUSE Bug 905032 for CVE-2014-0588", url: "https://bugzilla.suse.com/905032", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "important", }, ], title: "CVE-2014-0588", }, { cve: "CVE-2014-0589", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0589", }, ], notes: [ { category: "general", text: "Heap-based buffer overflow in Adobe Flash Player before 13.0.0.252 and 14.x and 15.x before 15.0.0.223 on Windows and OS X and before 11.2.202.418 on Linux, Adobe AIR before 15.0.0.356, Adobe AIR SDK before 15.0.0.356, and Adobe AIR SDK & Compiler before 15.0.0.356 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2014-0582.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0589", url: "https://www.suse.com/security/cve/CVE-2014-0589", }, { category: "external", summary: "SUSE Bug 905032 for CVE-2014-0589", url: "https://bugzilla.suse.com/905032", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "important", }, ], title: "CVE-2014-0589", }, { cve: "CVE-2014-0590", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0590", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.252 and 14.x and 15.x before 15.0.0.223 on Windows and OS X and before 11.2.202.418 on Linux, Adobe AIR before 15.0.0.356, Adobe AIR SDK before 15.0.0.356, and Adobe AIR SDK & Compiler before 15.0.0.356 allow attackers to execute arbitrary code by leveraging an unspecified \"type confusion,\" a different vulnerability than CVE-2014-0577, CVE-2014-0584, CVE-2014-0585, and CVE-2014-0586.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0590", url: "https://www.suse.com/security/cve/CVE-2014-0590", }, { category: "external", summary: "SUSE Bug 905032 for CVE-2014-0590", url: "https://bugzilla.suse.com/905032", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "important", }, ], title: "CVE-2014-0590", }, { cve: "CVE-2014-4671", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-4671", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.231 and 14.x before 14.0.0.145 on Windows and OS X and before 11.2.202.394 on Linux, Adobe AIR before 14.0.0.137 on Android, Adobe AIR SDK before 14.0.0.137, and Adobe AIR SDK & Compiler before 14.0.0.137 do not properly restrict the SWF file format, which allows remote attackers to conduct cross-site request forgery (CSRF) attacks against JSONP endpoints, and obtain sensitive information, via a crafted OBJECT element with SWF content satisfying the character-set requirements of a callback API.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-4671", url: "https://www.suse.com/security/cve/CVE-2014-4671", }, { category: "external", summary: "SUSE Bug 886454 for CVE-2014-4671", url: "https://bugzilla.suse.com/886454", }, { category: "external", summary: "SUSE Bug 891688 for CVE-2014-4671", url: "https://bugzilla.suse.com/891688", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2014-4671", }, { cve: "CVE-2014-8437", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-8437", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.252 and 14.x and 15.x before 15.0.0.223 on Windows and OS X and before 11.2.202.418 on Linux, Adobe AIR before 15.0.0.356, Adobe AIR SDK before 15.0.0.356, and Adobe AIR SDK & Compiler before 15.0.0.356 allow remote attackers to discover session tokens via unspecified vectors.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-8437", url: "https://www.suse.com/security/cve/CVE-2014-8437", }, { category: "external", summary: "SUSE Bug 905032 for CVE-2014-8437", url: "https://bugzilla.suse.com/905032", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "important", }, ], title: "CVE-2014-8437", }, { cve: "CVE-2014-8438", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-8438", }, ], notes: [ { category: "general", text: "Use-after-free vulnerability in Adobe Flash Player before 13.0.0.252 and 14.x and 15.x before 15.0.0.223 on Windows and OS X and before 11.2.202.418 on Linux, Adobe AIR before 15.0.0.356, Adobe AIR SDK before 15.0.0.356, and Adobe AIR SDK & Compiler before 15.0.0.356 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2014-0573 and CVE-2014-0588.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-8438", url: "https://www.suse.com/security/cve/CVE-2014-8438", }, { category: "external", summary: "SUSE Bug 905032 for CVE-2014-8438", url: "https://bugzilla.suse.com/905032", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "important", }, ], title: "CVE-2014-8438", }, { cve: "CVE-2014-8439", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-8439", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.258 and 14.x and 15.x before 15.0.0.239 on Windows and OS X and before 11.2.202.424 on Linux, Adobe AIR before 15.0.0.293, Adobe AIR SDK before 15.0.0.302, and Adobe AIR SDK & Compiler before 15.0.0.302 allow attackers to execute arbitrary code or cause a denial of service (invalid pointer dereference) via unspecified vectors.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-8439", url: "https://www.suse.com/security/cve/CVE-2014-8439", }, { category: "external", summary: "SUSE Bug 907257 for CVE-2014-8439", url: "https://bugzilla.suse.com/907257", }, { category: "external", summary: "SUSE Bug 909219 for CVE-2014-8439", url: "https://bugzilla.suse.com/909219", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2014-8439", }, { cve: "CVE-2014-8440", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-8440", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.252 and 14.x and 15.x before 15.0.0.223 on Windows and OS X and before 11.2.202.418 on Linux, Adobe AIR before 15.0.0.356, Adobe AIR SDK before 15.0.0.356, and Adobe AIR SDK & Compiler before 15.0.0.356 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2014-0576, CVE-2014-0581, and CVE-2014-8441.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-8440", url: "https://www.suse.com/security/cve/CVE-2014-8440", }, { category: "external", summary: "SUSE Bug 905032 for CVE-2014-8440", url: "https://bugzilla.suse.com/905032", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "important", }, ], title: "CVE-2014-8440", }, { cve: "CVE-2014-8441", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-8441", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.252 and 14.x and 15.x before 15.0.0.223 on Windows and OS X and before 11.2.202.418 on Linux, Adobe AIR before 15.0.0.356, Adobe AIR SDK before 15.0.0.356, and Adobe AIR SDK & Compiler before 15.0.0.356 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2014-0576, CVE-2014-0581, and CVE-2014-8440.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-8441", url: "https://www.suse.com/security/cve/CVE-2014-8441", }, { category: "external", summary: "SUSE Bug 905032 for CVE-2014-8441", url: "https://bugzilla.suse.com/905032", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "important", }, ], title: "CVE-2014-8441", }, { cve: "CVE-2014-8442", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-8442", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.252 and 14.x and 15.x before 15.0.0.223 on Windows and OS X and before 11.2.202.418 on Linux, Adobe AIR before 15.0.0.356, Adobe AIR SDK before 15.0.0.356, and Adobe AIR SDK & Compiler before 15.0.0.356 allow attackers to complete a transition from Low Integrity to Medium Integrity by leveraging incorrect permissions.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-8442", url: "https://www.suse.com/security/cve/CVE-2014-8442", }, { category: "external", summary: "SUSE Bug 905032 for CVE-2014-8442", url: "https://bugzilla.suse.com/905032", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2014-8442", }, { cve: "CVE-2014-8443", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-8443", }, ], notes: [ { category: "general", text: "Use-after-free vulnerability in Adobe Flash Player before 13.0.0.259 and 14.x through 16.x before 16.0.0.235 on Windows and OS X and before 11.2.202.425 on Linux allows attackers to execute arbitrary code via unspecified vectors.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-8443", url: "https://www.suse.com/security/cve/CVE-2014-8443", }, { category: "external", summary: "SUSE Bug 909219 for CVE-2014-8443", url: "https://bugzilla.suse.com/909219", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2014-8443", }, { cve: "CVE-2014-9162", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-9162", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.259 and 14.x through 16.x before 16.0.0.235 on Windows and OS X and before 11.2.202.425 on Linux allows attackers to obtain sensitive information via unspecified vectors.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-9162", url: "https://www.suse.com/security/cve/CVE-2014-9162", }, { category: "external", summary: "SUSE Bug 909219 for CVE-2014-9162", url: "https://bugzilla.suse.com/909219", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2014-9162", }, { cve: "CVE-2014-9163", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-9163", }, ], notes: [ { category: "general", text: "Stack-based buffer overflow in Adobe Flash Player before 13.0.0.259 and 14.x and 15.x before 15.0.0.246 on Windows and OS X and before 11.2.202.425 on Linux allows attackers to execute arbitrary code via unspecified vectors, as exploited in the wild in December 2014.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-9163", url: "https://www.suse.com/security/cve/CVE-2014-9163", }, { category: "external", summary: "SUSE Bug 909219 for CVE-2014-9163", url: "https://bugzilla.suse.com/909219", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2014-9163", }, { cve: "CVE-2014-9164", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-9164", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.259 and 14.x through 16.x before 16.0.0.235 on Windows and OS X and before 11.2.202.425 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2014-0587.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-9164", url: "https://www.suse.com/security/cve/CVE-2014-9164", }, { category: "external", summary: "SUSE Bug 909219 for CVE-2014-9164", url: "https://bugzilla.suse.com/909219", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2014-9164", }, { cve: "CVE-2015-0301", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-0301", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.260 and 14.x through 16.x before 16.0.0.257 on Windows and OS X and before 11.2.202.429 on Linux, Adobe AIR before 16.0.0.245 on Windows and OS X and before 16.0.0.272 on Android, Adobe AIR SDK before 16.0.0.272, and Adobe AIR SDK & Compiler before 16.0.0.272 do not properly validate files, which has unspecified impact and attack vectors.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-0301", url: "https://www.suse.com/security/cve/CVE-2015-0301", }, { category: "external", summary: "SUSE Bug 913057 for CVE-2015-0301", url: "https://bugzilla.suse.com/913057", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2015-0301", }, { cve: "CVE-2015-0302", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-0302", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.260 and 14.x through 16.x before 16.0.0.257 on Windows and OS X and before 11.2.202.429 on Linux, Adobe AIR before 16.0.0.245 on Windows and OS X and before 16.0.0.272 on Android, Adobe AIR SDK before 16.0.0.272, and Adobe AIR SDK & Compiler before 16.0.0.272 allow attackers to obtain sensitive keystroke information via unspecified vectors.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-0302", url: "https://www.suse.com/security/cve/CVE-2015-0302", }, { category: "external", summary: "SUSE Bug 913057 for CVE-2015-0302", url: "https://bugzilla.suse.com/913057", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2015-0302", }, { cve: "CVE-2015-0303", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-0303", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.260 and 14.x through 16.x before 16.0.0.257 on Windows and OS X and before 11.2.202.429 on Linux, Adobe AIR before 16.0.0.245 on Windows and OS X and before 16.0.0.272 on Android, Adobe AIR SDK before 16.0.0.272, and Adobe AIR SDK & Compiler before 16.0.0.272 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-0306.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-0303", url: "https://www.suse.com/security/cve/CVE-2015-0303", }, { category: "external", summary: "SUSE Bug 913057 for CVE-2015-0303", url: "https://bugzilla.suse.com/913057", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2015-0303", }, { cve: "CVE-2015-0304", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-0304", }, ], notes: [ { category: "general", text: "Heap-based buffer overflow in Adobe Flash Player before 13.0.0.260 and 14.x through 16.x before 16.0.0.257 on Windows and OS X and before 11.2.202.429 on Linux, Adobe AIR before 16.0.0.245 on Windows and OS X and before 16.0.0.272 on Android, Adobe AIR SDK before 16.0.0.272, and Adobe AIR SDK & Compiler before 16.0.0.272 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-0309.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-0304", url: "https://www.suse.com/security/cve/CVE-2015-0304", }, { category: "external", summary: "SUSE Bug 913057 for CVE-2015-0304", url: "https://bugzilla.suse.com/913057", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2015-0304", }, { cve: "CVE-2015-0305", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-0305", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.260 and 14.x through 16.x before 16.0.0.257 on Windows and OS X and before 11.2.202.429 on Linux, Adobe AIR before 16.0.0.245 on Windows and OS X and before 16.0.0.272 on Android, Adobe AIR SDK before 16.0.0.272, and Adobe AIR SDK & Compiler before 16.0.0.272 allow attackers to execute arbitrary code by leveraging an unspecified \"type confusion.\"", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-0305", url: "https://www.suse.com/security/cve/CVE-2015-0305", }, { category: "external", summary: "SUSE Bug 913057 for CVE-2015-0305", url: "https://bugzilla.suse.com/913057", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2015-0305", }, { cve: "CVE-2015-0306", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-0306", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.260 and 14.x through 16.x before 16.0.0.257 on Windows and OS X and before 11.2.202.429 on Linux, Adobe AIR before 16.0.0.245 on Windows and OS X and before 16.0.0.272 on Android, Adobe AIR SDK before 16.0.0.272, and Adobe AIR SDK & Compiler before 16.0.0.272 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-0303.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-0306", url: "https://www.suse.com/security/cve/CVE-2015-0306", }, { category: "external", summary: "SUSE Bug 913057 for CVE-2015-0306", url: "https://bugzilla.suse.com/913057", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2015-0306", }, { cve: "CVE-2015-0307", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-0307", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.260 and 14.x through 16.x before 16.0.0.257 on Windows and OS X and before 11.2.202.429 on Linux, Adobe AIR before 16.0.0.245 on Windows and OS X and before 16.0.0.272 on Android, Adobe AIR SDK before 16.0.0.272, and Adobe AIR SDK & Compiler before 16.0.0.272 allow remote attackers to obtain sensitive information from process memory or cause a denial of service (out-of-bounds read) via unspecified vectors.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-0307", url: "https://www.suse.com/security/cve/CVE-2015-0307", }, { category: "external", summary: "SUSE Bug 913057 for CVE-2015-0307", url: "https://bugzilla.suse.com/913057", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2015-0307", }, { cve: "CVE-2015-0308", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-0308", }, ], notes: [ { category: "general", text: "Use-after-free vulnerability in Adobe Flash Player before 13.0.0.260 and 14.x through 16.x before 16.0.0.257 on Windows and OS X and before 11.2.202.429 on Linux, Adobe AIR before 16.0.0.245 on Windows and OS X and before 16.0.0.272 on Android, Adobe AIR SDK before 16.0.0.272, and Adobe AIR SDK & Compiler before 16.0.0.272 allows attackers to execute arbitrary code via unspecified vectors.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-0308", url: "https://www.suse.com/security/cve/CVE-2015-0308", }, { category: "external", summary: "SUSE Bug 913057 for CVE-2015-0308", url: "https://bugzilla.suse.com/913057", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2015-0308", }, { cve: "CVE-2015-0309", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-0309", }, ], notes: [ { category: "general", text: "Heap-based buffer overflow in Adobe Flash Player before 13.0.0.260 and 14.x through 16.x before 16.0.0.257 on Windows and OS X and before 11.2.202.429 on Linux, Adobe AIR before 16.0.0.245 on Windows and OS X and before 16.0.0.272 on Android, Adobe AIR SDK before 16.0.0.272, and Adobe AIR SDK & Compiler before 16.0.0.272 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-0304.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-0309", url: "https://www.suse.com/security/cve/CVE-2015-0309", }, { category: "external", summary: "SUSE Bug 913057 for CVE-2015-0309", url: "https://bugzilla.suse.com/913057", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2015-0309", }, { cve: "CVE-2015-0310", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-0310", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.262 and 14.x through 16.x before 16.0.0.287 on Windows and OS X and before 11.2.202.438 on Linux does not properly restrict discovery of memory addresses, which allows attackers to bypass the ASLR protection mechanism on Windows, and have an unspecified impact on other platforms, via unknown vectors, as exploited in the wild in January 2015.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-0310", url: "https://www.suse.com/security/cve/CVE-2015-0310", }, { category: "external", summary: "SUSE Bug 914333 for CVE-2015-0310", url: "https://bugzilla.suse.com/914333", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2015-0310", }, { cve: "CVE-2015-0311", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-0311", }, ], notes: [ { category: "general", text: "Unspecified vulnerability in Adobe Flash Player through 13.0.0.262 and 14.x, 15.x, and 16.x through 16.0.0.287 on Windows and OS X and through 11.2.202.438 on Linux allows remote attackers to execute arbitrary code via unknown vectors, as exploited in the wild in January 2015.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-0311", url: "https://www.suse.com/security/cve/CVE-2015-0311", }, { category: "external", summary: "SUSE Bug 914463 for CVE-2015-0311", url: "https://bugzilla.suse.com/914463", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 9.8, baseSeverity: "CRITICAL", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2015-0311", }, { cve: "CVE-2015-0313", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-0313", }, ], notes: [ { category: "general", text: "Use-after-free vulnerability in Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows and OS X and before 11.2.202.442 on Linux allows remote attackers to execute arbitrary code via unspecified vectors, as exploited in the wild in February 2015, a different vulnerability than CVE-2015-0315, CVE-2015-0320, and CVE-2015-0322.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-0313", url: "https://www.suse.com/security/cve/CVE-2015-0313", }, { category: "external", summary: "SUSE Bug 915918 for CVE-2015-0313", url: "https://bugzilla.suse.com/915918", }, { category: "external", summary: "SUSE Bug 916374 for CVE-2015-0313", url: "https://bugzilla.suse.com/916374", }, { category: "external", summary: "SUSE Bug 922033 for CVE-2015-0313", url: "https://bugzilla.suse.com/922033", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 9.8, baseSeverity: "CRITICAL", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2015-0313", }, { cve: "CVE-2015-0314", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-0314", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows and OS X and before 11.2.202.442 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-0316, CVE-2015-0318, CVE-2015-0321, CVE-2015-0329, and CVE-2015-0330.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-0314", url: "https://www.suse.com/security/cve/CVE-2015-0314", }, { category: "external", summary: "SUSE Bug 915918 for CVE-2015-0314", url: "https://bugzilla.suse.com/915918", }, { category: "external", summary: "SUSE Bug 922033 for CVE-2015-0314", url: "https://bugzilla.suse.com/922033", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2015-0314", }, { cve: "CVE-2015-0315", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-0315", }, ], notes: [ { category: "general", text: "Use-after-free vulnerability in Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows and OS X and before 11.2.202.442 on Linux allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-0313, CVE-2015-0320, and CVE-2015-0322.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-0315", url: "https://www.suse.com/security/cve/CVE-2015-0315", }, { category: "external", summary: "SUSE Bug 915918 for CVE-2015-0315", url: "https://bugzilla.suse.com/915918", }, { category: "external", summary: "SUSE Bug 922033 for CVE-2015-0315", url: "https://bugzilla.suse.com/922033", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2015-0315", }, { cve: "CVE-2015-0316", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-0316", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows and OS X and before 11.2.202.442 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-0314, CVE-2015-0318, CVE-2015-0321, CVE-2015-0329, and CVE-2015-0330.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-0316", url: "https://www.suse.com/security/cve/CVE-2015-0316", }, { category: "external", summary: "SUSE Bug 915918 for CVE-2015-0316", url: "https://bugzilla.suse.com/915918", }, { category: "external", summary: "SUSE Bug 922033 for CVE-2015-0316", url: "https://bugzilla.suse.com/922033", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2015-0316", }, { cve: "CVE-2015-0317", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-0317", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows and OS X and before 11.2.202.442 on Linux allows attackers to execute arbitrary code by leveraging an unspecified \"type confusion,\" a different vulnerability than CVE-2015-0319.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-0317", url: "https://www.suse.com/security/cve/CVE-2015-0317", }, { category: "external", summary: "SUSE Bug 915918 for CVE-2015-0317", url: "https://bugzilla.suse.com/915918", }, { category: "external", summary: "SUSE Bug 922033 for CVE-2015-0317", url: "https://bugzilla.suse.com/922033", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2015-0317", }, { cve: "CVE-2015-0318", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-0318", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows and OS X and before 11.2.202.442 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-0314, CVE-2015-0316, CVE-2015-0321, CVE-2015-0329, and CVE-2015-0330.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-0318", url: "https://www.suse.com/security/cve/CVE-2015-0318", }, { category: "external", summary: "SUSE Bug 915918 for CVE-2015-0318", url: "https://bugzilla.suse.com/915918", }, { category: "external", summary: "SUSE Bug 922033 for CVE-2015-0318", url: "https://bugzilla.suse.com/922033", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2015-0318", }, { cve: "CVE-2015-0319", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-0319", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows and OS X and before 11.2.202.442 on Linux allows attackers to execute arbitrary code by leveraging an unspecified \"type confusion,\" a different vulnerability than CVE-2015-0317.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-0319", url: "https://www.suse.com/security/cve/CVE-2015-0319", }, { category: "external", summary: "SUSE Bug 915918 for CVE-2015-0319", url: "https://bugzilla.suse.com/915918", }, { category: "external", summary: "SUSE Bug 922033 for CVE-2015-0319", url: "https://bugzilla.suse.com/922033", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2015-0319", }, { cve: "CVE-2015-0320", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-0320", }, ], notes: [ { category: "general", text: "Use-after-free vulnerability in Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows and OS X and before 11.2.202.442 on Linux allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-0313, CVE-2015-0315, and CVE-2015-0322.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-0320", url: "https://www.suse.com/security/cve/CVE-2015-0320", }, { category: "external", summary: "SUSE Bug 915918 for CVE-2015-0320", url: "https://bugzilla.suse.com/915918", }, { category: "external", summary: "SUSE Bug 922033 for CVE-2015-0320", url: "https://bugzilla.suse.com/922033", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2015-0320", }, { cve: "CVE-2015-0321", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-0321", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows and OS X and before 11.2.202.442 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-0314, CVE-2015-0316, CVE-2015-0318, CVE-2015-0329, and CVE-2015-0330.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-0321", url: "https://www.suse.com/security/cve/CVE-2015-0321", }, { category: "external", summary: "SUSE Bug 915918 for CVE-2015-0321", url: "https://bugzilla.suse.com/915918", }, { category: "external", summary: "SUSE Bug 922033 for CVE-2015-0321", url: "https://bugzilla.suse.com/922033", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2015-0321", }, { cve: "CVE-2015-0322", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-0322", }, ], notes: [ { category: "general", text: "Use-after-free vulnerability in Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows and OS X and before 11.2.202.442 on Linux allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-0313, CVE-2015-0315, and CVE-2015-0320.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-0322", url: "https://www.suse.com/security/cve/CVE-2015-0322", }, { category: "external", summary: "SUSE Bug 915918 for CVE-2015-0322", url: "https://bugzilla.suse.com/915918", }, { category: "external", summary: "SUSE Bug 922033 for CVE-2015-0322", url: "https://bugzilla.suse.com/922033", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2015-0322", }, { cve: "CVE-2015-0323", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-0323", }, ], notes: [ { category: "general", text: "Heap-based buffer overflow in Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows and OS X and before 11.2.202.442 on Linux allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-0327.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-0323", url: "https://www.suse.com/security/cve/CVE-2015-0323", }, { category: "external", summary: "SUSE Bug 915918 for CVE-2015-0323", url: "https://bugzilla.suse.com/915918", }, { category: "external", summary: "SUSE Bug 922033 for CVE-2015-0323", url: "https://bugzilla.suse.com/922033", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2015-0323", }, { cve: "CVE-2015-0324", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-0324", }, ], notes: [ { category: "general", text: "Buffer overflow in Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows and OS X and before 11.2.202.442 on Linux allows attackers to execute arbitrary code via unspecified vectors.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-0324", url: "https://www.suse.com/security/cve/CVE-2015-0324", }, { category: "external", summary: "SUSE Bug 915918 for CVE-2015-0324", url: "https://bugzilla.suse.com/915918", }, { category: "external", summary: "SUSE Bug 922033 for CVE-2015-0324", url: "https://bugzilla.suse.com/922033", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2015-0324", }, { cve: "CVE-2015-0325", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-0325", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows and OS X and before 11.2.202.442 on Linux allows attackers to cause a denial of service (NULL pointer dereference) or possibly have unspecified other impact via unknown vectors, a different vulnerability than CVE-2015-0326 and CVE-2015-0328.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-0325", url: "https://www.suse.com/security/cve/CVE-2015-0325", }, { category: "external", summary: "SUSE Bug 915918 for CVE-2015-0325", url: "https://bugzilla.suse.com/915918", }, { category: "external", summary: "SUSE Bug 922033 for CVE-2015-0325", url: "https://bugzilla.suse.com/922033", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2015-0325", }, { cve: "CVE-2015-0326", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-0326", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows and OS X and before 11.2.202.442 on Linux allows attackers to cause a denial of service (NULL pointer dereference) or possibly have unspecified other impact via unknown vectors, a different vulnerability than CVE-2015-0325 and CVE-2015-0328.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-0326", url: "https://www.suse.com/security/cve/CVE-2015-0326", }, { category: "external", summary: "SUSE Bug 915918 for CVE-2015-0326", url: "https://bugzilla.suse.com/915918", }, { category: "external", summary: "SUSE Bug 922033 for CVE-2015-0326", url: "https://bugzilla.suse.com/922033", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2015-0326", }, { cve: "CVE-2015-0327", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-0327", }, ], notes: [ { category: "general", text: "Heap-based buffer overflow in Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows and OS X and before 11.2.202.442 on Linux allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-0323.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-0327", url: "https://www.suse.com/security/cve/CVE-2015-0327", }, { category: "external", summary: "SUSE Bug 915918 for CVE-2015-0327", url: "https://bugzilla.suse.com/915918", }, { category: "external", summary: "SUSE Bug 922033 for CVE-2015-0327", url: "https://bugzilla.suse.com/922033", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2015-0327", }, { cve: "CVE-2015-0328", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-0328", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows and OS X and before 11.2.202.442 on Linux allows attackers to cause a denial of service (NULL pointer dereference) or possibly have unspecified other impact via unknown vectors, a different vulnerability than CVE-2015-0325 and CVE-2015-0326.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-0328", url: "https://www.suse.com/security/cve/CVE-2015-0328", }, { category: "external", summary: "SUSE Bug 915918 for CVE-2015-0328", url: "https://bugzilla.suse.com/915918", }, { category: "external", summary: "SUSE Bug 922033 for CVE-2015-0328", url: "https://bugzilla.suse.com/922033", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2015-0328", }, { cve: "CVE-2015-0329", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-0329", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows and OS X and before 11.2.202.442 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-0314, CVE-2015-0316, CVE-2015-0318, CVE-2015-0321, and CVE-2015-0330.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-0329", url: "https://www.suse.com/security/cve/CVE-2015-0329", }, { category: "external", summary: "SUSE Bug 915918 for CVE-2015-0329", url: "https://bugzilla.suse.com/915918", }, { category: "external", summary: "SUSE Bug 922033 for CVE-2015-0329", url: "https://bugzilla.suse.com/922033", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2015-0329", }, { cve: "CVE-2015-0330", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-0330", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows and OS X and before 11.2.202.442 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-0314, CVE-2015-0316, CVE-2015-0318, CVE-2015-0321, and CVE-2015-0329.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-0330", url: "https://www.suse.com/security/cve/CVE-2015-0330", }, { category: "external", summary: "SUSE Bug 915918 for CVE-2015-0330", url: "https://bugzilla.suse.com/915918", }, { category: "external", summary: "SUSE Bug 922033 for CVE-2015-0330", url: "https://bugzilla.suse.com/922033", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2015-0330", }, { cve: "CVE-2015-0332", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-0332", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.277 and 14.x through 17.x before 17.0.0.134 on Windows and OS X and before 11.2.202.451 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-0333, CVE-2015-0335, and CVE-2015-0339.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-0332", url: "https://www.suse.com/security/cve/CVE-2015-0332", }, { category: "external", summary: "SUSE Bug 922033 for CVE-2015-0332", url: "https://bugzilla.suse.com/922033", }, { category: "external", summary: "SUSE Bug 922296 for CVE-2015-0332", url: "https://bugzilla.suse.com/922296", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2015-0332", }, { cve: "CVE-2015-0333", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-0333", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.277 and 14.x through 17.x before 17.0.0.134 on Windows and OS X and before 11.2.202.451 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-0332, CVE-2015-0335, and CVE-2015-0339.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-0333", url: "https://www.suse.com/security/cve/CVE-2015-0333", }, { category: "external", summary: "SUSE Bug 922033 for CVE-2015-0333", url: "https://bugzilla.suse.com/922033", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2015-0333", }, { cve: "CVE-2015-0334", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-0334", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.277 and 14.x through 17.x before 17.0.0.134 on Windows and OS X and before 11.2.202.451 on Linux allows attackers to execute arbitrary code by leveraging an unspecified \"type confusion,\" a different vulnerability than CVE-2015-0336.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-0334", url: "https://www.suse.com/security/cve/CVE-2015-0334", }, { category: "external", summary: "SUSE Bug 922033 for CVE-2015-0334", url: "https://bugzilla.suse.com/922033", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2015-0334", }, { cve: "CVE-2015-0335", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-0335", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.277 and 14.x through 17.x before 17.0.0.134 on Windows and OS X and before 11.2.202.451 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-0332, CVE-2015-0333, and CVE-2015-0339.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-0335", url: "https://www.suse.com/security/cve/CVE-2015-0335", }, { category: "external", summary: "SUSE Bug 922033 for CVE-2015-0335", url: "https://bugzilla.suse.com/922033", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2015-0335", }, { cve: "CVE-2015-0336", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-0336", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.277 and 14.x through 17.x before 17.0.0.134 on Windows and OS X and before 11.2.202.451 on Linux allows attackers to execute arbitrary code by leveraging an unspecified \"type confusion,\" a different vulnerability than CVE-2015-0334.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-0336", url: "https://www.suse.com/security/cve/CVE-2015-0336", }, { category: "external", summary: "SUSE Bug 922033 for CVE-2015-0336", url: "https://bugzilla.suse.com/922033", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2015-0336", }, { cve: "CVE-2015-0337", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-0337", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.277 and 14.x through 17.x before 17.0.0.134 on Windows and OS X and before 11.2.202.451 on Linux allows remote attackers to bypass the Same Origin Policy via unspecified vectors.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-0337", url: "https://www.suse.com/security/cve/CVE-2015-0337", }, { category: "external", summary: "SUSE Bug 922033 for CVE-2015-0337", url: "https://bugzilla.suse.com/922033", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2015-0337", }, { cve: "CVE-2015-0338", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-0338", }, ], notes: [ { category: "general", text: "Integer overflow in Adobe Flash Player before 13.0.0.277 and 14.x through 17.x before 17.0.0.134 on Windows and OS X and before 11.2.202.451 on Linux allows attackers to execute arbitrary code via unspecified vectors.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-0338", url: "https://www.suse.com/security/cve/CVE-2015-0338", }, { category: "external", summary: "SUSE Bug 922033 for CVE-2015-0338", url: "https://bugzilla.suse.com/922033", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2015-0338", }, { cve: "CVE-2015-0339", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-0339", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.277 and 14.x through 17.x before 17.0.0.134 on Windows and OS X and before 11.2.202.451 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-0332, CVE-2015-0333, and CVE-2015-0335.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-0339", url: "https://www.suse.com/security/cve/CVE-2015-0339", }, { category: "external", summary: "SUSE Bug 922033 for CVE-2015-0339", url: "https://bugzilla.suse.com/922033", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2015-0339", }, { cve: "CVE-2015-0340", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-0340", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.277 and 14.x through 17.x before 17.0.0.134 on Windows and OS X and before 11.2.202.451 on Linux allows remote attackers to bypass intended file-upload restrictions via unspecified vectors.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-0340", url: "https://www.suse.com/security/cve/CVE-2015-0340", }, { category: "external", summary: "SUSE Bug 922033 for CVE-2015-0340", url: "https://bugzilla.suse.com/922033", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2015-0340", }, { cve: "CVE-2015-0341", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-0341", }, ], notes: [ { category: "general", text: "Use-after-free vulnerability in Adobe Flash Player before 13.0.0.277 and 14.x through 17.x before 17.0.0.134 on Windows and OS X and before 11.2.202.451 on Linux allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-0342.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-0341", url: "https://www.suse.com/security/cve/CVE-2015-0341", }, { category: "external", summary: "SUSE Bug 922033 for CVE-2015-0341", url: "https://bugzilla.suse.com/922033", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2015-0341", }, { cve: "CVE-2015-0342", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-0342", }, ], notes: [ { category: "general", text: "Use-after-free vulnerability in Adobe Flash Player before 13.0.0.277 and 14.x through 17.x before 17.0.0.134 on Windows and OS X and before 11.2.202.451 on Linux allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-0341.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-0342", url: "https://www.suse.com/security/cve/CVE-2015-0342", }, { category: "external", summary: "SUSE Bug 922033 for CVE-2015-0342", url: "https://bugzilla.suse.com/922033", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2015-0342", }, { cve: "CVE-2015-0346", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-0346", }, ], notes: [ { category: "general", text: "Double free vulnerability in Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-0359.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-0346", url: "https://www.suse.com/security/cve/CVE-2015-0346", }, { category: "external", summary: "SUSE Bug 927089 for CVE-2015-0346", url: "https://bugzilla.suse.com/927089", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "moderate", }, ], title: "CVE-2015-0346", }, { cve: "CVE-2015-0347", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-0347", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-0350, CVE-2015-0352, CVE-2015-0353, CVE-2015-0354, CVE-2015-0355, CVE-2015-0360, CVE-2015-3038, CVE-2015-3041, CVE-2015-3042, and CVE-2015-3043.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-0347", url: "https://www.suse.com/security/cve/CVE-2015-0347", }, { category: "external", summary: "SUSE Bug 927089 for CVE-2015-0347", url: "https://bugzilla.suse.com/927089", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "moderate", }, ], title: "CVE-2015-0347", }, { cve: "CVE-2015-0348", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-0348", }, ], notes: [ { category: "general", text: "Buffer overflow in Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code via unspecified vectors.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-0348", url: "https://www.suse.com/security/cve/CVE-2015-0348", }, { category: "external", summary: "SUSE Bug 927089 for CVE-2015-0348", url: "https://bugzilla.suse.com/927089", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "moderate", }, ], title: "CVE-2015-0348", }, { cve: "CVE-2015-0349", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-0349", }, ], notes: [ { category: "general", text: "Use-after-free vulnerability in Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-0351, CVE-2015-0358, and CVE-2015-3039.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-0349", url: "https://www.suse.com/security/cve/CVE-2015-0349", }, { category: "external", summary: "SUSE Bug 927089 for CVE-2015-0349", url: "https://bugzilla.suse.com/927089", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "moderate", }, ], title: "CVE-2015-0349", }, { cve: "CVE-2015-0350", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-0350", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-0347, CVE-2015-0352, CVE-2015-0353, CVE-2015-0354, CVE-2015-0355, CVE-2015-0360, CVE-2015-3038, CVE-2015-3041, CVE-2015-3042, and CVE-2015-3043.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-0350", url: "https://www.suse.com/security/cve/CVE-2015-0350", }, { category: "external", summary: "SUSE Bug 927089 for CVE-2015-0350", url: "https://bugzilla.suse.com/927089", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "moderate", }, ], title: "CVE-2015-0350", }, { cve: "CVE-2015-0351", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-0351", }, ], notes: [ { category: "general", text: "Use-after-free vulnerability in Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-0349, CVE-2015-0358, and CVE-2015-3039.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-0351", url: "https://www.suse.com/security/cve/CVE-2015-0351", }, { category: "external", summary: "SUSE Bug 927089 for CVE-2015-0351", url: "https://bugzilla.suse.com/927089", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "moderate", }, ], title: "CVE-2015-0351", }, { cve: "CVE-2015-0352", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-0352", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-0347, CVE-2015-0350, CVE-2015-0353, CVE-2015-0354, CVE-2015-0355, CVE-2015-0360, CVE-2015-3038, CVE-2015-3041, CVE-2015-3042, and CVE-2015-3043.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-0352", url: "https://www.suse.com/security/cve/CVE-2015-0352", }, { category: "external", summary: "SUSE Bug 927089 for CVE-2015-0352", url: "https://bugzilla.suse.com/927089", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "moderate", }, ], title: "CVE-2015-0352", }, { cve: "CVE-2015-0353", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-0353", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-0347, CVE-2015-0350, CVE-2015-0352, CVE-2015-0354, CVE-2015-0355, CVE-2015-0360, CVE-2015-3038, CVE-2015-3041, CVE-2015-3042, and CVE-2015-3043.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-0353", url: "https://www.suse.com/security/cve/CVE-2015-0353", }, { category: "external", summary: "SUSE Bug 927089 for CVE-2015-0353", url: "https://bugzilla.suse.com/927089", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "moderate", }, ], title: "CVE-2015-0353", }, { cve: "CVE-2015-0354", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-0354", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-0347, CVE-2015-0350, CVE-2015-0352, CVE-2015-0353, CVE-2015-0355, CVE-2015-0360, CVE-2015-3038, CVE-2015-3041, CVE-2015-3042, and CVE-2015-3043.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-0354", url: "https://www.suse.com/security/cve/CVE-2015-0354", }, { category: "external", summary: "SUSE Bug 927089 for CVE-2015-0354", url: "https://bugzilla.suse.com/927089", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "moderate", }, ], title: "CVE-2015-0354", }, { cve: "CVE-2015-0355", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-0355", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-0347, CVE-2015-0350, CVE-2015-0352, CVE-2015-0353, CVE-2015-0354, CVE-2015-0360, CVE-2015-3038, CVE-2015-3041, CVE-2015-3042, and CVE-2015-3043.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-0355", url: "https://www.suse.com/security/cve/CVE-2015-0355", }, { category: "external", summary: "SUSE Bug 927089 for CVE-2015-0355", url: "https://bugzilla.suse.com/927089", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "moderate", }, ], title: "CVE-2015-0355", }, { cve: "CVE-2015-0356", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-0356", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code by leveraging an unspecified \"type confusion.\"", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-0356", url: "https://www.suse.com/security/cve/CVE-2015-0356", }, { category: "external", summary: "SUSE Bug 927089 for CVE-2015-0356", url: "https://bugzilla.suse.com/927089", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "moderate", }, ], title: "CVE-2015-0356", }, { cve: "CVE-2015-0357", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-0357", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux does not properly restrict discovery of memory addresses, which allows attackers to bypass the ASLR protection mechanism via unspecified vectors, a different vulnerability than CVE-2015-3040.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-0357", url: "https://www.suse.com/security/cve/CVE-2015-0357", }, { category: "external", summary: "SUSE Bug 927089 for CVE-2015-0357", url: "https://bugzilla.suse.com/927089", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "moderate", }, ], title: "CVE-2015-0357", }, { cve: "CVE-2015-0358", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-0358", }, ], notes: [ { category: "general", text: "Use-after-free vulnerability in Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-0349, CVE-2015-0351, and CVE-2015-3039.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-0358", url: "https://www.suse.com/security/cve/CVE-2015-0358", }, { category: "external", summary: "SUSE Bug 927089 for CVE-2015-0358", url: "https://bugzilla.suse.com/927089", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "moderate", }, ], title: "CVE-2015-0358", }, { cve: "CVE-2015-0359", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-0359", }, ], notes: [ { category: "general", text: "Double free vulnerability in Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-0346.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-0359", url: "https://www.suse.com/security/cve/CVE-2015-0359", }, { category: "external", summary: "SUSE Bug 927089 for CVE-2015-0359", url: "https://bugzilla.suse.com/927089", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "moderate", }, ], title: "CVE-2015-0359", }, { cve: "CVE-2015-0360", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-0360", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-0347, CVE-2015-0350, CVE-2015-0352, CVE-2015-0353, CVE-2015-0354, CVE-2015-0355, CVE-2015-3038, CVE-2015-3041, CVE-2015-3042, and CVE-2015-3043.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-0360", url: "https://www.suse.com/security/cve/CVE-2015-0360", }, { category: "external", summary: "SUSE Bug 927089 for CVE-2015-0360", url: "https://bugzilla.suse.com/927089", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "moderate", }, ], title: "CVE-2015-0360", }, { cve: "CVE-2015-3038", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-3038", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-0347, CVE-2015-0350, CVE-2015-0352, CVE-2015-0353, CVE-2015-0354, CVE-2015-0355, CVE-2015-0360, CVE-2015-3041, CVE-2015-3042, and CVE-2015-3043.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-3038", url: "https://www.suse.com/security/cve/CVE-2015-3038", }, { category: "external", summary: "SUSE Bug 927089 for CVE-2015-3038", url: "https://bugzilla.suse.com/927089", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "moderate", }, ], title: "CVE-2015-3038", }, { cve: "CVE-2015-3039", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-3039", }, ], notes: [ { category: "general", text: "Use-after-free vulnerability in Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-0349, CVE-2015-0351, and CVE-2015-0358.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-3039", url: "https://www.suse.com/security/cve/CVE-2015-3039", }, { category: "external", summary: "SUSE Bug 927089 for CVE-2015-3039", url: "https://bugzilla.suse.com/927089", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "moderate", }, ], title: "CVE-2015-3039", }, { cve: "CVE-2015-3040", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-3040", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux does not properly restrict discovery of memory addresses, which allows attackers to bypass the ASLR protection mechanism via unspecified vectors, a different vulnerability than CVE-2015-0357.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-3040", url: "https://www.suse.com/security/cve/CVE-2015-3040", }, { category: "external", summary: "SUSE Bug 927089 for CVE-2015-3040", url: "https://bugzilla.suse.com/927089", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "moderate", }, ], title: "CVE-2015-3040", }, { cve: "CVE-2015-3041", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-3041", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-0347, CVE-2015-0350, CVE-2015-0352, CVE-2015-0353, CVE-2015-0354, CVE-2015-0355, CVE-2015-0360, CVE-2015-3038, CVE-2015-3042, and CVE-2015-3043.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-3041", url: "https://www.suse.com/security/cve/CVE-2015-3041", }, { category: "external", summary: "SUSE Bug 927089 for CVE-2015-3041", url: "https://bugzilla.suse.com/927089", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "moderate", }, ], title: "CVE-2015-3041", }, { cve: "CVE-2015-3042", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-3042", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-0347, CVE-2015-0350, CVE-2015-0352, CVE-2015-0353, CVE-2015-0354, CVE-2015-0355, CVE-2015-0360, CVE-2015-3038, CVE-2015-3041, and CVE-2015-3043.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-3042", url: "https://www.suse.com/security/cve/CVE-2015-3042", }, { category: "external", summary: "SUSE Bug 927089 for CVE-2015-3042", url: "https://bugzilla.suse.com/927089", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "moderate", }, ], title: "CVE-2015-3042", }, { cve: "CVE-2015-3043", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-3043", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, as exploited in the wild in April 2015, a different vulnerability than CVE-2015-0347, CVE-2015-0350, CVE-2015-0352, CVE-2015-0353, CVE-2015-0354, CVE-2015-0355, CVE-2015-0360, CVE-2015-3038, CVE-2015-3041, and CVE-2015-3042.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-3043", url: "https://www.suse.com/security/cve/CVE-2015-3043", }, { category: "external", summary: "SUSE Bug 927089 for CVE-2015-3043", url: "https://bugzilla.suse.com/927089", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 9.8, baseSeverity: "CRITICAL", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "moderate", }, ], title: "CVE-2015-3043", }, { cve: "CVE-2015-3044", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-3044", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to bypass intended access restrictions and obtain sensitive information via unspecified vectors.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-3044", url: "https://www.suse.com/security/cve/CVE-2015-3044", }, { category: "external", summary: "SUSE Bug 927089 for CVE-2015-3044", url: "https://bugzilla.suse.com/927089", }, { category: "external", summary: "SUSE Bug 930677 for CVE-2015-3044", url: "https://bugzilla.suse.com/930677", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "moderate", }, ], title: "CVE-2015-3044", }, { cve: "CVE-2015-3077", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-3077", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.289 and 14.x through 17.x before 17.0.0.188 on Windows and OS X and before 11.2.202.460 on Linux, Adobe AIR before 17.0.0.172, Adobe AIR SDK before 17.0.0.172, and Adobe AIR SDK & Compiler before 17.0.0.172 allow attackers to execute arbitrary code by leveraging an unspecified \"type confusion,\" a different vulnerability than CVE-2015-3084 and CVE-2015-3086.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-3077", url: "https://www.suse.com/security/cve/CVE-2015-3077", }, { category: "external", summary: "SUSE Bug 930677 for CVE-2015-3077", url: "https://bugzilla.suse.com/930677", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2015-3077", }, { cve: "CVE-2015-3078", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-3078", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.289 and 14.x through 17.x before 17.0.0.188 on Windows and OS X and before 11.2.202.460 on Linux, Adobe AIR before 17.0.0.172, Adobe AIR SDK before 17.0.0.172, and Adobe AIR SDK & Compiler before 17.0.0.172 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-3089, CVE-2015-3090, and CVE-2015-3093.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-3078", url: "https://www.suse.com/security/cve/CVE-2015-3078", }, { category: "external", summary: "SUSE Bug 930677 for CVE-2015-3078", url: "https://bugzilla.suse.com/930677", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2015-3078", }, { cve: "CVE-2015-3079", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-3079", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.289 and 14.x through 17.x before 17.0.0.188 on Windows and OS X and before 11.2.202.460 on Linux, Adobe AIR before 17.0.0.172, Adobe AIR SDK before 17.0.0.172, and Adobe AIR SDK & Compiler before 17.0.0.172 allow attackers to bypass intended access restrictions and obtain sensitive information via unspecified vectors.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-3079", url: "https://www.suse.com/security/cve/CVE-2015-3079", }, { category: "external", summary: "SUSE Bug 930677 for CVE-2015-3079", url: "https://bugzilla.suse.com/930677", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "moderate", }, ], title: "CVE-2015-3079", }, { cve: "CVE-2015-3080", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-3080", }, ], notes: [ { category: "general", text: "Use-after-free vulnerability in Adobe Flash Player before 13.0.0.289 and 14.x through 17.x before 17.0.0.188 on Windows and OS X and before 11.2.202.460 on Linux, Adobe AIR before 17.0.0.172, Adobe AIR SDK before 17.0.0.172, and Adobe AIR SDK & Compiler before 17.0.0.172 allows attackers to execute arbitrary code via unspecified vectors.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-3080", url: "https://www.suse.com/security/cve/CVE-2015-3080", }, { category: "external", summary: "SUSE Bug 930677 for CVE-2015-3080", url: "https://bugzilla.suse.com/930677", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2015-3080", }, { cve: "CVE-2015-3081", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-3081", }, ], notes: [ { category: "general", text: "Race condition in Adobe Flash Player before 13.0.0.289 and 14.x through 17.x before 17.0.0.188 on Windows and OS X and before 11.2.202.460 on Linux, Adobe AIR before 17.0.0.172, Adobe AIR SDK before 17.0.0.172, and Adobe AIR SDK & Compiler before 17.0.0.172 allows attackers to bypass the Internet Explorer Protected Mode protection mechanism via unspecified vectors.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-3081", url: "https://www.suse.com/security/cve/CVE-2015-3081", }, { category: "external", summary: "SUSE Bug 930677 for CVE-2015-3081", url: "https://bugzilla.suse.com/930677", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "moderate", }, ], title: "CVE-2015-3081", }, { cve: "CVE-2015-3082", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-3082", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.289 and 14.x through 17.x before 17.0.0.188 on Windows and OS X and before 11.2.202.460 on Linux, Adobe AIR before 17.0.0.172, Adobe AIR SDK before 17.0.0.172, and Adobe AIR SDK & Compiler before 17.0.0.172 allow remote attackers to bypass intended restrictions on filesystem write operations via unspecified vectors, a different vulnerability than CVE-2015-3083 and CVE-2015-3085.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-3082", url: "https://www.suse.com/security/cve/CVE-2015-3082", }, { category: "external", summary: "SUSE Bug 930677 for CVE-2015-3082", url: "https://bugzilla.suse.com/930677", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2015-3082", }, { cve: "CVE-2015-3083", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-3083", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.289 and 14.x through 17.x before 17.0.0.188 on Windows and OS X and before 11.2.202.460 on Linux, Adobe AIR before 17.0.0.172, Adobe AIR SDK before 17.0.0.172, and Adobe AIR SDK & Compiler before 17.0.0.172 allow remote attackers to bypass intended restrictions on filesystem write operations via unspecified vectors, a different vulnerability than CVE-2015-3082 and CVE-2015-3085.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-3083", url: "https://www.suse.com/security/cve/CVE-2015-3083", }, { category: "external", summary: "SUSE Bug 930677 for CVE-2015-3083", url: "https://bugzilla.suse.com/930677", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2015-3083", }, { cve: "CVE-2015-3084", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-3084", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.289 and 14.x through 17.x before 17.0.0.188 on Windows and OS X and before 11.2.202.460 on Linux, Adobe AIR before 17.0.0.172, Adobe AIR SDK before 17.0.0.172, and Adobe AIR SDK & Compiler before 17.0.0.172 allow attackers to execute arbitrary code by leveraging an unspecified \"type confusion,\" a different vulnerability than CVE-2015-3077 and CVE-2015-3086.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-3084", url: "https://www.suse.com/security/cve/CVE-2015-3084", }, { category: "external", summary: "SUSE Bug 930677 for CVE-2015-3084", url: "https://bugzilla.suse.com/930677", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2015-3084", }, { cve: "CVE-2015-3085", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-3085", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.289 and 14.x through 17.x before 17.0.0.188 on Windows and OS X and before 11.2.202.460 on Linux, Adobe AIR before 17.0.0.172, Adobe AIR SDK before 17.0.0.172, and Adobe AIR SDK & Compiler before 17.0.0.172 allow remote attackers to bypass intended restrictions on filesystem write operations via unspecified vectors, a different vulnerability than CVE-2015-3082 and CVE-2015-3083.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-3085", url: "https://www.suse.com/security/cve/CVE-2015-3085", }, { category: "external", summary: "SUSE Bug 930677 for CVE-2015-3085", url: "https://bugzilla.suse.com/930677", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2015-3085", }, { cve: "CVE-2015-3086", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-3086", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.289 and 14.x through 17.x before 17.0.0.188 on Windows and OS X and before 11.2.202.460 on Linux, Adobe AIR before 17.0.0.172, Adobe AIR SDK before 17.0.0.172, and Adobe AIR SDK & Compiler before 17.0.0.172 allow attackers to execute arbitrary code by leveraging an unspecified \"type confusion,\" a different vulnerability than CVE-2015-3077 and CVE-2015-3084.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-3086", url: "https://www.suse.com/security/cve/CVE-2015-3086", }, { category: "external", summary: "SUSE Bug 930677 for CVE-2015-3086", url: "https://bugzilla.suse.com/930677", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2015-3086", }, { cve: "CVE-2015-3087", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-3087", }, ], notes: [ { category: "general", text: "Integer overflow in Adobe Flash Player before 13.0.0.289 and 14.x through 17.x before 17.0.0.188 on Windows and OS X and before 11.2.202.460 on Linux, Adobe AIR before 17.0.0.172, Adobe AIR SDK before 17.0.0.172, and Adobe AIR SDK & Compiler before 17.0.0.172 allows attackers to execute arbitrary code via unspecified vectors.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-3087", url: "https://www.suse.com/security/cve/CVE-2015-3087", }, { category: "external", summary: "SUSE Bug 930677 for CVE-2015-3087", url: "https://bugzilla.suse.com/930677", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2015-3087", }, { cve: "CVE-2015-3088", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-3088", }, ], notes: [ { category: "general", text: "Heap-based buffer overflow in Adobe Flash Player before 13.0.0.289 and 14.x through 17.x before 17.0.0.188 on Windows and OS X and before 11.2.202.460 on Linux, Adobe AIR before 17.0.0.172, Adobe AIR SDK before 17.0.0.172, and Adobe AIR SDK & Compiler before 17.0.0.172 allows attackers to execute arbitrary code via unspecified vectors.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-3088", url: "https://www.suse.com/security/cve/CVE-2015-3088", }, { category: "external", summary: "SUSE Bug 930677 for CVE-2015-3088", url: "https://bugzilla.suse.com/930677", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2015-3088", }, { cve: "CVE-2015-3089", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-3089", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.289 and 14.x through 17.x before 17.0.0.188 on Windows and OS X and before 11.2.202.460 on Linux, Adobe AIR before 17.0.0.172, Adobe AIR SDK before 17.0.0.172, and Adobe AIR SDK & Compiler before 17.0.0.172 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-3078, CVE-2015-3090, and CVE-2015-3093.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-3089", url: "https://www.suse.com/security/cve/CVE-2015-3089", }, { category: "external", summary: "SUSE Bug 930677 for CVE-2015-3089", url: "https://bugzilla.suse.com/930677", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2015-3089", }, { cve: "CVE-2015-3090", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-3090", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.289 and 14.x through 17.x before 17.0.0.188 on Windows and OS X and before 11.2.202.460 on Linux, Adobe AIR before 17.0.0.172, Adobe AIR SDK before 17.0.0.172, and Adobe AIR SDK & Compiler before 17.0.0.172 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-3078, CVE-2015-3089, and CVE-2015-3093.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-3090", url: "https://www.suse.com/security/cve/CVE-2015-3090", }, { category: "external", summary: "SUSE Bug 930677 for CVE-2015-3090", url: "https://bugzilla.suse.com/930677", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2015-3090", }, { cve: "CVE-2015-3091", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-3091", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.289 and 14.x through 17.x before 17.0.0.188 on Windows and OS X and before 11.2.202.460 on Linux, Adobe AIR before 17.0.0.172, Adobe AIR SDK before 17.0.0.172, and Adobe AIR SDK & Compiler before 17.0.0.172 do not properly restrict discovery of memory addresses, which allows attackers to bypass the ASLR protection mechanism via unspecified vectors, a different vulnerability than CVE-2015-3092.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-3091", url: "https://www.suse.com/security/cve/CVE-2015-3091", }, { category: "external", summary: "SUSE Bug 930677 for CVE-2015-3091", url: "https://bugzilla.suse.com/930677", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2015-3091", }, { cve: "CVE-2015-3092", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-3092", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.289 and 14.x through 17.x before 17.0.0.188 on Windows and OS X and before 11.2.202.460 on Linux, Adobe AIR before 17.0.0.172, Adobe AIR SDK before 17.0.0.172, and Adobe AIR SDK & Compiler before 17.0.0.172 do not properly restrict discovery of memory addresses, which allows attackers to bypass the ASLR protection mechanism via unspecified vectors, a different vulnerability than CVE-2015-3091.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-3092", url: "https://www.suse.com/security/cve/CVE-2015-3092", }, { category: "external", summary: "SUSE Bug 930677 for CVE-2015-3092", url: "https://bugzilla.suse.com/930677", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2015-3092", }, { cve: "CVE-2015-3093", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-3093", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.289 and 14.x through 17.x before 17.0.0.188 on Windows and OS X and before 11.2.202.460 on Linux, Adobe AIR before 17.0.0.172, Adobe AIR SDK before 17.0.0.172, and Adobe AIR SDK & Compiler before 17.0.0.172 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-3078, CVE-2015-3089, and CVE-2015-3090.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-3093", url: "https://www.suse.com/security/cve/CVE-2015-3093", }, { category: "external", summary: "SUSE Bug 930677 for CVE-2015-3093", url: "https://bugzilla.suse.com/930677", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2015-3093", }, { cve: "CVE-2015-3096", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-3096", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.292 and 14.x through 18.x before 18.0.0.160 on Windows and OS X and before 11.2.202.466 on Linux, Adobe AIR before 18.0.0.144 on Windows and before 18.0.0.143 on OS X and Android, Adobe AIR SDK before 18.0.0.144 on Windows and before 18.0.0.143 on OS X, and Adobe AIR SDK & Compiler before 18.0.0.144 on Windows and before 18.0.0.143 on OS X allow remote attackers to bypass a CVE-2014-5333 protection mechanism via unspecified vectors.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-3096", url: "https://www.suse.com/security/cve/CVE-2015-3096", }, { category: "external", summary: "SUSE Bug 934088 for CVE-2015-3096", url: "https://bugzilla.suse.com/934088", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "important", }, ], title: "CVE-2015-3096", }, { cve: "CVE-2015-3098", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-3098", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.292 and 14.x through 18.x before 18.0.0.160 on Windows and OS X and before 11.2.202.466 on Linux, Adobe AIR before 18.0.0.144 on Windows and before 18.0.0.143 on OS X and Android, Adobe AIR SDK before 18.0.0.144 on Windows and before 18.0.0.143 on OS X, and Adobe AIR SDK & Compiler before 18.0.0.144 on Windows and before 18.0.0.143 on OS X allow remote attackers to bypass the Same Origin Policy via unspecified vectors, a different vulnerability than CVE-2015-3099 and CVE-2015-3102.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-3098", url: "https://www.suse.com/security/cve/CVE-2015-3098", }, { category: "external", summary: "SUSE Bug 934088 for CVE-2015-3098", url: "https://bugzilla.suse.com/934088", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "important", }, ], title: "CVE-2015-3098", }, { cve: "CVE-2015-3099", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-3099", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.292 and 14.x through 18.x before 18.0.0.160 on Windows and OS X and before 11.2.202.466 on Linux, Adobe AIR before 18.0.0.144 on Windows and before 18.0.0.143 on OS X and Android, Adobe AIR SDK before 18.0.0.144 on Windows and before 18.0.0.143 on OS X, and Adobe AIR SDK & Compiler before 18.0.0.144 on Windows and before 18.0.0.143 on OS X allow remote attackers to bypass the Same Origin Policy via unspecified vectors, a different vulnerability than CVE-2015-3098 and CVE-2015-3102.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-3099", url: "https://www.suse.com/security/cve/CVE-2015-3099", }, { category: "external", summary: "SUSE Bug 934088 for CVE-2015-3099", url: "https://bugzilla.suse.com/934088", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "important", }, ], title: "CVE-2015-3099", }, { cve: "CVE-2015-3100", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-3100", }, ], notes: [ { category: "general", text: "Stack-based buffer overflow in Adobe Flash Player before 13.0.0.292 and 14.x through 18.x before 18.0.0.160 on Windows and OS X and before 11.2.202.466 on Linux, Adobe AIR before 18.0.0.144 on Windows and before 18.0.0.143 on OS X and Android, Adobe AIR SDK before 18.0.0.144 on Windows and before 18.0.0.143 on OS X, and Adobe AIR SDK & Compiler before 18.0.0.144 on Windows and before 18.0.0.143 on OS X allows attackers to execute arbitrary code via unspecified vectors.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-3100", url: "https://www.suse.com/security/cve/CVE-2015-3100", }, { category: "external", summary: "SUSE Bug 934088 for CVE-2015-3100", url: "https://bugzilla.suse.com/934088", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "important", }, ], title: "CVE-2015-3100", }, { cve: "CVE-2015-3102", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-3102", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.292 and 14.x through 18.x before 18.0.0.160 on Windows and OS X and before 11.2.202.466 on Linux, Adobe AIR before 18.0.0.144 on Windows and before 18.0.0.143 on OS X and Android, Adobe AIR SDK before 18.0.0.144 on Windows and before 18.0.0.143 on OS X, and Adobe AIR SDK & Compiler before 18.0.0.144 on Windows and before 18.0.0.143 on OS X allow remote attackers to bypass the Same Origin Policy via unspecified vectors, a different vulnerability than CVE-2015-3098 and CVE-2015-3099.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-3102", url: "https://www.suse.com/security/cve/CVE-2015-3102", }, { category: "external", summary: "SUSE Bug 934088 for CVE-2015-3102", url: "https://bugzilla.suse.com/934088", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "important", }, ], title: "CVE-2015-3102", }, { cve: "CVE-2015-3103", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-3103", }, ], notes: [ { category: "general", text: "Use-after-free vulnerability in Adobe Flash Player before 13.0.0.292 and 14.x through 18.x before 18.0.0.160 on Windows and OS X and before 11.2.202.466 on Linux, Adobe AIR before 18.0.0.144 on Windows and before 18.0.0.143 on OS X and Android, Adobe AIR SDK before 18.0.0.144 on Windows and before 18.0.0.143 on OS X, and Adobe AIR SDK & Compiler before 18.0.0.144 on Windows and before 18.0.0.143 on OS X allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-3106 and CVE-2015-3107.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-3103", url: "https://www.suse.com/security/cve/CVE-2015-3103", }, { category: "external", summary: "SUSE Bug 934088 for CVE-2015-3103", url: "https://bugzilla.suse.com/934088", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "important", }, ], title: "CVE-2015-3103", }, { cve: "CVE-2015-3106", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-3106", }, ], notes: [ { category: "general", text: "Use-after-free vulnerability in Adobe Flash Player before 13.0.0.292 and 14.x through 18.x before 18.0.0.160 on Windows and OS X and before 11.2.202.466 on Linux, Adobe AIR before 18.0.0.144 on Windows and before 18.0.0.143 on OS X and Android, Adobe AIR SDK before 18.0.0.144 on Windows and before 18.0.0.143 on OS X, and Adobe AIR SDK & Compiler before 18.0.0.144 on Windows and before 18.0.0.143 on OS X allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-3103 and CVE-2015-3107.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-3106", url: "https://www.suse.com/security/cve/CVE-2015-3106", }, { category: "external", summary: "SUSE Bug 934088 for CVE-2015-3106", url: "https://bugzilla.suse.com/934088", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "important", }, ], title: "CVE-2015-3106", }, { cve: "CVE-2015-3107", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-3107", }, ], notes: [ { category: "general", text: "Use-after-free vulnerability in Adobe Flash Player before 13.0.0.292 and 14.x through 18.x before 18.0.0.160 on Windows and OS X and before 11.2.202.466 on Linux, Adobe AIR before 18.0.0.144 on Windows and before 18.0.0.143 on OS X and Android, Adobe AIR SDK before 18.0.0.144 on Windows and before 18.0.0.143 on OS X, and Adobe AIR SDK & Compiler before 18.0.0.144 on Windows and before 18.0.0.143 on OS X allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-3103 and CVE-2015-3106.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-3107", url: "https://www.suse.com/security/cve/CVE-2015-3107", }, { category: "external", summary: "SUSE Bug 934088 for CVE-2015-3107", url: "https://bugzilla.suse.com/934088", }, { category: "external", summary: "SUSE Bug 941239 for CVE-2015-3107", url: "https://bugzilla.suse.com/941239", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "important", }, ], title: "CVE-2015-3107", }, { cve: "CVE-2015-3108", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-3108", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.292 and 14.x through 18.x before 18.0.0.160 on Windows and OS X and before 11.2.202.466 on Linux, Adobe AIR before 18.0.0.144 on Windows and before 18.0.0.143 on OS X and Android, Adobe AIR SDK before 18.0.0.144 on Windows and before 18.0.0.143 on OS X, and Adobe AIR SDK & Compiler before 18.0.0.144 on Windows and before 18.0.0.143 on OS X do not properly restrict discovery of memory addresses, which allows attackers to bypass the ASLR protection mechanism via unspecified vectors.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-3108", url: "https://www.suse.com/security/cve/CVE-2015-3108", }, { category: "external", summary: "SUSE Bug 934088 for CVE-2015-3108", url: "https://bugzilla.suse.com/934088", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "important", }, ], title: "CVE-2015-3108", }, { cve: "CVE-2015-3113", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-3113", }, ], notes: [ { category: "general", text: "Heap-based buffer overflow in Adobe Flash Player before 13.0.0.296 and 14.x through 18.x before 18.0.0.194 on Windows and OS X and before 11.2.202.468 on Linux allows remote attackers to execute arbitrary code via unspecified vectors, as exploited in the wild in June 2015.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-3113", url: "https://www.suse.com/security/cve/CVE-2015-3113", }, { category: "external", summary: "SUSE Bug 935701 for CVE-2015-3113", url: "https://bugzilla.suse.com/935701", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 9.8, baseSeverity: "CRITICAL", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "important", }, ], title: "CVE-2015-3113", }, ], }
suse-su-2015:0723-1
Vulnerability from csaf_suse
Notes
{ document: { aggregate_severity: { namespace: "https://www.suse.com/support/security/rating/", text: "moderate", }, category: "csaf_security_advisory", csaf_version: "2.0", distribution: { text: "Copyright 2024 SUSE LLC. All rights reserved.", tlp: { label: "WHITE", url: "https://www.first.org/tlp/", }, }, lang: "en", notes: [ { category: "summary", text: "Security update for flash-player", title: "Title of the patch", }, { category: "description", text: "\nflash-player was updated to version 11.2.202.418 to fix 18 security issues:\n\n * Memory corruption vulnerabilities that could lead to code execution\n (CVE-2014-0576, CVE-2014-0581, CVE-2014-8440, CVE-2014-8441).\n * Use-after-free vulnerabilities that could lead to code execution\n (CVE-2014-0573, CVE-2014-0588, CVE-2014-8438).\n * A double free vulnerability that could lead to code execution\n (CVE-2014-0574).\n * Type confusion vulnerabilities that could lead to code execution\n (CVE-2014-0577, CVE-2014-0584, CVE-2014-0585, CVE-2014-0586,\n CVE-2014-0590).\n * Heap buffer overflow vulnerabilities that could lead to code\n execution (CVE-2014-0582, CVE-2014-0589).\n * An information disclosure vulnerability that could be exploited to\n disclose session tokens (CVE-2014-8437).\n * A heap buffer overflow vulnerability that could be exploited to\n perform privilege escalation from low to medium integrity level\n (CVE-2014-0583).\n * A permission issue that could be exploited to perform privilege\n escalation from low to medium integrity level (CVE-2014-8442).\n\nFurther information can be found at \nhttp://helpx.adobe.com/security/products/flash-player/apsb14-24.html\n<http://helpx.adobe.com/security/products/flash-player/apsb14-24.html> .\n\nSecurity Issues:\n\n * CVE-2014-0576\n <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0576>\n * CVE-2014-0581\n <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0581>\n * CVE-2014-8440\n <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8440>\n * CVE-2014-8441\n <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8441>\n * CVE-2014-0573\n <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0573>\n * CVE-2014-0588\n <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0588>\n * CVE-2014-8438\n <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8438>\n * CVE-2014-0574\n <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0574>\n * CVE-2014-0577\n <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0577>\n * CVE-2014-0584\n <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0584>\n * CVE-2014-0585\n <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0585>\n * CVE-2014-0586\n <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0586>\n * CVE-2014-0590\n <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0590>\n * CVE-2014-0582\n <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0582>\n * CVE-2014-0589\n <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0589>\n * CVE-2014-8437\n <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8437>\n * CVE-2014-0583\n <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0583>\n * CVE-2014-8442\n <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8442>\n\n", title: "Description of the patch", }, { category: "details", text: "sledsp3-flash-player", title: "Patchnames", }, { category: "legal_disclaimer", text: "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).", title: "Terms of use", }, ], publisher: { category: "vendor", contact_details: "https://www.suse.com/support/security/contact/", name: "SUSE Product Security Team", namespace: "https://www.suse.com/", }, references: [ { category: "external", summary: "SUSE ratings", url: "https://www.suse.com/support/security/rating/", }, { category: "self", summary: "URL of this CSAF notice", url: "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2015_0723-1.json", }, { category: "self", summary: "URL for SUSE-SU-2015:0723-1", url: "https://www.suse.com/support/update/announcement/2015/suse-su-20150723-1/", }, { category: "self", summary: "E-Mail link for SUSE-SU-2015:0723-1", url: "https://lists.suse.com/pipermail/sle-security-updates/2015-April/001350.html", }, { category: "self", summary: "SUSE Bug 824512", url: "https://bugzilla.suse.com/824512", }, { category: "self", summary: "SUSE Bug 828810", url: "https://bugzilla.suse.com/828810", }, { category: "self", summary: "SUSE Bug 839897", url: "https://bugzilla.suse.com/839897", }, { category: "self", summary: "SUSE Bug 850220", url: "https://bugzilla.suse.com/850220", }, { category: "self", summary: "SUSE Bug 854881", url: "https://bugzilla.suse.com/854881", }, { category: "self", summary: "SUSE Bug 856386", url: "https://bugzilla.suse.com/856386", }, { category: "self", summary: "SUSE Bug 858822", url: "https://bugzilla.suse.com/858822", }, { category: "self", summary: "SUSE Bug 862288", url: "https://bugzilla.suse.com/862288", }, { category: "self", summary: "SUSE Bug 865021", url: "https://bugzilla.suse.com/865021", }, { category: "self", summary: "SUSE Bug 867808", url: "https://bugzilla.suse.com/867808", }, { category: "self", summary: "SUSE Bug 872692", url: "https://bugzilla.suse.com/872692", }, { category: "self", summary: "SUSE Bug 875577", url: "https://bugzilla.suse.com/875577", }, { category: "self", summary: "SUSE Bug 877649", url: "https://bugzilla.suse.com/877649", }, { category: "self", summary: "SUSE Bug 882187", url: "https://bugzilla.suse.com/882187", }, { category: "self", summary: "SUSE Bug 886472", url: "https://bugzilla.suse.com/886472", }, { category: "self", summary: "SUSE Bug 891688", url: "https://bugzilla.suse.com/891688", }, { category: "self", summary: "SUSE Bug 895856", url: "https://bugzilla.suse.com/895856", }, { category: "self", summary: "SUSE Bug 901334", url: "https://bugzilla.suse.com/901334", }, { category: "self", summary: "SUSE Bug 905032", url: "https://bugzilla.suse.com/905032", }, { category: "self", summary: "SUSE Bug 907257", url: "https://bugzilla.suse.com/907257", }, { category: "self", summary: "SUSE Bug 909219", url: "https://bugzilla.suse.com/909219", }, { category: "self", summary: "SUSE Bug 913057", url: "https://bugzilla.suse.com/913057", }, { category: "self", summary: "SUSE Bug 914333", url: "https://bugzilla.suse.com/914333", }, { category: "self", summary: "SUSE Bug 914463", url: "https://bugzilla.suse.com/914463", }, { category: "self", summary: "SUSE Bug 915918", url: "https://bugzilla.suse.com/915918", }, { category: "self", summary: "SUSE Bug 922033", url: "https://bugzilla.suse.com/922033", }, { category: "self", summary: "SUSE Bug 927089", url: "https://bugzilla.suse.com/927089", }, { category: "self", summary: "SUSE Bug 930677", url: "https://bugzilla.suse.com/930677", }, { category: "self", summary: "SUSE Bug 934088", url: "https://bugzilla.suse.com/934088", }, { category: "self", summary: "SUSE Bug 935701", url: "https://bugzilla.suse.com/935701", }, { category: "self", summary: "SUSE CVE CVE-2013-3343 page", url: "https://www.suse.com/security/cve/CVE-2013-3343/", }, { category: "self", summary: "SUSE CVE CVE-2013-3344 page", url: "https://www.suse.com/security/cve/CVE-2013-3344/", }, { category: "self", summary: "SUSE CVE CVE-2013-3345 page", url: "https://www.suse.com/security/cve/CVE-2013-3345/", }, { category: "self", summary: "SUSE CVE CVE-2013-3347 page", url: "https://www.suse.com/security/cve/CVE-2013-3347/", }, { category: "self", summary: "SUSE CVE CVE-2013-3361 page", url: "https://www.suse.com/security/cve/CVE-2013-3361/", }, { category: "self", summary: "SUSE CVE CVE-2013-3362 page", url: "https://www.suse.com/security/cve/CVE-2013-3362/", }, { category: "self", summary: "SUSE CVE CVE-2013-3363 page", url: "https://www.suse.com/security/cve/CVE-2013-3363/", }, { category: "self", summary: "SUSE CVE CVE-2013-5324 page", url: "https://www.suse.com/security/cve/CVE-2013-5324/", }, { category: "self", summary: "SUSE CVE CVE-2013-5329 page", url: "https://www.suse.com/security/cve/CVE-2013-5329/", }, { category: "self", summary: "SUSE CVE CVE-2013-5330 page", url: "https://www.suse.com/security/cve/CVE-2013-5330/", }, { category: "self", summary: "SUSE CVE CVE-2013-5331 page", url: "https://www.suse.com/security/cve/CVE-2013-5331/", }, { category: "self", summary: "SUSE CVE CVE-2013-5332 page", url: "https://www.suse.com/security/cve/CVE-2013-5332/", }, { category: "self", summary: "SUSE CVE CVE-2014-0491 page", url: "https://www.suse.com/security/cve/CVE-2014-0491/", }, { category: "self", summary: "SUSE CVE CVE-2014-0492 page", url: "https://www.suse.com/security/cve/CVE-2014-0492/", }, { category: "self", summary: "SUSE CVE CVE-2014-0497 page", url: "https://www.suse.com/security/cve/CVE-2014-0497/", }, { category: "self", summary: "SUSE CVE CVE-2014-0498 page", url: "https://www.suse.com/security/cve/CVE-2014-0498/", }, { category: "self", summary: "SUSE CVE CVE-2014-0499 page", url: "https://www.suse.com/security/cve/CVE-2014-0499/", }, { category: "self", summary: "SUSE CVE CVE-2014-0502 page", url: "https://www.suse.com/security/cve/CVE-2014-0502/", }, { category: "self", summary: "SUSE CVE CVE-2014-0503 page", url: "https://www.suse.com/security/cve/CVE-2014-0503/", }, { category: "self", summary: "SUSE CVE CVE-2014-0504 page", url: "https://www.suse.com/security/cve/CVE-2014-0504/", }, { category: "self", summary: "SUSE CVE CVE-2014-0506 page", url: "https://www.suse.com/security/cve/CVE-2014-0506/", }, { category: "self", summary: "SUSE CVE CVE-2014-0507 page", url: "https://www.suse.com/security/cve/CVE-2014-0507/", }, { category: "self", summary: "SUSE CVE CVE-2014-0508 page", url: "https://www.suse.com/security/cve/CVE-2014-0508/", }, { category: "self", summary: "SUSE CVE CVE-2014-0509 page", url: "https://www.suse.com/security/cve/CVE-2014-0509/", }, { category: "self", summary: "SUSE CVE CVE-2014-0510 page", url: "https://www.suse.com/security/cve/CVE-2014-0510/", }, { category: "self", summary: "SUSE CVE CVE-2014-0515 page", url: "https://www.suse.com/security/cve/CVE-2014-0515/", }, { category: "self", summary: "SUSE CVE CVE-2014-0516 page", url: "https://www.suse.com/security/cve/CVE-2014-0516/", }, { category: "self", summary: "SUSE CVE CVE-2014-0517 page", url: "https://www.suse.com/security/cve/CVE-2014-0517/", }, { category: "self", summary: "SUSE CVE CVE-2014-0518 page", url: "https://www.suse.com/security/cve/CVE-2014-0518/", }, { category: "self", summary: "SUSE CVE CVE-2014-0519 page", url: "https://www.suse.com/security/cve/CVE-2014-0519/", }, { category: "self", summary: "SUSE CVE CVE-2014-0520 page", url: "https://www.suse.com/security/cve/CVE-2014-0520/", }, { category: "self", summary: "SUSE CVE CVE-2014-0531 page", url: "https://www.suse.com/security/cve/CVE-2014-0531/", }, { category: "self", summary: "SUSE CVE CVE-2014-0532 page", url: "https://www.suse.com/security/cve/CVE-2014-0532/", }, { category: "self", summary: "SUSE CVE CVE-2014-0533 page", url: "https://www.suse.com/security/cve/CVE-2014-0533/", }, { category: "self", summary: "SUSE CVE CVE-2014-0534 page", url: "https://www.suse.com/security/cve/CVE-2014-0534/", }, { category: "self", summary: "SUSE CVE CVE-2014-0535 page", url: "https://www.suse.com/security/cve/CVE-2014-0535/", }, { category: "self", summary: "SUSE CVE CVE-2014-0536 page", url: "https://www.suse.com/security/cve/CVE-2014-0536/", }, { category: "self", summary: "SUSE CVE CVE-2014-0537 page", url: "https://www.suse.com/security/cve/CVE-2014-0537/", }, { category: "self", summary: "SUSE CVE CVE-2014-0538 page", url: "https://www.suse.com/security/cve/CVE-2014-0538/", }, { category: "self", summary: "SUSE CVE CVE-2014-0539 page", url: "https://www.suse.com/security/cve/CVE-2014-0539/", }, { category: "self", summary: "SUSE CVE CVE-2014-0540 page", url: "https://www.suse.com/security/cve/CVE-2014-0540/", }, { category: "self", summary: "SUSE CVE CVE-2014-0541 page", url: "https://www.suse.com/security/cve/CVE-2014-0541/", }, { category: "self", summary: "SUSE CVE CVE-2014-0542 page", url: "https://www.suse.com/security/cve/CVE-2014-0542/", }, { category: "self", summary: "SUSE CVE CVE-2014-0543 page", url: "https://www.suse.com/security/cve/CVE-2014-0543/", }, { category: "self", summary: "SUSE CVE CVE-2014-0544 page", url: "https://www.suse.com/security/cve/CVE-2014-0544/", }, { category: "self", summary: "SUSE CVE CVE-2014-0545 page", url: "https://www.suse.com/security/cve/CVE-2014-0545/", }, { category: "self", summary: "SUSE CVE CVE-2014-0547 page", url: "https://www.suse.com/security/cve/CVE-2014-0547/", }, { category: "self", summary: "SUSE CVE CVE-2014-0548 page", url: "https://www.suse.com/security/cve/CVE-2014-0548/", }, { category: "self", summary: "SUSE CVE CVE-2014-0549 page", url: "https://www.suse.com/security/cve/CVE-2014-0549/", }, { category: "self", summary: "SUSE CVE CVE-2014-0550 page", url: "https://www.suse.com/security/cve/CVE-2014-0550/", }, { category: "self", summary: "SUSE CVE CVE-2014-0551 page", url: "https://www.suse.com/security/cve/CVE-2014-0551/", }, { category: "self", summary: "SUSE CVE CVE-2014-0552 page", url: "https://www.suse.com/security/cve/CVE-2014-0552/", }, { category: "self", summary: "SUSE CVE CVE-2014-0553 page", url: "https://www.suse.com/security/cve/CVE-2014-0553/", }, { category: "self", summary: "SUSE CVE CVE-2014-0554 page", url: "https://www.suse.com/security/cve/CVE-2014-0554/", }, { category: "self", summary: "SUSE CVE CVE-2014-0555 page", url: "https://www.suse.com/security/cve/CVE-2014-0555/", }, { category: "self", summary: "SUSE CVE CVE-2014-0556 page", url: "https://www.suse.com/security/cve/CVE-2014-0556/", }, { category: "self", summary: "SUSE CVE CVE-2014-0557 page", url: "https://www.suse.com/security/cve/CVE-2014-0557/", }, { category: "self", summary: "SUSE CVE CVE-2014-0558 page", url: "https://www.suse.com/security/cve/CVE-2014-0558/", }, { category: "self", summary: "SUSE CVE CVE-2014-0559 page", url: "https://www.suse.com/security/cve/CVE-2014-0559/", }, { category: "self", summary: "SUSE CVE CVE-2014-0564 page", url: "https://www.suse.com/security/cve/CVE-2014-0564/", }, { category: "self", summary: "SUSE CVE CVE-2014-0569 page", url: "https://www.suse.com/security/cve/CVE-2014-0569/", }, { category: "self", summary: "SUSE CVE CVE-2014-0573 page", url: "https://www.suse.com/security/cve/CVE-2014-0573/", }, { category: "self", summary: "SUSE CVE CVE-2014-0574 page", url: "https://www.suse.com/security/cve/CVE-2014-0574/", }, { category: "self", summary: "SUSE CVE CVE-2014-0576 page", url: "https://www.suse.com/security/cve/CVE-2014-0576/", }, { category: "self", summary: "SUSE CVE CVE-2014-0577 page", url: "https://www.suse.com/security/cve/CVE-2014-0577/", }, { category: "self", summary: "SUSE CVE CVE-2014-0580 page", url: "https://www.suse.com/security/cve/CVE-2014-0580/", }, { category: "self", summary: "SUSE CVE CVE-2014-0581 page", url: "https://www.suse.com/security/cve/CVE-2014-0581/", }, { category: "self", summary: "SUSE CVE CVE-2014-0582 page", url: "https://www.suse.com/security/cve/CVE-2014-0582/", }, { category: "self", summary: "SUSE CVE CVE-2014-0583 page", url: "https://www.suse.com/security/cve/CVE-2014-0583/", }, { category: "self", summary: "SUSE CVE CVE-2014-0584 page", url: "https://www.suse.com/security/cve/CVE-2014-0584/", }, { category: "self", summary: "SUSE CVE CVE-2014-0585 page", url: "https://www.suse.com/security/cve/CVE-2014-0585/", }, { category: "self", summary: "SUSE CVE CVE-2014-0586 page", url: "https://www.suse.com/security/cve/CVE-2014-0586/", }, { category: "self", summary: "SUSE CVE CVE-2014-0587 page", url: "https://www.suse.com/security/cve/CVE-2014-0587/", }, { category: "self", summary: "SUSE CVE CVE-2014-0588 page", url: "https://www.suse.com/security/cve/CVE-2014-0588/", }, { category: "self", summary: "SUSE CVE CVE-2014-0589 page", url: "https://www.suse.com/security/cve/CVE-2014-0589/", }, { category: "self", summary: "SUSE CVE CVE-2014-0590 page", url: "https://www.suse.com/security/cve/CVE-2014-0590/", }, { category: "self", summary: "SUSE CVE CVE-2014-4671 page", url: "https://www.suse.com/security/cve/CVE-2014-4671/", }, { category: "self", summary: "SUSE CVE CVE-2014-8437 page", url: "https://www.suse.com/security/cve/CVE-2014-8437/", }, { category: "self", summary: "SUSE CVE CVE-2014-8438 page", url: "https://www.suse.com/security/cve/CVE-2014-8438/", }, { category: "self", summary: "SUSE CVE CVE-2014-8439 page", url: "https://www.suse.com/security/cve/CVE-2014-8439/", }, { category: "self", summary: "SUSE CVE CVE-2014-8440 page", url: "https://www.suse.com/security/cve/CVE-2014-8440/", }, { category: "self", summary: "SUSE CVE CVE-2014-8441 page", url: "https://www.suse.com/security/cve/CVE-2014-8441/", }, { category: "self", summary: "SUSE CVE CVE-2014-8442 page", url: "https://www.suse.com/security/cve/CVE-2014-8442/", }, { category: "self", summary: "SUSE CVE CVE-2014-8443 page", url: "https://www.suse.com/security/cve/CVE-2014-8443/", }, { category: "self", summary: "SUSE CVE CVE-2014-9162 page", url: "https://www.suse.com/security/cve/CVE-2014-9162/", }, { category: "self", summary: "SUSE CVE CVE-2014-9163 page", url: "https://www.suse.com/security/cve/CVE-2014-9163/", }, { category: "self", summary: "SUSE CVE CVE-2014-9164 page", url: "https://www.suse.com/security/cve/CVE-2014-9164/", }, { category: "self", summary: "SUSE CVE CVE-2015-0301 page", url: "https://www.suse.com/security/cve/CVE-2015-0301/", }, { category: "self", summary: "SUSE CVE CVE-2015-0302 page", url: "https://www.suse.com/security/cve/CVE-2015-0302/", }, { category: "self", summary: "SUSE CVE CVE-2015-0303 page", url: "https://www.suse.com/security/cve/CVE-2015-0303/", }, { category: "self", summary: "SUSE CVE CVE-2015-0304 page", url: "https://www.suse.com/security/cve/CVE-2015-0304/", }, { category: "self", summary: "SUSE CVE CVE-2015-0305 page", url: "https://www.suse.com/security/cve/CVE-2015-0305/", }, { category: "self", summary: "SUSE CVE CVE-2015-0306 page", url: "https://www.suse.com/security/cve/CVE-2015-0306/", }, { category: "self", summary: "SUSE CVE CVE-2015-0307 page", url: "https://www.suse.com/security/cve/CVE-2015-0307/", }, { category: "self", summary: "SUSE CVE CVE-2015-0308 page", url: "https://www.suse.com/security/cve/CVE-2015-0308/", }, { category: "self", summary: "SUSE CVE CVE-2015-0309 page", url: "https://www.suse.com/security/cve/CVE-2015-0309/", }, { category: "self", summary: "SUSE CVE CVE-2015-0310 page", url: "https://www.suse.com/security/cve/CVE-2015-0310/", }, { category: "self", summary: "SUSE CVE CVE-2015-0311 page", url: "https://www.suse.com/security/cve/CVE-2015-0311/", }, { category: "self", summary: "SUSE CVE CVE-2015-0313 page", url: "https://www.suse.com/security/cve/CVE-2015-0313/", }, { category: "self", summary: "SUSE CVE CVE-2015-0314 page", url: "https://www.suse.com/security/cve/CVE-2015-0314/", }, { category: "self", summary: "SUSE CVE CVE-2015-0315 page", url: "https://www.suse.com/security/cve/CVE-2015-0315/", }, { category: "self", summary: "SUSE CVE CVE-2015-0316 page", url: "https://www.suse.com/security/cve/CVE-2015-0316/", }, { category: "self", summary: "SUSE CVE CVE-2015-0317 page", url: "https://www.suse.com/security/cve/CVE-2015-0317/", }, { category: "self", summary: "SUSE CVE CVE-2015-0318 page", url: "https://www.suse.com/security/cve/CVE-2015-0318/", }, { category: "self", summary: "SUSE CVE CVE-2015-0319 page", url: "https://www.suse.com/security/cve/CVE-2015-0319/", }, { category: "self", summary: "SUSE CVE CVE-2015-0320 page", url: "https://www.suse.com/security/cve/CVE-2015-0320/", }, { category: "self", summary: "SUSE CVE CVE-2015-0321 page", url: "https://www.suse.com/security/cve/CVE-2015-0321/", }, { category: "self", summary: "SUSE CVE CVE-2015-0322 page", url: "https://www.suse.com/security/cve/CVE-2015-0322/", }, { category: "self", summary: "SUSE CVE CVE-2015-0323 page", url: "https://www.suse.com/security/cve/CVE-2015-0323/", }, { category: "self", summary: "SUSE CVE CVE-2015-0324 page", url: "https://www.suse.com/security/cve/CVE-2015-0324/", }, { category: "self", summary: "SUSE CVE CVE-2015-0325 page", url: "https://www.suse.com/security/cve/CVE-2015-0325/", }, { category: "self", summary: "SUSE CVE CVE-2015-0326 page", url: "https://www.suse.com/security/cve/CVE-2015-0326/", }, { category: "self", summary: "SUSE CVE CVE-2015-0327 page", url: "https://www.suse.com/security/cve/CVE-2015-0327/", }, { category: "self", summary: "SUSE CVE CVE-2015-0328 page", url: "https://www.suse.com/security/cve/CVE-2015-0328/", }, { category: "self", summary: "SUSE CVE CVE-2015-0329 page", url: "https://www.suse.com/security/cve/CVE-2015-0329/", }, { category: "self", summary: "SUSE CVE CVE-2015-0330 page", url: "https://www.suse.com/security/cve/CVE-2015-0330/", }, { category: "self", summary: "SUSE CVE CVE-2015-0332 page", url: "https://www.suse.com/security/cve/CVE-2015-0332/", }, { category: "self", summary: "SUSE CVE CVE-2015-0333 page", url: "https://www.suse.com/security/cve/CVE-2015-0333/", }, { category: "self", summary: "SUSE CVE CVE-2015-0334 page", url: "https://www.suse.com/security/cve/CVE-2015-0334/", }, { category: "self", summary: "SUSE CVE CVE-2015-0335 page", url: "https://www.suse.com/security/cve/CVE-2015-0335/", }, { category: "self", summary: "SUSE CVE CVE-2015-0336 page", url: "https://www.suse.com/security/cve/CVE-2015-0336/", }, { category: "self", summary: "SUSE CVE CVE-2015-0337 page", url: "https://www.suse.com/security/cve/CVE-2015-0337/", }, { category: "self", summary: "SUSE CVE CVE-2015-0338 page", url: "https://www.suse.com/security/cve/CVE-2015-0338/", }, { category: "self", summary: "SUSE CVE CVE-2015-0339 page", url: "https://www.suse.com/security/cve/CVE-2015-0339/", }, { category: "self", summary: "SUSE CVE CVE-2015-0340 page", url: "https://www.suse.com/security/cve/CVE-2015-0340/", }, { category: "self", summary: "SUSE CVE CVE-2015-0341 page", url: "https://www.suse.com/security/cve/CVE-2015-0341/", }, { category: "self", summary: "SUSE CVE CVE-2015-0342 page", url: "https://www.suse.com/security/cve/CVE-2015-0342/", }, { category: "self", summary: "SUSE CVE CVE-2015-0346 page", url: "https://www.suse.com/security/cve/CVE-2015-0346/", }, { category: "self", summary: "SUSE CVE CVE-2015-0347 page", url: "https://www.suse.com/security/cve/CVE-2015-0347/", }, { category: "self", summary: "SUSE CVE CVE-2015-0348 page", url: "https://www.suse.com/security/cve/CVE-2015-0348/", }, { category: "self", summary: "SUSE CVE CVE-2015-0349 page", url: "https://www.suse.com/security/cve/CVE-2015-0349/", }, { category: "self", summary: "SUSE CVE CVE-2015-0350 page", url: "https://www.suse.com/security/cve/CVE-2015-0350/", }, { category: "self", summary: "SUSE CVE CVE-2015-0351 page", url: "https://www.suse.com/security/cve/CVE-2015-0351/", }, { category: "self", summary: "SUSE CVE CVE-2015-0352 page", url: "https://www.suse.com/security/cve/CVE-2015-0352/", }, { category: "self", summary: "SUSE CVE CVE-2015-0353 page", url: "https://www.suse.com/security/cve/CVE-2015-0353/", }, { category: "self", summary: "SUSE CVE CVE-2015-0354 page", url: "https://www.suse.com/security/cve/CVE-2015-0354/", }, { category: "self", summary: "SUSE CVE CVE-2015-0355 page", url: "https://www.suse.com/security/cve/CVE-2015-0355/", }, { category: "self", summary: "SUSE CVE CVE-2015-0356 page", url: "https://www.suse.com/security/cve/CVE-2015-0356/", }, { category: "self", summary: "SUSE CVE CVE-2015-0357 page", url: "https://www.suse.com/security/cve/CVE-2015-0357/", }, { category: "self", summary: "SUSE CVE CVE-2015-0358 page", url: "https://www.suse.com/security/cve/CVE-2015-0358/", }, { category: "self", summary: "SUSE CVE CVE-2015-0359 page", url: "https://www.suse.com/security/cve/CVE-2015-0359/", }, { category: "self", summary: "SUSE CVE CVE-2015-0360 page", url: "https://www.suse.com/security/cve/CVE-2015-0360/", }, { category: "self", summary: "SUSE CVE CVE-2015-3038 page", url: "https://www.suse.com/security/cve/CVE-2015-3038/", }, { category: "self", summary: "SUSE CVE CVE-2015-3039 page", url: "https://www.suse.com/security/cve/CVE-2015-3039/", }, { category: "self", summary: "SUSE CVE CVE-2015-3040 page", url: "https://www.suse.com/security/cve/CVE-2015-3040/", }, { category: "self", summary: "SUSE CVE CVE-2015-3041 page", url: "https://www.suse.com/security/cve/CVE-2015-3041/", }, { category: "self", summary: "SUSE CVE CVE-2015-3042 page", url: "https://www.suse.com/security/cve/CVE-2015-3042/", }, { category: "self", summary: "SUSE CVE CVE-2015-3043 page", url: "https://www.suse.com/security/cve/CVE-2015-3043/", }, { category: "self", summary: "SUSE CVE CVE-2015-3044 page", url: "https://www.suse.com/security/cve/CVE-2015-3044/", }, { category: "self", summary: "SUSE CVE CVE-2015-3077 page", url: "https://www.suse.com/security/cve/CVE-2015-3077/", }, { category: "self", summary: "SUSE CVE CVE-2015-3078 page", url: "https://www.suse.com/security/cve/CVE-2015-3078/", }, { category: "self", summary: "SUSE CVE CVE-2015-3079 page", url: "https://www.suse.com/security/cve/CVE-2015-3079/", }, { category: "self", summary: "SUSE CVE CVE-2015-3080 page", url: "https://www.suse.com/security/cve/CVE-2015-3080/", }, { category: "self", summary: "SUSE CVE CVE-2015-3081 page", url: "https://www.suse.com/security/cve/CVE-2015-3081/", }, { category: "self", summary: "SUSE CVE CVE-2015-3082 page", url: "https://www.suse.com/security/cve/CVE-2015-3082/", }, { category: "self", summary: "SUSE CVE CVE-2015-3083 page", url: "https://www.suse.com/security/cve/CVE-2015-3083/", }, { category: "self", summary: "SUSE CVE CVE-2015-3084 page", url: "https://www.suse.com/security/cve/CVE-2015-3084/", }, { category: "self", summary: "SUSE CVE CVE-2015-3085 page", url: "https://www.suse.com/security/cve/CVE-2015-3085/", }, { category: "self", summary: "SUSE CVE CVE-2015-3086 page", url: "https://www.suse.com/security/cve/CVE-2015-3086/", }, { category: "self", summary: "SUSE CVE CVE-2015-3087 page", url: "https://www.suse.com/security/cve/CVE-2015-3087/", }, { category: "self", summary: "SUSE CVE CVE-2015-3088 page", url: "https://www.suse.com/security/cve/CVE-2015-3088/", }, { category: "self", summary: "SUSE CVE CVE-2015-3089 page", url: "https://www.suse.com/security/cve/CVE-2015-3089/", }, { category: "self", summary: "SUSE CVE CVE-2015-3090 page", url: "https://www.suse.com/security/cve/CVE-2015-3090/", }, { category: "self", summary: "SUSE CVE CVE-2015-3091 page", url: "https://www.suse.com/security/cve/CVE-2015-3091/", }, { category: "self", summary: "SUSE CVE CVE-2015-3092 page", url: "https://www.suse.com/security/cve/CVE-2015-3092/", }, { category: "self", summary: "SUSE CVE CVE-2015-3093 page", url: "https://www.suse.com/security/cve/CVE-2015-3093/", }, { category: "self", summary: "SUSE CVE CVE-2015-3096 page", url: "https://www.suse.com/security/cve/CVE-2015-3096/", }, { category: "self", summary: "SUSE CVE CVE-2015-3098 page", url: "https://www.suse.com/security/cve/CVE-2015-3098/", }, { category: "self", summary: "SUSE CVE CVE-2015-3099 page", url: "https://www.suse.com/security/cve/CVE-2015-3099/", }, { category: "self", summary: "SUSE CVE CVE-2015-3100 page", url: "https://www.suse.com/security/cve/CVE-2015-3100/", }, { category: "self", summary: "SUSE CVE CVE-2015-3102 page", url: "https://www.suse.com/security/cve/CVE-2015-3102/", }, { category: "self", summary: "SUSE CVE CVE-2015-3103 page", url: "https://www.suse.com/security/cve/CVE-2015-3103/", }, { category: "self", summary: "SUSE CVE CVE-2015-3106 page", url: "https://www.suse.com/security/cve/CVE-2015-3106/", }, { category: "self", summary: "SUSE CVE CVE-2015-3107 page", url: "https://www.suse.com/security/cve/CVE-2015-3107/", }, { category: "self", summary: "SUSE CVE CVE-2015-3108 page", url: "https://www.suse.com/security/cve/CVE-2015-3108/", }, { category: "self", summary: "SUSE CVE CVE-2015-3113 page", url: "https://www.suse.com/security/cve/CVE-2015-3113/", }, ], title: "Security update for flash-player", tracking: { current_release_date: "2014-11-14T12:52:02Z", generator: { date: "2014-11-14T12:52:02Z", engine: { name: "cve-database.git:bin/generate-csaf.pl", version: "1", }, }, id: "SUSE-SU-2015:0723-1", initial_release_date: "2014-11-14T12:52:02Z", revision_history: [ { date: "2014-11-14T12:52:02Z", number: "1", summary: "Current version", }, ], status: "final", version: "1", }, }, product_tree: { branches: [ { branches: [ { branches: [ { category: "product_version", name: "flash-player-11.2.202.418-0.3.1.i586", product: { name: "flash-player-11.2.202.418-0.3.1.i586", product_id: "flash-player-11.2.202.418-0.3.1.i586", }, }, { category: "product_version", name: "flash-player-gnome-11.2.202.418-0.3.1.i586", product: { name: "flash-player-gnome-11.2.202.418-0.3.1.i586", product_id: "flash-player-gnome-11.2.202.418-0.3.1.i586", }, }, { category: "product_version", name: "flash-player-kde4-11.2.202.418-0.3.1.i586", product: { name: "flash-player-kde4-11.2.202.418-0.3.1.i586", product_id: "flash-player-kde4-11.2.202.418-0.3.1.i586", }, }, ], category: "architecture", name: "i586", }, { branches: [ { category: "product_version", name: "flash-player-11.2.202.418-0.3.1.x86_64", product: { name: "flash-player-11.2.202.418-0.3.1.x86_64", product_id: "flash-player-11.2.202.418-0.3.1.x86_64", }, }, { category: "product_version", name: "flash-player-gnome-11.2.202.418-0.3.1.x86_64", product: { name: "flash-player-gnome-11.2.202.418-0.3.1.x86_64", product_id: "flash-player-gnome-11.2.202.418-0.3.1.x86_64", }, }, { category: "product_version", name: "flash-player-kde4-11.2.202.418-0.3.1.x86_64", product: { name: "flash-player-kde4-11.2.202.418-0.3.1.x86_64", product_id: "flash-player-kde4-11.2.202.418-0.3.1.x86_64", }, }, ], category: "architecture", name: "x86_64", }, { branches: [ { category: "product_name", name: "SUSE Linux Enterprise Desktop 11 SP3", product: { name: "SUSE Linux Enterprise Desktop 11 SP3", product_id: "SUSE Linux Enterprise Desktop 11 SP3", product_identification_helper: { cpe: "cpe:/o:suse:suse_sled:11:sp3", }, }, }, ], category: "product_family", name: "SUSE Linux Enterprise", }, ], category: "vendor", name: "SUSE", }, ], relationships: [ { category: "default_component_of", full_product_name: { name: "flash-player-11.2.202.418-0.3.1.i586 as component of SUSE Linux Enterprise Desktop 11 SP3", product_id: "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", }, product_reference: "flash-player-11.2.202.418-0.3.1.i586", relates_to_product_reference: "SUSE Linux Enterprise Desktop 11 SP3", }, { category: "default_component_of", full_product_name: { name: "flash-player-11.2.202.418-0.3.1.x86_64 as component of SUSE Linux Enterprise Desktop 11 SP3", product_id: "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", }, product_reference: "flash-player-11.2.202.418-0.3.1.x86_64", relates_to_product_reference: "SUSE Linux Enterprise Desktop 11 SP3", }, { category: "default_component_of", full_product_name: { name: "flash-player-gnome-11.2.202.418-0.3.1.i586 as component of SUSE Linux Enterprise Desktop 11 SP3", product_id: "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", }, product_reference: "flash-player-gnome-11.2.202.418-0.3.1.i586", relates_to_product_reference: "SUSE Linux Enterprise Desktop 11 SP3", }, { category: "default_component_of", full_product_name: { name: "flash-player-gnome-11.2.202.418-0.3.1.x86_64 as component of SUSE Linux Enterprise Desktop 11 SP3", product_id: "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", }, product_reference: "flash-player-gnome-11.2.202.418-0.3.1.x86_64", relates_to_product_reference: "SUSE Linux Enterprise Desktop 11 SP3", }, { category: "default_component_of", full_product_name: { name: "flash-player-kde4-11.2.202.418-0.3.1.i586 as component of SUSE Linux Enterprise Desktop 11 SP3", product_id: "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", }, product_reference: "flash-player-kde4-11.2.202.418-0.3.1.i586", relates_to_product_reference: "SUSE Linux Enterprise Desktop 11 SP3", }, { category: "default_component_of", full_product_name: { name: "flash-player-kde4-11.2.202.418-0.3.1.x86_64 as component of SUSE Linux Enterprise Desktop 11 SP3", product_id: "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", }, product_reference: "flash-player-kde4-11.2.202.418-0.3.1.x86_64", relates_to_product_reference: "SUSE Linux Enterprise Desktop 11 SP3", }, ], }, vulnerabilities: [ { cve: "CVE-2013-3343", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2013-3343", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 10.3.183.90 and 11.x before 11.7.700.224 on Windows, before 10.3.183.90 and 11.x before 11.7.700.225 on Mac OS X, before 10.3.183.90 and 11.x before 11.2.202.291 on Linux, before 11.1.111.59 on Android 2.x and 3.x, and before 11.1.115.63 on Android 4.x; Adobe AIR before 3.7.0.2090 on Windows and Android and before 3.7.0.2100 on Mac OS X; and Adobe AIR SDK & Compiler before 3.7.0.2090 on Windows and before 3.7.0.2100 on Mac OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2013-3343", url: "https://www.suse.com/security/cve/CVE-2013-3343", }, { category: "external", summary: "SUSE Bug 824512 for CVE-2013-3343", url: "https://bugzilla.suse.com/824512", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2013-3343", }, { cve: "CVE-2013-3344", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2013-3344", }, ], notes: [ { category: "general", text: "Heap-based buffer overflow in Adobe Flash Player before 11.7.700.232 and 11.8.x before 11.8.800.94 on Windows and Mac OS X, before 11.2.202.297 on Linux, before 11.1.111.64 on Android 2.x and 3.x, and before 11.1.115.69 on Android 4.x allows attackers to execute arbitrary code via unspecified vectors.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2013-3344", url: "https://www.suse.com/security/cve/CVE-2013-3344", }, { category: "external", summary: "SUSE Bug 828810 for CVE-2013-3344", url: "https://bugzilla.suse.com/828810", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2013-3344", }, { cve: "CVE-2013-3345", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2013-3345", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 11.7.700.232 and 11.8.x before 11.8.800.94 on Windows and Mac OS X, before 11.2.202.297 on Linux, before 11.1.111.64 on Android 2.x and 3.x, and before 11.1.115.69 on Android 4.x allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2013-3345", url: "https://www.suse.com/security/cve/CVE-2013-3345", }, { category: "external", summary: "SUSE Bug 828810 for CVE-2013-3345", url: "https://bugzilla.suse.com/828810", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "low", }, ], title: "CVE-2013-3345", }, { cve: "CVE-2013-3347", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2013-3347", }, ], notes: [ { category: "general", text: "Integer overflow in Adobe Flash Player before 11.7.700.232 and 11.8.x before 11.8.800.94 on Windows and Mac OS X, before 11.2.202.297 on Linux, before 11.1.111.64 on Android 2.x and 3.x, and before 11.1.115.69 on Android 4.x allows attackers to execute arbitrary code via PCM data that is not properly handled during resampling.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2013-3347", url: "https://www.suse.com/security/cve/CVE-2013-3347", }, { category: "external", summary: "SUSE Bug 828810 for CVE-2013-3347", url: "https://bugzilla.suse.com/828810", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2013-3347", }, { cve: "CVE-2013-3361", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2013-3361", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 11.7.700.242 and 11.8.x before 11.8.800.168 on Windows and Mac OS X, before 11.2.202.310 on Linux, before 11.1.111.73 on Android 2.x and 3.x, and before 11.1.115.81 on Android 4.x; Adobe AIR before 3.8.0.1430; and Adobe AIR SDK & Compiler before 3.8.0.1430 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2013-3362, CVE-2013-3363, and CVE-2013-5324.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2013-3361", url: "https://www.suse.com/security/cve/CVE-2013-3361", }, { category: "external", summary: "SUSE Bug 839897 for CVE-2013-3361", url: "https://bugzilla.suse.com/839897", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2013-3361", }, { cve: "CVE-2013-3362", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2013-3362", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 11.7.700.242 and 11.8.x before 11.8.800.168 on Windows and Mac OS X, before 11.2.202.310 on Linux, before 11.1.111.73 on Android 2.x and 3.x, and before 11.1.115.81 on Android 4.x; Adobe AIR before 3.8.0.1430; and Adobe AIR SDK & Compiler before 3.8.0.1430 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2013-3361, CVE-2013-3363, and CVE-2013-5324.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2013-3362", url: "https://www.suse.com/security/cve/CVE-2013-3362", }, { category: "external", summary: "SUSE Bug 839897 for CVE-2013-3362", url: "https://bugzilla.suse.com/839897", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2013-3362", }, { cve: "CVE-2013-3363", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2013-3363", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 11.7.700.242 and 11.8.x before 11.8.800.168 on Windows and Mac OS X, before 11.2.202.310 on Linux, before 11.1.111.73 on Android 2.x and 3.x, and before 11.1.115.81 on Android 4.x; Adobe AIR before 3.8.0.1430; and Adobe AIR SDK & Compiler before 3.8.0.1430 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2013-3361, CVE-2013-3362, and CVE-2013-5324.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2013-3363", url: "https://www.suse.com/security/cve/CVE-2013-3363", }, { category: "external", summary: "SUSE Bug 839897 for CVE-2013-3363", url: "https://bugzilla.suse.com/839897", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2013-3363", }, { cve: "CVE-2013-5324", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2013-5324", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 11.7.700.242 and 11.8.x before 11.8.800.168 on Windows and Mac OS X, before 11.2.202.310 on Linux, before 11.1.111.73 on Android 2.x and 3.x, and before 11.1.115.81 on Android 4.x; Adobe AIR before 3.8.0.1430; and Adobe AIR SDK & Compiler before 3.8.0.1430 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2013-3361, CVE-2013-3362, and CVE-2013-3363.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2013-5324", url: "https://www.suse.com/security/cve/CVE-2013-5324", }, { category: "external", summary: "SUSE Bug 839897 for CVE-2013-5324", url: "https://bugzilla.suse.com/839897", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2013-5324", }, { cve: "CVE-2013-5329", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2013-5329", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 11.7.700.252 and 11.8.x and 11.9.x before 11.9.900.152 on Windows and Mac OS X and before 11.2.202.327 on Linux, Adobe AIR before 3.9.0.1210, Adobe AIR SDK before 3.9.0.1210, and Adobe AIR SDK & Compiler before 3.9.0.1210 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2013-5330.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2013-5329", url: "https://www.suse.com/security/cve/CVE-2013-5329", }, { category: "external", summary: "SUSE Bug 850220 for CVE-2013-5329", url: "https://bugzilla.suse.com/850220", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "important", }, ], title: "CVE-2013-5329", }, { cve: "CVE-2013-5330", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2013-5330", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 11.7.700.252 and 11.8.x and 11.9.x before 11.9.900.152 on Windows and Mac OS X and before 11.2.202.327 on Linux, Adobe AIR before 3.9.0.1210, Adobe AIR SDK before 3.9.0.1210, and Adobe AIR SDK & Compiler before 3.9.0.1210 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2013-5329.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2013-5330", url: "https://www.suse.com/security/cve/CVE-2013-5330", }, { category: "external", summary: "SUSE Bug 850220 for CVE-2013-5330", url: "https://bugzilla.suse.com/850220", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "important", }, ], title: "CVE-2013-5330", }, { cve: "CVE-2013-5331", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2013-5331", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 11.7.700.257 and 11.8.x and 11.9.x before 11.9.900.170 on Windows and Mac OS X and before 11.2.202.332 on Linux, Adobe AIR before 3.9.0.1380, Adobe AIR SDK before 3.9.0.1380, and Adobe AIR SDK & Compiler before 3.9.0.1380 allow remote attackers to execute arbitrary code via crafted .swf content that leverages an unspecified \"type confusion,\" as exploited in the wild in December 2013.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2013-5331", url: "https://www.suse.com/security/cve/CVE-2013-5331", }, { category: "external", summary: "SUSE Bug 854881 for CVE-2013-5331", url: "https://bugzilla.suse.com/854881", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2013-5331", }, { cve: "CVE-2013-5332", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2013-5332", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 11.7.700.257 and 11.8.x and 11.9.x before 11.9.900.170 on Windows and Mac OS X and before 11.2.202.332 on Linux, Adobe AIR before 3.9.0.1380, Adobe AIR SDK before 3.9.0.1380, and Adobe AIR SDK & Compiler before 3.9.0.1380 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2013-5332", url: "https://www.suse.com/security/cve/CVE-2013-5332", }, { category: "external", summary: "SUSE Bug 854881 for CVE-2013-5332", url: "https://bugzilla.suse.com/854881", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2013-5332", }, { cve: "CVE-2014-0491", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0491", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 11.7.700.260 and 11.8.x and 11.9.x before 12.0.0.38 on Windows and Mac OS X and before 11.2.202.335 on Linux, Adobe AIR before 4.0.0.1390, Adobe AIR SDK before 4.0.0.1390, and Adobe AIR SDK & Compiler before 4.0.0.1390 allow attackers to bypass unspecified protection mechanisms via unknown vectors.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0491", url: "https://www.suse.com/security/cve/CVE-2014-0491", }, { category: "external", summary: "SUSE Bug 858822 for CVE-2014-0491", url: "https://bugzilla.suse.com/858822", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2014-0491", }, { cve: "CVE-2014-0492", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0492", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 11.7.700.260 and 11.8.x and 11.9.x before 12.0.0.38 on Windows and Mac OS X and before 11.2.202.335 on Linux, Adobe AIR before 4.0.0.1390, Adobe AIR SDK before 4.0.0.1390, and Adobe AIR SDK & Compiler before 4.0.0.1390 allow attackers to defeat the ASLR protection mechanism by leveraging an \"address leak.\"", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0492", url: "https://www.suse.com/security/cve/CVE-2014-0492", }, { category: "external", summary: "SUSE Bug 858822 for CVE-2014-0492", url: "https://bugzilla.suse.com/858822", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2014-0492", }, { cve: "CVE-2014-0497", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0497", }, ], notes: [ { category: "general", text: "Integer underflow in Adobe Flash Player before 11.7.700.261 and 11.8.x through 12.0.x before 12.0.0.44 on Windows and Mac OS X, and before 11.2.202.336 on Linux, allows remote attackers to execute arbitrary code via unspecified vectors.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0497", url: "https://www.suse.com/security/cve/CVE-2014-0497", }, { category: "external", summary: "SUSE Bug 862288 for CVE-2014-0497", url: "https://bugzilla.suse.com/862288", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 9.8, baseSeverity: "CRITICAL", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2014-0497", }, { cve: "CVE-2014-0498", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0498", }, ], notes: [ { category: "general", text: "Stack-based buffer overflow in Adobe Flash Player before 11.7.700.269 and 11.8.x through 12.0.x before 12.0.0.70 on Windows and Mac OS X and before 11.2.202.341 on Linux, Adobe AIR before 4.0.0.1628 on Android, Adobe AIR SDK before 4.0.0.1628, and Adobe AIR SDK & Compiler before 4.0.0.1628 allows attackers to execute arbitrary code via unspecified vectors.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0498", url: "https://www.suse.com/security/cve/CVE-2014-0498", }, { category: "external", summary: "SUSE Bug 865021 for CVE-2014-0498", url: "https://bugzilla.suse.com/865021", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2014-0498", }, { cve: "CVE-2014-0499", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0499", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 11.7.700.269 and 11.8.x through 12.0.x before 12.0.0.70 on Windows and Mac OS X and before 11.2.202.341 on Linux, Adobe AIR before 4.0.0.1628 on Android, Adobe AIR SDK before 4.0.0.1628, and Adobe AIR SDK & Compiler before 4.0.0.1628 do not prevent access to address information, which makes it easier for attackers to bypass the ASLR protection mechanism via unspecified vectors.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0499", url: "https://www.suse.com/security/cve/CVE-2014-0499", }, { category: "external", summary: "SUSE Bug 865021 for CVE-2014-0499", url: "https://bugzilla.suse.com/865021", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2014-0499", }, { cve: "CVE-2014-0502", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0502", }, ], notes: [ { category: "general", text: "Double free vulnerability in Adobe Flash Player before 11.7.700.269 and 11.8.x through 12.0.x before 12.0.0.70 on Windows and Mac OS X and before 11.2.202.341 on Linux, Adobe AIR before 4.0.0.1628 on Android, Adobe AIR SDK before 4.0.0.1628, and Adobe AIR SDK & Compiler before 4.0.0.1628 allows remote attackers to execute arbitrary code via unspecified vectors, as exploited in the wild in February 2014.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0502", url: "https://www.suse.com/security/cve/CVE-2014-0502", }, { category: "external", summary: "SUSE Bug 865021 for CVE-2014-0502", url: "https://bugzilla.suse.com/865021", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 8.8, baseSeverity: "HIGH", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2014-0502", }, { cve: "CVE-2014-0503", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0503", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 11.7.700.272 and 11.8.x through 12.0.x before 12.0.0.77 on Windows and OS X, and before 11.2.202.346 on Linux, allows remote attackers to bypass the Same Origin Policy via unspecified vectors.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0503", url: "https://www.suse.com/security/cve/CVE-2014-0503", }, { category: "external", summary: "SUSE Bug 867808 for CVE-2014-0503", url: "https://bugzilla.suse.com/867808", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2014-0503", }, { cve: "CVE-2014-0504", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0504", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 11.7.700.272 and 11.8.x through 12.0.x before 12.0.0.77 on Windows and OS X, and before 11.2.202.346 on Linux, allows attackers to read the clipboard via unspecified vectors.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0504", url: "https://www.suse.com/security/cve/CVE-2014-0504", }, { category: "external", summary: "SUSE Bug 867808 for CVE-2014-0504", url: "https://bugzilla.suse.com/867808", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2014-0504", }, { cve: "CVE-2014-0506", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0506", }, ], notes: [ { category: "general", text: "Use-after-free vulnerability in Adobe Flash Player before 11.7.700.275 and 11.8.x through 13.0.x before 13.0.0.182 on Windows and OS X and before 11.2.202.350 on Linux, Adobe AIR before 13.0.0.83 on Android, Adobe AIR SDK before 13.0.0.83, and Adobe AIR SDK & Compiler before 13.0.0.83 allows remote attackers to execute arbitrary code, and possibly bypass an Internet Explorer sandbox protection mechanism, via unspecified vectors, as demonstrated by VUPEN during a Pwn2Own competition at CanSecWest 2014.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0506", url: "https://www.suse.com/security/cve/CVE-2014-0506", }, { category: "external", summary: "SUSE Bug 872692 for CVE-2014-0506", url: "https://bugzilla.suse.com/872692", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2014-0506", }, { cve: "CVE-2014-0507", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0507", }, ], notes: [ { category: "general", text: "Buffer overflow in Adobe Flash Player before 11.7.700.275 and 11.8.x through 13.0.x before 13.0.0.182 on Windows and OS X and before 11.2.202.350 on Linux, Adobe AIR before 13.0.0.83 on Android, Adobe AIR SDK before 13.0.0.83, and Adobe AIR SDK & Compiler before 13.0.0.83 allows attackers to execute arbitrary code via unspecified vectors.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0507", url: "https://www.suse.com/security/cve/CVE-2014-0507", }, { category: "external", summary: "SUSE Bug 872692 for CVE-2014-0507", url: "https://bugzilla.suse.com/872692", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2014-0507", }, { cve: "CVE-2014-0508", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0508", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 11.7.700.275 and 11.8.x through 13.0.x before 13.0.0.182 on Windows and OS X and before 11.2.202.350 on Linux, Adobe AIR before 13.0.0.83 on Android, Adobe AIR SDK before 13.0.0.83, and Adobe AIR SDK & Compiler before 13.0.0.83 allow attackers to bypass intended access restrictions and obtain sensitive information via unspecified vectors.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0508", url: "https://www.suse.com/security/cve/CVE-2014-0508", }, { category: "external", summary: "SUSE Bug 872692 for CVE-2014-0508", url: "https://bugzilla.suse.com/872692", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "moderate", }, ], title: "CVE-2014-0508", }, { cve: "CVE-2014-0509", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0509", }, ], notes: [ { category: "general", text: "Cross-site scripting (XSS) vulnerability in Adobe Flash Player before 11.7.700.275 and 11.8.x through 13.0.x before 13.0.0.182 on Windows and OS X and before 11.2.202.350 on Linux, Adobe AIR before 13.0.0.83 on Android, Adobe AIR SDK before 13.0.0.83, and Adobe AIR SDK & Compiler before 13.0.0.83 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0509", url: "https://www.suse.com/security/cve/CVE-2014-0509", }, { category: "external", summary: "SUSE Bug 872692 for CVE-2014-0509", url: "https://bugzilla.suse.com/872692", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "moderate", }, ], title: "CVE-2014-0509", }, { cve: "CVE-2014-0510", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0510", }, ], notes: [ { category: "general", text: "Heap-based buffer overflow in Adobe Flash Player 12.0.0.77 allows remote attackers to execute arbitrary code and bypass a sandbox protection mechanism via unspecified vectors, as demonstrated by Zeguang Zhao and Liang Chen during a Pwn2Own competition at CanSecWest 2014.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0510", url: "https://www.suse.com/security/cve/CVE-2014-0510", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2014-0510", }, { cve: "CVE-2014-0515", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0515", }, ], notes: [ { category: "general", text: "Buffer overflow in Adobe Flash Player before 11.7.700.279 and 11.8.x through 13.0.x before 13.0.0.206 on Windows and OS X, and before 11.2.202.356 on Linux, allows remote attackers to execute arbitrary code via unspecified vectors, as exploited in the wild in April 2014.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0515", url: "https://www.suse.com/security/cve/CVE-2014-0515", }, { category: "external", summary: "SUSE Bug 875577 for CVE-2014-0515", url: "https://bugzilla.suse.com/875577", }, { category: "external", summary: "SUSE Bug 886454 for CVE-2014-0515", url: "https://bugzilla.suse.com/886454", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2014-0515", }, { cve: "CVE-2014-0516", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0516", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.214 on Windows and OS X and before 11.2.202.359 on Linux, Adobe AIR SDK before 13.0.0.111, and Adobe AIR SDK & Compiler before 13.0.0.111 allow remote attackers to bypass the Same Origin Policy via unspecified vectors.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0516", url: "https://www.suse.com/security/cve/CVE-2014-0516", }, { category: "external", summary: "SUSE Bug 877649 for CVE-2014-0516", url: "https://bugzilla.suse.com/877649", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "important", }, ], title: "CVE-2014-0516", }, { cve: "CVE-2014-0517", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0517", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.214 on Windows and OS X and before 11.2.202.359 on Linux, Adobe AIR SDK before 13.0.0.111, and Adobe AIR SDK & Compiler before 13.0.0.111 allow attackers to bypass intended access restrictions via unspecified vectors, a different vulnerability than CVE-2014-0518, CVE-2014-0519, and CVE-2014-0520.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0517", url: "https://www.suse.com/security/cve/CVE-2014-0517", }, { category: "external", summary: "SUSE Bug 877649 for CVE-2014-0517", url: "https://bugzilla.suse.com/877649", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "important", }, ], title: "CVE-2014-0517", }, { cve: "CVE-2014-0518", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0518", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.214 on Windows and OS X and before 11.2.202.359 on Linux, Adobe AIR SDK before 13.0.0.111, and Adobe AIR SDK & Compiler before 13.0.0.111 allow attackers to bypass intended access restrictions via unspecified vectors, a different vulnerability than CVE-2014-0517, CVE-2014-0519, and CVE-2014-0520.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0518", url: "https://www.suse.com/security/cve/CVE-2014-0518", }, { category: "external", summary: "SUSE Bug 877649 for CVE-2014-0518", url: "https://bugzilla.suse.com/877649", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "important", }, ], title: "CVE-2014-0518", }, { cve: "CVE-2014-0519", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0519", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.214 on Windows and OS X and before 11.2.202.359 on Linux, Adobe AIR SDK before 13.0.0.111, and Adobe AIR SDK & Compiler before 13.0.0.111 allow attackers to bypass intended access restrictions via unspecified vectors, a different vulnerability than CVE-2014-0517, CVE-2014-0518, and CVE-2014-0520.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0519", url: "https://www.suse.com/security/cve/CVE-2014-0519", }, { category: "external", summary: "SUSE Bug 877649 for CVE-2014-0519", url: "https://bugzilla.suse.com/877649", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "important", }, ], title: "CVE-2014-0519", }, { cve: "CVE-2014-0520", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0520", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.214 on Windows and OS X and before 11.2.202.359 on Linux, Adobe AIR SDK before 13.0.0.111, and Adobe AIR SDK & Compiler before 13.0.0.111 allow attackers to bypass intended access restrictions via unspecified vectors, a different vulnerability than CVE-2014-0517, CVE-2014-0518, and CVE-2014-0519.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0520", url: "https://www.suse.com/security/cve/CVE-2014-0520", }, { category: "external", summary: "SUSE Bug 877649 for CVE-2014-0520", url: "https://bugzilla.suse.com/877649", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "important", }, ], title: "CVE-2014-0520", }, { cve: "CVE-2014-0531", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0531", }, ], notes: [ { category: "general", text: "Cross-site scripting (XSS) vulnerability in Adobe Flash Player before 13.0.0.223 and 14.x before 14.0.0.125 on Windows and OS X and before 11.2.202.378 on Linux, Adobe AIR before 14.0.0.110, Adobe AIR SDK before 14.0.0.110, and Adobe AIR SDK & Compiler before 14.0.0.110 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2014-0532 and CVE-2014-0533.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0531", url: "https://www.suse.com/security/cve/CVE-2014-0531", }, { category: "external", summary: "SUSE Bug 882187 for CVE-2014-0531", url: "https://bugzilla.suse.com/882187", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2014-0531", }, { cve: "CVE-2014-0532", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0532", }, ], notes: [ { category: "general", text: "Cross-site scripting (XSS) vulnerability in Adobe Flash Player before 13.0.0.223 and 14.x before 14.0.0.125 on Windows and OS X and before 11.2.202.378 on Linux, Adobe AIR before 14.0.0.110, Adobe AIR SDK before 14.0.0.110, and Adobe AIR SDK & Compiler before 14.0.0.110 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2014-0531 and CVE-2014-0533.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0532", url: "https://www.suse.com/security/cve/CVE-2014-0532", }, { category: "external", summary: "SUSE Bug 882187 for CVE-2014-0532", url: "https://bugzilla.suse.com/882187", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2014-0532", }, { cve: "CVE-2014-0533", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0533", }, ], notes: [ { category: "general", text: "Cross-site scripting (XSS) vulnerability in Adobe Flash Player before 13.0.0.223 and 14.x before 14.0.0.125 on Windows and OS X and before 11.2.202.378 on Linux, Adobe AIR before 14.0.0.110, Adobe AIR SDK before 14.0.0.110, and Adobe AIR SDK & Compiler before 14.0.0.110 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2014-0531 and CVE-2014-0532.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0533", url: "https://www.suse.com/security/cve/CVE-2014-0533", }, { category: "external", summary: "SUSE Bug 882187 for CVE-2014-0533", url: "https://bugzilla.suse.com/882187", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2014-0533", }, { cve: "CVE-2014-0534", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0534", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.223 and 14.x before 14.0.0.125 on Windows and OS X and before 11.2.202.378 on Linux, Adobe AIR before 14.0.0.110, Adobe AIR SDK before 14.0.0.110, and Adobe AIR SDK & Compiler before 14.0.0.110 allow attackers to bypass intended access restrictions via unspecified vectors, a different vulnerability than CVE-2014-0535.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0534", url: "https://www.suse.com/security/cve/CVE-2014-0534", }, { category: "external", summary: "SUSE Bug 882187 for CVE-2014-0534", url: "https://bugzilla.suse.com/882187", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2014-0534", }, { cve: "CVE-2014-0535", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0535", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.223 and 14.x before 14.0.0.125 on Windows and OS X and before 11.2.202.378 on Linux, Adobe AIR before 14.0.0.110, Adobe AIR SDK before 14.0.0.110, and Adobe AIR SDK & Compiler before 14.0.0.110 allow attackers to bypass intended access restrictions via unspecified vectors, a different vulnerability than CVE-2014-0534.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0535", url: "https://www.suse.com/security/cve/CVE-2014-0535", }, { category: "external", summary: "SUSE Bug 882187 for CVE-2014-0535", url: "https://bugzilla.suse.com/882187", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2014-0535", }, { cve: "CVE-2014-0536", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0536", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.223 and 14.x before 14.0.0.125 on Windows and OS X and before 11.2.202.378 on Linux, Adobe AIR before 14.0.0.110, Adobe AIR SDK before 14.0.0.110, and Adobe AIR SDK & Compiler before 14.0.0.110 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0536", url: "https://www.suse.com/security/cve/CVE-2014-0536", }, { category: "external", summary: "SUSE Bug 882187 for CVE-2014-0536", url: "https://bugzilla.suse.com/882187", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2014-0536", }, { cve: "CVE-2014-0537", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0537", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.231 and 14.x before 14.0.0.145 on Windows and OS X and before 11.2.202.394 on Linux, Adobe AIR before 14.0.0.137 on Android, Adobe AIR SDK before 14.0.0.137, and Adobe AIR SDK & Compiler before 14.0.0.137 allow attackers to bypass intended access restrictions via unspecified vectors, a different vulnerability than CVE-2014-0539.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0537", url: "https://www.suse.com/security/cve/CVE-2014-0537", }, { category: "external", summary: "SUSE Bug 886454 for CVE-2014-0537", url: "https://bugzilla.suse.com/886454", }, { category: "external", summary: "SUSE Bug 886472 for CVE-2014-0537", url: "https://bugzilla.suse.com/886472", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2014-0537", }, { cve: "CVE-2014-0538", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0538", }, ], notes: [ { category: "general", text: "Use-after-free vulnerability in Adobe Flash Player before 13.0.0.241 and 14.x before 14.0.0.176 on Windows and OS X and before 11.2.202.400 on Linux, Adobe AIR before 14.0.0.178 on Windows and OS X and before 14.0.0.179 on Android, Adobe AIR SDK before 14.0.0.178, and Adobe AIR SDK & Compiler before 14.0.0.178 allows attackers to execute arbitrary code via unspecified vectors.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0538", url: "https://www.suse.com/security/cve/CVE-2014-0538", }, { category: "external", summary: "SUSE Bug 891688 for CVE-2014-0538", url: "https://bugzilla.suse.com/891688", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2014-0538", }, { cve: "CVE-2014-0539", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0539", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.231 and 14.x before 14.0.0.145 on Windows and OS X and before 11.2.202.394 on Linux, Adobe AIR before 14.0.0.137 on Android, Adobe AIR SDK before 14.0.0.137, and Adobe AIR SDK & Compiler before 14.0.0.137 allow attackers to bypass intended access restrictions via unspecified vectors, a different vulnerability than CVE-2014-0537.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0539", url: "https://www.suse.com/security/cve/CVE-2014-0539", }, { category: "external", summary: "SUSE Bug 886454 for CVE-2014-0539", url: "https://bugzilla.suse.com/886454", }, { category: "external", summary: "SUSE Bug 886472 for CVE-2014-0539", url: "https://bugzilla.suse.com/886472", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2014-0539", }, { cve: "CVE-2014-0540", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0540", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.241 and 14.x before 14.0.0.176 on Windows and OS X and before 11.2.202.400 on Linux, Adobe AIR before 14.0.0.178 on Windows and OS X and before 14.0.0.179 on Android, Adobe AIR SDK before 14.0.0.178, and Adobe AIR SDK & Compiler before 14.0.0.178 do not properly restrict discovery of memory addresses, which allows attackers to bypass the ASLR protection mechanism via unspecified vectors, a different vulnerability than CVE-2014-0542, CVE-2014-0543, CVE-2014-0544, and CVE-2014-0545.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0540", url: "https://www.suse.com/security/cve/CVE-2014-0540", }, { category: "external", summary: "SUSE Bug 891688 for CVE-2014-0540", url: "https://bugzilla.suse.com/891688", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2014-0540", }, { cve: "CVE-2014-0541", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0541", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.241 and 14.x before 14.0.0.176 on Windows and OS X and before 11.2.202.400 on Linux, Adobe AIR before 14.0.0.178 on Windows and OS X and before 14.0.0.179 on Android, Adobe AIR SDK before 14.0.0.178, and Adobe AIR SDK & Compiler before 14.0.0.178 allow attackers to bypass intended access restrictions via unspecified vectors.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0541", url: "https://www.suse.com/security/cve/CVE-2014-0541", }, { category: "external", summary: "SUSE Bug 891688 for CVE-2014-0541", url: "https://bugzilla.suse.com/891688", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2014-0541", }, { cve: "CVE-2014-0542", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0542", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.241 and 14.x before 14.0.0.176 on Windows and OS X and before 11.2.202.400 on Linux, Adobe AIR before 14.0.0.178 on Windows and OS X and before 14.0.0.179 on Android, Adobe AIR SDK before 14.0.0.178, and Adobe AIR SDK & Compiler before 14.0.0.178 do not properly restrict discovery of memory addresses, which allows attackers to bypass the ASLR protection mechanism via unspecified vectors, a different vulnerability than CVE-2014-0540, CVE-2014-0543, CVE-2014-0544, and CVE-2014-0545.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0542", url: "https://www.suse.com/security/cve/CVE-2014-0542", }, { category: "external", summary: "SUSE Bug 891688 for CVE-2014-0542", url: "https://bugzilla.suse.com/891688", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2014-0542", }, { cve: "CVE-2014-0543", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0543", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.241 and 14.x before 14.0.0.176 on Windows and OS X and before 11.2.202.400 on Linux, Adobe AIR before 14.0.0.178 on Windows and OS X and before 14.0.0.179 on Android, Adobe AIR SDK before 14.0.0.178, and Adobe AIR SDK & Compiler before 14.0.0.178 do not properly restrict discovery of memory addresses, which allows attackers to bypass the ASLR protection mechanism via unspecified vectors, a different vulnerability than CVE-2014-0540, CVE-2014-0542, CVE-2014-0544, and CVE-2014-0545.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0543", url: "https://www.suse.com/security/cve/CVE-2014-0543", }, { category: "external", summary: "SUSE Bug 891688 for CVE-2014-0543", url: "https://bugzilla.suse.com/891688", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2014-0543", }, { cve: "CVE-2014-0544", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0544", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.241 and 14.x before 14.0.0.176 on Windows and OS X and before 11.2.202.400 on Linux, Adobe AIR before 14.0.0.178 on Windows and OS X and before 14.0.0.179 on Android, Adobe AIR SDK before 14.0.0.178, and Adobe AIR SDK & Compiler before 14.0.0.178 do not properly restrict discovery of memory addresses, which allows attackers to bypass the ASLR protection mechanism via unspecified vectors, a different vulnerability than CVE-2014-0540, CVE-2014-0542, CVE-2014-0543, and CVE-2014-0545.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0544", url: "https://www.suse.com/security/cve/CVE-2014-0544", }, { category: "external", summary: "SUSE Bug 891688 for CVE-2014-0544", url: "https://bugzilla.suse.com/891688", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2014-0544", }, { cve: "CVE-2014-0545", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0545", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.241 and 14.x before 14.0.0.176 on Windows and OS X and before 11.2.202.400 on Linux, Adobe AIR before 14.0.0.178 on Windows and OS X and before 14.0.0.179 on Android, Adobe AIR SDK before 14.0.0.178, and Adobe AIR SDK & Compiler before 14.0.0.178 do not properly restrict discovery of memory addresses, which allows attackers to bypass the ASLR protection mechanism via unspecified vectors, a different vulnerability than CVE-2014-0540, CVE-2014-0542, CVE-2014-0543, and CVE-2014-0544.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0545", url: "https://www.suse.com/security/cve/CVE-2014-0545", }, { category: "external", summary: "SUSE Bug 891688 for CVE-2014-0545", url: "https://bugzilla.suse.com/891688", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2014-0545", }, { cve: "CVE-2014-0547", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0547", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.244 and 14.x and 15.x before 15.0.0.152 on Windows and OS X and before 11.2.202.406 on Linux, Adobe AIR before 15.0.0.249 on Windows and OS X and before 15.0.0.252 on Android, Adobe AIR SDK before 15.0.0.249, and Adobe AIR SDK & Compiler before 15.0.0.249 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2014-0549, CVE-2014-0550, CVE-2014-0551, CVE-2014-0552, and CVE-2014-0555.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0547", url: "https://www.suse.com/security/cve/CVE-2014-0547", }, { category: "external", summary: "SUSE Bug 895856 for CVE-2014-0547", url: "https://bugzilla.suse.com/895856", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2014-0547", }, { cve: "CVE-2014-0548", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0548", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.244 and 14.x and 15.x before 15.0.0.152 on Windows and OS X and before 11.2.202.406 on Linux, Adobe AIR before 15.0.0.249 on Windows and OS X and before 15.0.0.252 on Android, Adobe AIR SDK before 15.0.0.249, and Adobe AIR SDK & Compiler before 15.0.0.249 allow remote attackers to bypass the Same Origin Policy via unspecified vectors.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0548", url: "https://www.suse.com/security/cve/CVE-2014-0548", }, { category: "external", summary: "SUSE Bug 895856 for CVE-2014-0548", url: "https://bugzilla.suse.com/895856", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2014-0548", }, { cve: "CVE-2014-0549", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0549", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.244 and 14.x and 15.x before 15.0.0.152 on Windows and OS X and before 11.2.202.406 on Linux, Adobe AIR before 15.0.0.249 on Windows and OS X and before 15.0.0.252 on Android, Adobe AIR SDK before 15.0.0.249, and Adobe AIR SDK & Compiler before 15.0.0.249 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2014-0547, CVE-2014-0550, CVE-2014-0551, CVE-2014-0552, and CVE-2014-0555.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0549", url: "https://www.suse.com/security/cve/CVE-2014-0549", }, { category: "external", summary: "SUSE Bug 895856 for CVE-2014-0549", url: "https://bugzilla.suse.com/895856", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2014-0549", }, { cve: "CVE-2014-0550", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0550", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.244 and 14.x and 15.x before 15.0.0.152 on Windows and OS X and before 11.2.202.406 on Linux, Adobe AIR before 15.0.0.249 on Windows and OS X and before 15.0.0.252 on Android, Adobe AIR SDK before 15.0.0.249, and Adobe AIR SDK & Compiler before 15.0.0.249 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2014-0547, CVE-2014-0549, CVE-2014-0551, CVE-2014-0552, and CVE-2014-0555.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0550", url: "https://www.suse.com/security/cve/CVE-2014-0550", }, { category: "external", summary: "SUSE Bug 895856 for CVE-2014-0550", url: "https://bugzilla.suse.com/895856", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2014-0550", }, { cve: "CVE-2014-0551", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0551", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.244 and 14.x and 15.x before 15.0.0.152 on Windows and OS X and before 11.2.202.406 on Linux, Adobe AIR before 15.0.0.249 on Windows and OS X and before 15.0.0.252 on Android, Adobe AIR SDK before 15.0.0.249, and Adobe AIR SDK & Compiler before 15.0.0.249 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2014-0547, CVE-2014-0549, CVE-2014-0550, CVE-2014-0552, and CVE-2014-0555.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0551", url: "https://www.suse.com/security/cve/CVE-2014-0551", }, { category: "external", summary: "SUSE Bug 895856 for CVE-2014-0551", url: "https://bugzilla.suse.com/895856", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2014-0551", }, { cve: "CVE-2014-0552", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0552", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.244 and 14.x and 15.x before 15.0.0.152 on Windows and OS X and before 11.2.202.406 on Linux, Adobe AIR before 15.0.0.249 on Windows and OS X and before 15.0.0.252 on Android, Adobe AIR SDK before 15.0.0.249, and Adobe AIR SDK & Compiler before 15.0.0.249 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2014-0547, CVE-2014-0549, CVE-2014-0550, CVE-2014-0551, and CVE-2014-0555.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0552", url: "https://www.suse.com/security/cve/CVE-2014-0552", }, { category: "external", summary: "SUSE Bug 895856 for CVE-2014-0552", url: "https://bugzilla.suse.com/895856", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2014-0552", }, { cve: "CVE-2014-0553", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0553", }, ], notes: [ { category: "general", text: "Use-after-free vulnerability in Adobe Flash Player before 13.0.0.244 and 14.x and 15.x before 15.0.0.152 on Windows and OS X and before 11.2.202.406 on Linux, Adobe AIR before 15.0.0.249 on Windows and OS X and before 15.0.0.252 on Android, Adobe AIR SDK before 15.0.0.249, and Adobe AIR SDK & Compiler before 15.0.0.249 allows attackers to execute arbitrary code via unspecified vectors.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0553", url: "https://www.suse.com/security/cve/CVE-2014-0553", }, { category: "external", summary: "SUSE Bug 895856 for CVE-2014-0553", url: "https://bugzilla.suse.com/895856", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2014-0553", }, { cve: "CVE-2014-0554", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0554", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.244 and 14.x and 15.x before 15.0.0.152 on Windows and OS X and before 11.2.202.406 on Linux, Adobe AIR before 15.0.0.249 on Windows and OS X and before 15.0.0.252 on Android, Adobe AIR SDK before 15.0.0.249, and Adobe AIR SDK & Compiler before 15.0.0.249 allow attackers to bypass intended access restrictions via unspecified vectors.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0554", url: "https://www.suse.com/security/cve/CVE-2014-0554", }, { category: "external", summary: "SUSE Bug 895856 for CVE-2014-0554", url: "https://bugzilla.suse.com/895856", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2014-0554", }, { cve: "CVE-2014-0555", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0555", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.244 and 14.x and 15.x before 15.0.0.152 on Windows and OS X and before 11.2.202.406 on Linux, Adobe AIR before 15.0.0.249 on Windows and OS X and before 15.0.0.252 on Android, Adobe AIR SDK before 15.0.0.249, and Adobe AIR SDK & Compiler before 15.0.0.249 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2014-0547, CVE-2014-0549, CVE-2014-0550, CVE-2014-0551, and CVE-2014-0552.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0555", url: "https://www.suse.com/security/cve/CVE-2014-0555", }, { category: "external", summary: "SUSE Bug 895856 for CVE-2014-0555", url: "https://bugzilla.suse.com/895856", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2014-0555", }, { cve: "CVE-2014-0556", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0556", }, ], notes: [ { category: "general", text: "Heap-based buffer overflow in Adobe Flash Player before 13.0.0.244 and 14.x and 15.x before 15.0.0.152 on Windows and OS X and before 11.2.202.406 on Linux, Adobe AIR before 15.0.0.249 on Windows and OS X and before 15.0.0.252 on Android, Adobe AIR SDK before 15.0.0.249, and Adobe AIR SDK & Compiler before 15.0.0.249 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2014-0559.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0556", url: "https://www.suse.com/security/cve/CVE-2014-0556", }, { category: "external", summary: "SUSE Bug 895856 for CVE-2014-0556", url: "https://bugzilla.suse.com/895856", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2014-0556", }, { cve: "CVE-2014-0557", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0557", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.244 and 14.x and 15.x before 15.0.0.152 on Windows and OS X and before 11.2.202.406 on Linux, Adobe AIR before 15.0.0.249 on Windows and OS X and before 15.0.0.252 on Android, Adobe AIR SDK before 15.0.0.249, and Adobe AIR SDK & Compiler before 15.0.0.249 do not properly restrict discovery of memory addresses, which allows attackers to bypass the ASLR protection mechanism via unspecified vectors.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0557", url: "https://www.suse.com/security/cve/CVE-2014-0557", }, { category: "external", summary: "SUSE Bug 895856 for CVE-2014-0557", url: "https://bugzilla.suse.com/895856", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2014-0557", }, { cve: "CVE-2014-0558", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0558", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.250 and 14.x and 15.x before 15.0.0.189 on Windows and OS X and before 11.2.202.411 on Linux, Adobe AIR before 15.0.0.293, Adobe AIR SDK before 15.0.0.302, and Adobe AIR SDK & Compiler before 15.0.0.302 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2014-0564.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0558", url: "https://www.suse.com/security/cve/CVE-2014-0558", }, { category: "external", summary: "SUSE Bug 901334 for CVE-2014-0558", url: "https://bugzilla.suse.com/901334", }, { category: "external", summary: "SUSE Bug 905032 for CVE-2014-0558", url: "https://bugzilla.suse.com/905032", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "moderate", }, ], title: "CVE-2014-0558", }, { cve: "CVE-2014-0559", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0559", }, ], notes: [ { category: "general", text: "Heap-based buffer overflow in Adobe Flash Player before 13.0.0.244 and 14.x and 15.x before 15.0.0.152 on Windows and OS X and before 11.2.202.406 on Linux, Adobe AIR before 15.0.0.249 on Windows and OS X and before 15.0.0.252 on Android, Adobe AIR SDK before 15.0.0.249, and Adobe AIR SDK & Compiler before 15.0.0.249 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2014-0556.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0559", url: "https://www.suse.com/security/cve/CVE-2014-0559", }, { category: "external", summary: "SUSE Bug 895856 for CVE-2014-0559", url: "https://bugzilla.suse.com/895856", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2014-0559", }, { cve: "CVE-2014-0564", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0564", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.250 and 14.x and 15.x before 15.0.0.189 on Windows and OS X and before 11.2.202.411 on Linux, Adobe AIR before 15.0.0.293, Adobe AIR SDK before 15.0.0.302, and Adobe AIR SDK & Compiler before 15.0.0.302 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2014-0558.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0564", url: "https://www.suse.com/security/cve/CVE-2014-0564", }, { category: "external", summary: "SUSE Bug 901334 for CVE-2014-0564", url: "https://bugzilla.suse.com/901334", }, { category: "external", summary: "SUSE Bug 905032 for CVE-2014-0564", url: "https://bugzilla.suse.com/905032", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "moderate", }, ], title: "CVE-2014-0564", }, { cve: "CVE-2014-0569", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0569", }, ], notes: [ { category: "general", text: "Integer overflow in Adobe Flash Player before 13.0.0.250 and 14.x and 15.x before 15.0.0.189 on Windows and OS X and before 11.2.202.411 on Linux, Adobe AIR before 15.0.0.293, Adobe AIR SDK before 15.0.0.302, and Adobe AIR SDK & Compiler before 15.0.0.302 allows attackers to execute arbitrary code via unspecified vectors.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0569", url: "https://www.suse.com/security/cve/CVE-2014-0569", }, { category: "external", summary: "SUSE Bug 901334 for CVE-2014-0569", url: "https://bugzilla.suse.com/901334", }, { category: "external", summary: "SUSE Bug 905032 for CVE-2014-0569", url: "https://bugzilla.suse.com/905032", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "moderate", }, ], title: "CVE-2014-0569", }, { cve: "CVE-2014-0573", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0573", }, ], notes: [ { category: "general", text: "Use-after-free vulnerability in Adobe Flash Player before 13.0.0.252 and 14.x and 15.x before 15.0.0.223 on Windows and OS X and before 11.2.202.418 on Linux, Adobe AIR before 15.0.0.356, Adobe AIR SDK before 15.0.0.356, and Adobe AIR SDK & Compiler before 15.0.0.356 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2014-0588 and CVE-2014-8438.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0573", url: "https://www.suse.com/security/cve/CVE-2014-0573", }, { category: "external", summary: "SUSE Bug 905032 for CVE-2014-0573", url: "https://bugzilla.suse.com/905032", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2014-0573", }, { cve: "CVE-2014-0574", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0574", }, ], notes: [ { category: "general", text: "Double free vulnerability in Adobe Flash Player before 13.0.0.252 and 14.x and 15.x before 15.0.0.223 on Windows and OS X and before 11.2.202.418 on Linux, Adobe AIR before 15.0.0.356, Adobe AIR SDK before 15.0.0.356, and Adobe AIR SDK & Compiler before 15.0.0.356 allows attackers to execute arbitrary code via unspecified vectors.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0574", url: "https://www.suse.com/security/cve/CVE-2014-0574", }, { category: "external", summary: "SUSE Bug 905032 for CVE-2014-0574", url: "https://bugzilla.suse.com/905032", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2014-0574", }, { cve: "CVE-2014-0576", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0576", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.252 and 14.x and 15.x before 15.0.0.223 on Windows and OS X and before 11.2.202.418 on Linux, Adobe AIR before 15.0.0.356, Adobe AIR SDK before 15.0.0.356, and Adobe AIR SDK & Compiler before 15.0.0.356 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2014-0581, CVE-2014-8440, and CVE-2014-8441.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0576", url: "https://www.suse.com/security/cve/CVE-2014-0576", }, { category: "external", summary: "SUSE Bug 905032 for CVE-2014-0576", url: "https://bugzilla.suse.com/905032", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2014-0576", }, { cve: "CVE-2014-0577", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0577", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.252 and 14.x and 15.x before 15.0.0.223 on Windows and OS X and before 11.2.202.418 on Linux, Adobe AIR before 15.0.0.356, Adobe AIR SDK before 15.0.0.356, and Adobe AIR SDK & Compiler before 15.0.0.356 allow attackers to execute arbitrary code by leveraging an unspecified \"type confusion,\" a different vulnerability than CVE-2014-0584, CVE-2014-0585, CVE-2014-0586, and CVE-2014-0590.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0577", url: "https://www.suse.com/security/cve/CVE-2014-0577", }, { category: "external", summary: "SUSE Bug 905032 for CVE-2014-0577", url: "https://bugzilla.suse.com/905032", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2014-0577", }, { cve: "CVE-2014-0580", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0580", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.259 and 14.x through 16.x before 16.0.0.235 on Windows and OS X and before 11.2.202.425 on Linux allows remote attackers to bypass the Same Origin Policy via unspecified vectors.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0580", url: "https://www.suse.com/security/cve/CVE-2014-0580", }, { category: "external", summary: "SUSE Bug 909219 for CVE-2014-0580", url: "https://bugzilla.suse.com/909219", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2014-0580", }, { cve: "CVE-2014-0581", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0581", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.252 and 14.x and 15.x before 15.0.0.223 on Windows and OS X and before 11.2.202.418 on Linux, Adobe AIR before 15.0.0.356, Adobe AIR SDK before 15.0.0.356, and Adobe AIR SDK & Compiler before 15.0.0.356 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2014-0576, CVE-2014-8440, and CVE-2014-8441.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0581", url: "https://www.suse.com/security/cve/CVE-2014-0581", }, { category: "external", summary: "SUSE Bug 905032 for CVE-2014-0581", url: "https://bugzilla.suse.com/905032", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "important", }, ], title: "CVE-2014-0581", }, { cve: "CVE-2014-0582", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0582", }, ], notes: [ { category: "general", text: "Heap-based buffer overflow in Adobe Flash Player before 13.0.0.252 and 14.x and 15.x before 15.0.0.223 on Windows and OS X and before 11.2.202.418 on Linux, Adobe AIR before 15.0.0.356, Adobe AIR SDK before 15.0.0.356, and Adobe AIR SDK & Compiler before 15.0.0.356 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2014-0589.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0582", url: "https://www.suse.com/security/cve/CVE-2014-0582", }, { category: "external", summary: "SUSE Bug 905032 for CVE-2014-0582", url: "https://bugzilla.suse.com/905032", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "important", }, ], title: "CVE-2014-0582", }, { cve: "CVE-2014-0583", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0583", }, ], notes: [ { category: "general", text: "Heap-based buffer overflow in Adobe Flash Player before 13.0.0.252 and 14.x and 15.x before 15.0.0.223 on Windows and OS X and before 11.2.202.418 on Linux, Adobe AIR before 15.0.0.356, Adobe AIR SDK before 15.0.0.356, and Adobe AIR SDK & Compiler before 15.0.0.356 allows attackers to complete a transition from Low Integrity to Medium Integrity via unspecified vectors.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0583", url: "https://www.suse.com/security/cve/CVE-2014-0583", }, { category: "external", summary: "SUSE Bug 905032 for CVE-2014-0583", url: "https://bugzilla.suse.com/905032", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2014-0583", }, { cve: "CVE-2014-0584", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0584", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.252 and 14.x and 15.x before 15.0.0.223 on Windows and OS X and before 11.2.202.418 on Linux, Adobe AIR before 15.0.0.356, Adobe AIR SDK before 15.0.0.356, and Adobe AIR SDK & Compiler before 15.0.0.356 allow attackers to execute arbitrary code by leveraging an unspecified \"type confusion,\" a different vulnerability than CVE-2014-0577, CVE-2014-0585, CVE-2014-0586, and CVE-2014-0590.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0584", url: "https://www.suse.com/security/cve/CVE-2014-0584", }, { category: "external", summary: "SUSE Bug 905032 for CVE-2014-0584", url: "https://bugzilla.suse.com/905032", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "important", }, ], title: "CVE-2014-0584", }, { cve: "CVE-2014-0585", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0585", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.252 and 14.x and 15.x before 15.0.0.223 on Windows and OS X and before 11.2.202.418 on Linux, Adobe AIR before 15.0.0.356, Adobe AIR SDK before 15.0.0.356, and Adobe AIR SDK & Compiler before 15.0.0.356 allow attackers to execute arbitrary code by leveraging an unspecified \"type confusion,\" a different vulnerability than CVE-2014-0577, CVE-2014-0584, CVE-2014-0586, and CVE-2014-0590.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0585", url: "https://www.suse.com/security/cve/CVE-2014-0585", }, { category: "external", summary: "SUSE Bug 905032 for CVE-2014-0585", url: "https://bugzilla.suse.com/905032", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "important", }, ], title: "CVE-2014-0585", }, { cve: "CVE-2014-0586", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0586", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.252 and 14.x and 15.x before 15.0.0.223 on Windows and OS X and before 11.2.202.418 on Linux, Adobe AIR before 15.0.0.356, Adobe AIR SDK before 15.0.0.356, and Adobe AIR SDK & Compiler before 15.0.0.356 allow attackers to execute arbitrary code by leveraging an unspecified \"type confusion,\" a different vulnerability than CVE-2014-0577, CVE-2014-0584, CVE-2014-0585, and CVE-2014-0590.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0586", url: "https://www.suse.com/security/cve/CVE-2014-0586", }, { category: "external", summary: "SUSE Bug 905032 for CVE-2014-0586", url: "https://bugzilla.suse.com/905032", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "important", }, ], title: "CVE-2014-0586", }, { cve: "CVE-2014-0587", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0587", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.259 and 14.x through 16.x before 16.0.0.235 on Windows and OS X and before 11.2.202.425 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2014-9164.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0587", url: "https://www.suse.com/security/cve/CVE-2014-0587", }, { category: "external", summary: "SUSE Bug 909219 for CVE-2014-0587", url: "https://bugzilla.suse.com/909219", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2014-0587", }, { cve: "CVE-2014-0588", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0588", }, ], notes: [ { category: "general", text: "Use-after-free vulnerability in Adobe Flash Player before 13.0.0.252 and 14.x and 15.x before 15.0.0.223 on Windows and OS X and before 11.2.202.418 on Linux, Adobe AIR before 15.0.0.356, Adobe AIR SDK before 15.0.0.356, and Adobe AIR SDK & Compiler before 15.0.0.356 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2014-0573 and CVE-2014-8438.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0588", url: "https://www.suse.com/security/cve/CVE-2014-0588", }, { category: "external", summary: "SUSE Bug 905032 for CVE-2014-0588", url: "https://bugzilla.suse.com/905032", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "important", }, ], title: "CVE-2014-0588", }, { cve: "CVE-2014-0589", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0589", }, ], notes: [ { category: "general", text: "Heap-based buffer overflow in Adobe Flash Player before 13.0.0.252 and 14.x and 15.x before 15.0.0.223 on Windows and OS X and before 11.2.202.418 on Linux, Adobe AIR before 15.0.0.356, Adobe AIR SDK before 15.0.0.356, and Adobe AIR SDK & Compiler before 15.0.0.356 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2014-0582.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0589", url: "https://www.suse.com/security/cve/CVE-2014-0589", }, { category: "external", summary: "SUSE Bug 905032 for CVE-2014-0589", url: "https://bugzilla.suse.com/905032", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "important", }, ], title: "CVE-2014-0589", }, { cve: "CVE-2014-0590", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0590", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.252 and 14.x and 15.x before 15.0.0.223 on Windows and OS X and before 11.2.202.418 on Linux, Adobe AIR before 15.0.0.356, Adobe AIR SDK before 15.0.0.356, and Adobe AIR SDK & Compiler before 15.0.0.356 allow attackers to execute arbitrary code by leveraging an unspecified \"type confusion,\" a different vulnerability than CVE-2014-0577, CVE-2014-0584, CVE-2014-0585, and CVE-2014-0586.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0590", url: "https://www.suse.com/security/cve/CVE-2014-0590", }, { category: "external", summary: "SUSE Bug 905032 for CVE-2014-0590", url: "https://bugzilla.suse.com/905032", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "important", }, ], title: "CVE-2014-0590", }, { cve: "CVE-2014-4671", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-4671", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.231 and 14.x before 14.0.0.145 on Windows and OS X and before 11.2.202.394 on Linux, Adobe AIR before 14.0.0.137 on Android, Adobe AIR SDK before 14.0.0.137, and Adobe AIR SDK & Compiler before 14.0.0.137 do not properly restrict the SWF file format, which allows remote attackers to conduct cross-site request forgery (CSRF) attacks against JSONP endpoints, and obtain sensitive information, via a crafted OBJECT element with SWF content satisfying the character-set requirements of a callback API.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-4671", url: "https://www.suse.com/security/cve/CVE-2014-4671", }, { category: "external", summary: "SUSE Bug 886454 for CVE-2014-4671", url: "https://bugzilla.suse.com/886454", }, { category: "external", summary: "SUSE Bug 891688 for CVE-2014-4671", url: "https://bugzilla.suse.com/891688", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2014-4671", }, { cve: "CVE-2014-8437", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-8437", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.252 and 14.x and 15.x before 15.0.0.223 on Windows and OS X and before 11.2.202.418 on Linux, Adobe AIR before 15.0.0.356, Adobe AIR SDK before 15.0.0.356, and Adobe AIR SDK & Compiler before 15.0.0.356 allow remote attackers to discover session tokens via unspecified vectors.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-8437", url: "https://www.suse.com/security/cve/CVE-2014-8437", }, { category: "external", summary: "SUSE Bug 905032 for CVE-2014-8437", url: "https://bugzilla.suse.com/905032", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "important", }, ], title: "CVE-2014-8437", }, { cve: "CVE-2014-8438", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-8438", }, ], notes: [ { category: "general", text: "Use-after-free vulnerability in Adobe Flash Player before 13.0.0.252 and 14.x and 15.x before 15.0.0.223 on Windows and OS X and before 11.2.202.418 on Linux, Adobe AIR before 15.0.0.356, Adobe AIR SDK before 15.0.0.356, and Adobe AIR SDK & Compiler before 15.0.0.356 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2014-0573 and CVE-2014-0588.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-8438", url: "https://www.suse.com/security/cve/CVE-2014-8438", }, { category: "external", summary: "SUSE Bug 905032 for CVE-2014-8438", url: "https://bugzilla.suse.com/905032", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "important", }, ], title: "CVE-2014-8438", }, { cve: "CVE-2014-8439", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-8439", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.258 and 14.x and 15.x before 15.0.0.239 on Windows and OS X and before 11.2.202.424 on Linux, Adobe AIR before 15.0.0.293, Adobe AIR SDK before 15.0.0.302, and Adobe AIR SDK & Compiler before 15.0.0.302 allow attackers to execute arbitrary code or cause a denial of service (invalid pointer dereference) via unspecified vectors.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-8439", url: "https://www.suse.com/security/cve/CVE-2014-8439", }, { category: "external", summary: "SUSE Bug 907257 for CVE-2014-8439", url: "https://bugzilla.suse.com/907257", }, { category: "external", summary: "SUSE Bug 909219 for CVE-2014-8439", url: "https://bugzilla.suse.com/909219", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2014-8439", }, { cve: "CVE-2014-8440", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-8440", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.252 and 14.x and 15.x before 15.0.0.223 on Windows and OS X and before 11.2.202.418 on Linux, Adobe AIR before 15.0.0.356, Adobe AIR SDK before 15.0.0.356, and Adobe AIR SDK & Compiler before 15.0.0.356 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2014-0576, CVE-2014-0581, and CVE-2014-8441.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-8440", url: "https://www.suse.com/security/cve/CVE-2014-8440", }, { category: "external", summary: "SUSE Bug 905032 for CVE-2014-8440", url: "https://bugzilla.suse.com/905032", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "important", }, ], title: "CVE-2014-8440", }, { cve: "CVE-2014-8441", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-8441", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.252 and 14.x and 15.x before 15.0.0.223 on Windows and OS X and before 11.2.202.418 on Linux, Adobe AIR before 15.0.0.356, Adobe AIR SDK before 15.0.0.356, and Adobe AIR SDK & Compiler before 15.0.0.356 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2014-0576, CVE-2014-0581, and CVE-2014-8440.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-8441", url: "https://www.suse.com/security/cve/CVE-2014-8441", }, { category: "external", summary: "SUSE Bug 905032 for CVE-2014-8441", url: "https://bugzilla.suse.com/905032", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "important", }, ], title: "CVE-2014-8441", }, { cve: "CVE-2014-8442", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-8442", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.252 and 14.x and 15.x before 15.0.0.223 on Windows and OS X and before 11.2.202.418 on Linux, Adobe AIR before 15.0.0.356, Adobe AIR SDK before 15.0.0.356, and Adobe AIR SDK & Compiler before 15.0.0.356 allow attackers to complete a transition from Low Integrity to Medium Integrity by leveraging incorrect permissions.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-8442", url: "https://www.suse.com/security/cve/CVE-2014-8442", }, { category: "external", summary: "SUSE Bug 905032 for CVE-2014-8442", url: "https://bugzilla.suse.com/905032", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2014-8442", }, { cve: "CVE-2014-8443", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-8443", }, ], notes: [ { category: "general", text: "Use-after-free vulnerability in Adobe Flash Player before 13.0.0.259 and 14.x through 16.x before 16.0.0.235 on Windows and OS X and before 11.2.202.425 on Linux allows attackers to execute arbitrary code via unspecified vectors.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-8443", url: "https://www.suse.com/security/cve/CVE-2014-8443", }, { category: "external", summary: "SUSE Bug 909219 for CVE-2014-8443", url: "https://bugzilla.suse.com/909219", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2014-8443", }, { cve: "CVE-2014-9162", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-9162", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.259 and 14.x through 16.x before 16.0.0.235 on Windows and OS X and before 11.2.202.425 on Linux allows attackers to obtain sensitive information via unspecified vectors.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-9162", url: "https://www.suse.com/security/cve/CVE-2014-9162", }, { category: "external", summary: "SUSE Bug 909219 for CVE-2014-9162", url: "https://bugzilla.suse.com/909219", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2014-9162", }, { cve: "CVE-2014-9163", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-9163", }, ], notes: [ { category: "general", text: "Stack-based buffer overflow in Adobe Flash Player before 13.0.0.259 and 14.x and 15.x before 15.0.0.246 on Windows and OS X and before 11.2.202.425 on Linux allows attackers to execute arbitrary code via unspecified vectors, as exploited in the wild in December 2014.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-9163", url: "https://www.suse.com/security/cve/CVE-2014-9163", }, { category: "external", summary: "SUSE Bug 909219 for CVE-2014-9163", url: "https://bugzilla.suse.com/909219", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2014-9163", }, { cve: "CVE-2014-9164", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-9164", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.259 and 14.x through 16.x before 16.0.0.235 on Windows and OS X and before 11.2.202.425 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2014-0587.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-9164", url: "https://www.suse.com/security/cve/CVE-2014-9164", }, { category: "external", summary: "SUSE Bug 909219 for CVE-2014-9164", url: "https://bugzilla.suse.com/909219", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2014-9164", }, { cve: "CVE-2015-0301", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-0301", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.260 and 14.x through 16.x before 16.0.0.257 on Windows and OS X and before 11.2.202.429 on Linux, Adobe AIR before 16.0.0.245 on Windows and OS X and before 16.0.0.272 on Android, Adobe AIR SDK before 16.0.0.272, and Adobe AIR SDK & Compiler before 16.0.0.272 do not properly validate files, which has unspecified impact and attack vectors.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-0301", url: "https://www.suse.com/security/cve/CVE-2015-0301", }, { category: "external", summary: "SUSE Bug 913057 for CVE-2015-0301", url: "https://bugzilla.suse.com/913057", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2015-0301", }, { cve: "CVE-2015-0302", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-0302", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.260 and 14.x through 16.x before 16.0.0.257 on Windows and OS X and before 11.2.202.429 on Linux, Adobe AIR before 16.0.0.245 on Windows and OS X and before 16.0.0.272 on Android, Adobe AIR SDK before 16.0.0.272, and Adobe AIR SDK & Compiler before 16.0.0.272 allow attackers to obtain sensitive keystroke information via unspecified vectors.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-0302", url: "https://www.suse.com/security/cve/CVE-2015-0302", }, { category: "external", summary: "SUSE Bug 913057 for CVE-2015-0302", url: "https://bugzilla.suse.com/913057", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2015-0302", }, { cve: "CVE-2015-0303", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-0303", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.260 and 14.x through 16.x before 16.0.0.257 on Windows and OS X and before 11.2.202.429 on Linux, Adobe AIR before 16.0.0.245 on Windows and OS X and before 16.0.0.272 on Android, Adobe AIR SDK before 16.0.0.272, and Adobe AIR SDK & Compiler before 16.0.0.272 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-0306.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-0303", url: "https://www.suse.com/security/cve/CVE-2015-0303", }, { category: "external", summary: "SUSE Bug 913057 for CVE-2015-0303", url: "https://bugzilla.suse.com/913057", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2015-0303", }, { cve: "CVE-2015-0304", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-0304", }, ], notes: [ { category: "general", text: "Heap-based buffer overflow in Adobe Flash Player before 13.0.0.260 and 14.x through 16.x before 16.0.0.257 on Windows and OS X and before 11.2.202.429 on Linux, Adobe AIR before 16.0.0.245 on Windows and OS X and before 16.0.0.272 on Android, Adobe AIR SDK before 16.0.0.272, and Adobe AIR SDK & Compiler before 16.0.0.272 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-0309.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-0304", url: "https://www.suse.com/security/cve/CVE-2015-0304", }, { category: "external", summary: "SUSE Bug 913057 for CVE-2015-0304", url: "https://bugzilla.suse.com/913057", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2015-0304", }, { cve: "CVE-2015-0305", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-0305", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.260 and 14.x through 16.x before 16.0.0.257 on Windows and OS X and before 11.2.202.429 on Linux, Adobe AIR before 16.0.0.245 on Windows and OS X and before 16.0.0.272 on Android, Adobe AIR SDK before 16.0.0.272, and Adobe AIR SDK & Compiler before 16.0.0.272 allow attackers to execute arbitrary code by leveraging an unspecified \"type confusion.\"", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-0305", url: "https://www.suse.com/security/cve/CVE-2015-0305", }, { category: "external", summary: "SUSE Bug 913057 for CVE-2015-0305", url: "https://bugzilla.suse.com/913057", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2015-0305", }, { cve: "CVE-2015-0306", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-0306", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.260 and 14.x through 16.x before 16.0.0.257 on Windows and OS X and before 11.2.202.429 on Linux, Adobe AIR before 16.0.0.245 on Windows and OS X and before 16.0.0.272 on Android, Adobe AIR SDK before 16.0.0.272, and Adobe AIR SDK & Compiler before 16.0.0.272 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-0303.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-0306", url: "https://www.suse.com/security/cve/CVE-2015-0306", }, { category: "external", summary: "SUSE Bug 913057 for CVE-2015-0306", url: "https://bugzilla.suse.com/913057", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2015-0306", }, { cve: "CVE-2015-0307", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-0307", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.260 and 14.x through 16.x before 16.0.0.257 on Windows and OS X and before 11.2.202.429 on Linux, Adobe AIR before 16.0.0.245 on Windows and OS X and before 16.0.0.272 on Android, Adobe AIR SDK before 16.0.0.272, and Adobe AIR SDK & Compiler before 16.0.0.272 allow remote attackers to obtain sensitive information from process memory or cause a denial of service (out-of-bounds read) via unspecified vectors.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-0307", url: "https://www.suse.com/security/cve/CVE-2015-0307", }, { category: "external", summary: "SUSE Bug 913057 for CVE-2015-0307", url: "https://bugzilla.suse.com/913057", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2015-0307", }, { cve: "CVE-2015-0308", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-0308", }, ], notes: [ { category: "general", text: "Use-after-free vulnerability in Adobe Flash Player before 13.0.0.260 and 14.x through 16.x before 16.0.0.257 on Windows and OS X and before 11.2.202.429 on Linux, Adobe AIR before 16.0.0.245 on Windows and OS X and before 16.0.0.272 on Android, Adobe AIR SDK before 16.0.0.272, and Adobe AIR SDK & Compiler before 16.0.0.272 allows attackers to execute arbitrary code via unspecified vectors.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-0308", url: "https://www.suse.com/security/cve/CVE-2015-0308", }, { category: "external", summary: "SUSE Bug 913057 for CVE-2015-0308", url: "https://bugzilla.suse.com/913057", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2015-0308", }, { cve: "CVE-2015-0309", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-0309", }, ], notes: [ { category: "general", text: "Heap-based buffer overflow in Adobe Flash Player before 13.0.0.260 and 14.x through 16.x before 16.0.0.257 on Windows and OS X and before 11.2.202.429 on Linux, Adobe AIR before 16.0.0.245 on Windows and OS X and before 16.0.0.272 on Android, Adobe AIR SDK before 16.0.0.272, and Adobe AIR SDK & Compiler before 16.0.0.272 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-0304.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-0309", url: "https://www.suse.com/security/cve/CVE-2015-0309", }, { category: "external", summary: "SUSE Bug 913057 for CVE-2015-0309", url: "https://bugzilla.suse.com/913057", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2015-0309", }, { cve: "CVE-2015-0310", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-0310", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.262 and 14.x through 16.x before 16.0.0.287 on Windows and OS X and before 11.2.202.438 on Linux does not properly restrict discovery of memory addresses, which allows attackers to bypass the ASLR protection mechanism on Windows, and have an unspecified impact on other platforms, via unknown vectors, as exploited in the wild in January 2015.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-0310", url: "https://www.suse.com/security/cve/CVE-2015-0310", }, { category: "external", summary: "SUSE Bug 914333 for CVE-2015-0310", url: "https://bugzilla.suse.com/914333", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2015-0310", }, { cve: "CVE-2015-0311", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-0311", }, ], notes: [ { category: "general", text: "Unspecified vulnerability in Adobe Flash Player through 13.0.0.262 and 14.x, 15.x, and 16.x through 16.0.0.287 on Windows and OS X and through 11.2.202.438 on Linux allows remote attackers to execute arbitrary code via unknown vectors, as exploited in the wild in January 2015.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-0311", url: "https://www.suse.com/security/cve/CVE-2015-0311", }, { category: "external", summary: "SUSE Bug 914463 for CVE-2015-0311", url: "https://bugzilla.suse.com/914463", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 9.8, baseSeverity: "CRITICAL", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2015-0311", }, { cve: "CVE-2015-0313", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-0313", }, ], notes: [ { category: "general", text: "Use-after-free vulnerability in Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows and OS X and before 11.2.202.442 on Linux allows remote attackers to execute arbitrary code via unspecified vectors, as exploited in the wild in February 2015, a different vulnerability than CVE-2015-0315, CVE-2015-0320, and CVE-2015-0322.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-0313", url: "https://www.suse.com/security/cve/CVE-2015-0313", }, { category: "external", summary: "SUSE Bug 915918 for CVE-2015-0313", url: "https://bugzilla.suse.com/915918", }, { category: "external", summary: "SUSE Bug 916374 for CVE-2015-0313", url: "https://bugzilla.suse.com/916374", }, { category: "external", summary: "SUSE Bug 922033 for CVE-2015-0313", url: "https://bugzilla.suse.com/922033", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 9.8, baseSeverity: "CRITICAL", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2015-0313", }, { cve: "CVE-2015-0314", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-0314", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows and OS X and before 11.2.202.442 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-0316, CVE-2015-0318, CVE-2015-0321, CVE-2015-0329, and CVE-2015-0330.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-0314", url: "https://www.suse.com/security/cve/CVE-2015-0314", }, { category: "external", summary: "SUSE Bug 915918 for CVE-2015-0314", url: "https://bugzilla.suse.com/915918", }, { category: "external", summary: "SUSE Bug 922033 for CVE-2015-0314", url: "https://bugzilla.suse.com/922033", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2015-0314", }, { cve: "CVE-2015-0315", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-0315", }, ], notes: [ { category: "general", text: "Use-after-free vulnerability in Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows and OS X and before 11.2.202.442 on Linux allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-0313, CVE-2015-0320, and CVE-2015-0322.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-0315", url: "https://www.suse.com/security/cve/CVE-2015-0315", }, { category: "external", summary: "SUSE Bug 915918 for CVE-2015-0315", url: "https://bugzilla.suse.com/915918", }, { category: "external", summary: "SUSE Bug 922033 for CVE-2015-0315", url: "https://bugzilla.suse.com/922033", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2015-0315", }, { cve: "CVE-2015-0316", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-0316", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows and OS X and before 11.2.202.442 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-0314, CVE-2015-0318, CVE-2015-0321, CVE-2015-0329, and CVE-2015-0330.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-0316", url: "https://www.suse.com/security/cve/CVE-2015-0316", }, { category: "external", summary: "SUSE Bug 915918 for CVE-2015-0316", url: "https://bugzilla.suse.com/915918", }, { category: "external", summary: "SUSE Bug 922033 for CVE-2015-0316", url: "https://bugzilla.suse.com/922033", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2015-0316", }, { cve: "CVE-2015-0317", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-0317", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows and OS X and before 11.2.202.442 on Linux allows attackers to execute arbitrary code by leveraging an unspecified \"type confusion,\" a different vulnerability than CVE-2015-0319.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-0317", url: "https://www.suse.com/security/cve/CVE-2015-0317", }, { category: "external", summary: "SUSE Bug 915918 for CVE-2015-0317", url: "https://bugzilla.suse.com/915918", }, { category: "external", summary: "SUSE Bug 922033 for CVE-2015-0317", url: "https://bugzilla.suse.com/922033", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2015-0317", }, { cve: "CVE-2015-0318", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-0318", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows and OS X and before 11.2.202.442 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-0314, CVE-2015-0316, CVE-2015-0321, CVE-2015-0329, and CVE-2015-0330.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-0318", url: "https://www.suse.com/security/cve/CVE-2015-0318", }, { category: "external", summary: "SUSE Bug 915918 for CVE-2015-0318", url: "https://bugzilla.suse.com/915918", }, { category: "external", summary: "SUSE Bug 922033 for CVE-2015-0318", url: "https://bugzilla.suse.com/922033", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2015-0318", }, { cve: "CVE-2015-0319", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-0319", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows and OS X and before 11.2.202.442 on Linux allows attackers to execute arbitrary code by leveraging an unspecified \"type confusion,\" a different vulnerability than CVE-2015-0317.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-0319", url: "https://www.suse.com/security/cve/CVE-2015-0319", }, { category: "external", summary: "SUSE Bug 915918 for CVE-2015-0319", url: "https://bugzilla.suse.com/915918", }, { category: "external", summary: "SUSE Bug 922033 for CVE-2015-0319", url: "https://bugzilla.suse.com/922033", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2015-0319", }, { cve: "CVE-2015-0320", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-0320", }, ], notes: [ { category: "general", text: "Use-after-free vulnerability in Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows and OS X and before 11.2.202.442 on Linux allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-0313, CVE-2015-0315, and CVE-2015-0322.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-0320", url: "https://www.suse.com/security/cve/CVE-2015-0320", }, { category: "external", summary: "SUSE Bug 915918 for CVE-2015-0320", url: "https://bugzilla.suse.com/915918", }, { category: "external", summary: "SUSE Bug 922033 for CVE-2015-0320", url: "https://bugzilla.suse.com/922033", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2015-0320", }, { cve: "CVE-2015-0321", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-0321", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows and OS X and before 11.2.202.442 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-0314, CVE-2015-0316, CVE-2015-0318, CVE-2015-0329, and CVE-2015-0330.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-0321", url: "https://www.suse.com/security/cve/CVE-2015-0321", }, { category: "external", summary: "SUSE Bug 915918 for CVE-2015-0321", url: "https://bugzilla.suse.com/915918", }, { category: "external", summary: "SUSE Bug 922033 for CVE-2015-0321", url: "https://bugzilla.suse.com/922033", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2015-0321", }, { cve: "CVE-2015-0322", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-0322", }, ], notes: [ { category: "general", text: "Use-after-free vulnerability in Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows and OS X and before 11.2.202.442 on Linux allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-0313, CVE-2015-0315, and CVE-2015-0320.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-0322", url: "https://www.suse.com/security/cve/CVE-2015-0322", }, { category: "external", summary: "SUSE Bug 915918 for CVE-2015-0322", url: "https://bugzilla.suse.com/915918", }, { category: "external", summary: "SUSE Bug 922033 for CVE-2015-0322", url: "https://bugzilla.suse.com/922033", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2015-0322", }, { cve: "CVE-2015-0323", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-0323", }, ], notes: [ { category: "general", text: "Heap-based buffer overflow in Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows and OS X and before 11.2.202.442 on Linux allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-0327.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-0323", url: "https://www.suse.com/security/cve/CVE-2015-0323", }, { category: "external", summary: "SUSE Bug 915918 for CVE-2015-0323", url: "https://bugzilla.suse.com/915918", }, { category: "external", summary: "SUSE Bug 922033 for CVE-2015-0323", url: "https://bugzilla.suse.com/922033", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2015-0323", }, { cve: "CVE-2015-0324", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-0324", }, ], notes: [ { category: "general", text: "Buffer overflow in Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows and OS X and before 11.2.202.442 on Linux allows attackers to execute arbitrary code via unspecified vectors.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-0324", url: "https://www.suse.com/security/cve/CVE-2015-0324", }, { category: "external", summary: "SUSE Bug 915918 for CVE-2015-0324", url: "https://bugzilla.suse.com/915918", }, { category: "external", summary: "SUSE Bug 922033 for CVE-2015-0324", url: "https://bugzilla.suse.com/922033", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2015-0324", }, { cve: "CVE-2015-0325", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-0325", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows and OS X and before 11.2.202.442 on Linux allows attackers to cause a denial of service (NULL pointer dereference) or possibly have unspecified other impact via unknown vectors, a different vulnerability than CVE-2015-0326 and CVE-2015-0328.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-0325", url: "https://www.suse.com/security/cve/CVE-2015-0325", }, { category: "external", summary: "SUSE Bug 915918 for CVE-2015-0325", url: "https://bugzilla.suse.com/915918", }, { category: "external", summary: "SUSE Bug 922033 for CVE-2015-0325", url: "https://bugzilla.suse.com/922033", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2015-0325", }, { cve: "CVE-2015-0326", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-0326", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows and OS X and before 11.2.202.442 on Linux allows attackers to cause a denial of service (NULL pointer dereference) or possibly have unspecified other impact via unknown vectors, a different vulnerability than CVE-2015-0325 and CVE-2015-0328.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-0326", url: "https://www.suse.com/security/cve/CVE-2015-0326", }, { category: "external", summary: "SUSE Bug 915918 for CVE-2015-0326", url: "https://bugzilla.suse.com/915918", }, { category: "external", summary: "SUSE Bug 922033 for CVE-2015-0326", url: "https://bugzilla.suse.com/922033", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2015-0326", }, { cve: "CVE-2015-0327", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-0327", }, ], notes: [ { category: "general", text: "Heap-based buffer overflow in Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows and OS X and before 11.2.202.442 on Linux allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-0323.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-0327", url: "https://www.suse.com/security/cve/CVE-2015-0327", }, { category: "external", summary: "SUSE Bug 915918 for CVE-2015-0327", url: "https://bugzilla.suse.com/915918", }, { category: "external", summary: "SUSE Bug 922033 for CVE-2015-0327", url: "https://bugzilla.suse.com/922033", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2015-0327", }, { cve: "CVE-2015-0328", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-0328", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows and OS X and before 11.2.202.442 on Linux allows attackers to cause a denial of service (NULL pointer dereference) or possibly have unspecified other impact via unknown vectors, a different vulnerability than CVE-2015-0325 and CVE-2015-0326.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-0328", url: "https://www.suse.com/security/cve/CVE-2015-0328", }, { category: "external", summary: "SUSE Bug 915918 for CVE-2015-0328", url: "https://bugzilla.suse.com/915918", }, { category: "external", summary: "SUSE Bug 922033 for CVE-2015-0328", url: "https://bugzilla.suse.com/922033", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2015-0328", }, { cve: "CVE-2015-0329", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-0329", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows and OS X and before 11.2.202.442 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-0314, CVE-2015-0316, CVE-2015-0318, CVE-2015-0321, and CVE-2015-0330.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-0329", url: "https://www.suse.com/security/cve/CVE-2015-0329", }, { category: "external", summary: "SUSE Bug 915918 for CVE-2015-0329", url: "https://bugzilla.suse.com/915918", }, { category: "external", summary: "SUSE Bug 922033 for CVE-2015-0329", url: "https://bugzilla.suse.com/922033", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2015-0329", }, { cve: "CVE-2015-0330", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-0330", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows and OS X and before 11.2.202.442 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-0314, CVE-2015-0316, CVE-2015-0318, CVE-2015-0321, and CVE-2015-0329.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-0330", url: "https://www.suse.com/security/cve/CVE-2015-0330", }, { category: "external", summary: "SUSE Bug 915918 for CVE-2015-0330", url: "https://bugzilla.suse.com/915918", }, { category: "external", summary: "SUSE Bug 922033 for CVE-2015-0330", url: "https://bugzilla.suse.com/922033", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2015-0330", }, { cve: "CVE-2015-0332", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-0332", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.277 and 14.x through 17.x before 17.0.0.134 on Windows and OS X and before 11.2.202.451 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-0333, CVE-2015-0335, and CVE-2015-0339.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-0332", url: "https://www.suse.com/security/cve/CVE-2015-0332", }, { category: "external", summary: "SUSE Bug 922033 for CVE-2015-0332", url: "https://bugzilla.suse.com/922033", }, { category: "external", summary: "SUSE Bug 922296 for CVE-2015-0332", url: "https://bugzilla.suse.com/922296", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2015-0332", }, { cve: "CVE-2015-0333", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-0333", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.277 and 14.x through 17.x before 17.0.0.134 on Windows and OS X and before 11.2.202.451 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-0332, CVE-2015-0335, and CVE-2015-0339.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-0333", url: "https://www.suse.com/security/cve/CVE-2015-0333", }, { category: "external", summary: "SUSE Bug 922033 for CVE-2015-0333", url: "https://bugzilla.suse.com/922033", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2015-0333", }, { cve: "CVE-2015-0334", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-0334", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.277 and 14.x through 17.x before 17.0.0.134 on Windows and OS X and before 11.2.202.451 on Linux allows attackers to execute arbitrary code by leveraging an unspecified \"type confusion,\" a different vulnerability than CVE-2015-0336.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-0334", url: "https://www.suse.com/security/cve/CVE-2015-0334", }, { category: "external", summary: "SUSE Bug 922033 for CVE-2015-0334", url: "https://bugzilla.suse.com/922033", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2015-0334", }, { cve: "CVE-2015-0335", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-0335", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.277 and 14.x through 17.x before 17.0.0.134 on Windows and OS X and before 11.2.202.451 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-0332, CVE-2015-0333, and CVE-2015-0339.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-0335", url: "https://www.suse.com/security/cve/CVE-2015-0335", }, { category: "external", summary: "SUSE Bug 922033 for CVE-2015-0335", url: "https://bugzilla.suse.com/922033", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2015-0335", }, { cve: "CVE-2015-0336", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-0336", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.277 and 14.x through 17.x before 17.0.0.134 on Windows and OS X and before 11.2.202.451 on Linux allows attackers to execute arbitrary code by leveraging an unspecified \"type confusion,\" a different vulnerability than CVE-2015-0334.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-0336", url: "https://www.suse.com/security/cve/CVE-2015-0336", }, { category: "external", summary: "SUSE Bug 922033 for CVE-2015-0336", url: "https://bugzilla.suse.com/922033", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2015-0336", }, { cve: "CVE-2015-0337", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-0337", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.277 and 14.x through 17.x before 17.0.0.134 on Windows and OS X and before 11.2.202.451 on Linux allows remote attackers to bypass the Same Origin Policy via unspecified vectors.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-0337", url: "https://www.suse.com/security/cve/CVE-2015-0337", }, { category: "external", summary: "SUSE Bug 922033 for CVE-2015-0337", url: "https://bugzilla.suse.com/922033", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2015-0337", }, { cve: "CVE-2015-0338", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-0338", }, ], notes: [ { category: "general", text: "Integer overflow in Adobe Flash Player before 13.0.0.277 and 14.x through 17.x before 17.0.0.134 on Windows and OS X and before 11.2.202.451 on Linux allows attackers to execute arbitrary code via unspecified vectors.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-0338", url: "https://www.suse.com/security/cve/CVE-2015-0338", }, { category: "external", summary: "SUSE Bug 922033 for CVE-2015-0338", url: "https://bugzilla.suse.com/922033", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2015-0338", }, { cve: "CVE-2015-0339", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-0339", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.277 and 14.x through 17.x before 17.0.0.134 on Windows and OS X and before 11.2.202.451 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-0332, CVE-2015-0333, and CVE-2015-0335.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-0339", url: "https://www.suse.com/security/cve/CVE-2015-0339", }, { category: "external", summary: "SUSE Bug 922033 for CVE-2015-0339", url: "https://bugzilla.suse.com/922033", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2015-0339", }, { cve: "CVE-2015-0340", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-0340", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.277 and 14.x through 17.x before 17.0.0.134 on Windows and OS X and before 11.2.202.451 on Linux allows remote attackers to bypass intended file-upload restrictions via unspecified vectors.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-0340", url: "https://www.suse.com/security/cve/CVE-2015-0340", }, { category: "external", summary: "SUSE Bug 922033 for CVE-2015-0340", url: "https://bugzilla.suse.com/922033", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2015-0340", }, { cve: "CVE-2015-0341", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-0341", }, ], notes: [ { category: "general", text: "Use-after-free vulnerability in Adobe Flash Player before 13.0.0.277 and 14.x through 17.x before 17.0.0.134 on Windows and OS X and before 11.2.202.451 on Linux allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-0342.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-0341", url: "https://www.suse.com/security/cve/CVE-2015-0341", }, { category: "external", summary: "SUSE Bug 922033 for CVE-2015-0341", url: "https://bugzilla.suse.com/922033", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2015-0341", }, { cve: "CVE-2015-0342", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-0342", }, ], notes: [ { category: "general", text: "Use-after-free vulnerability in Adobe Flash Player before 13.0.0.277 and 14.x through 17.x before 17.0.0.134 on Windows and OS X and before 11.2.202.451 on Linux allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-0341.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-0342", url: "https://www.suse.com/security/cve/CVE-2015-0342", }, { category: "external", summary: "SUSE Bug 922033 for CVE-2015-0342", url: "https://bugzilla.suse.com/922033", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2015-0342", }, { cve: "CVE-2015-0346", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-0346", }, ], notes: [ { category: "general", text: "Double free vulnerability in Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-0359.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-0346", url: "https://www.suse.com/security/cve/CVE-2015-0346", }, { category: "external", summary: "SUSE Bug 927089 for CVE-2015-0346", url: "https://bugzilla.suse.com/927089", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "moderate", }, ], title: "CVE-2015-0346", }, { cve: "CVE-2015-0347", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-0347", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-0350, CVE-2015-0352, CVE-2015-0353, CVE-2015-0354, CVE-2015-0355, CVE-2015-0360, CVE-2015-3038, CVE-2015-3041, CVE-2015-3042, and CVE-2015-3043.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-0347", url: "https://www.suse.com/security/cve/CVE-2015-0347", }, { category: "external", summary: "SUSE Bug 927089 for CVE-2015-0347", url: "https://bugzilla.suse.com/927089", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "moderate", }, ], title: "CVE-2015-0347", }, { cve: "CVE-2015-0348", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-0348", }, ], notes: [ { category: "general", text: "Buffer overflow in Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code via unspecified vectors.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-0348", url: "https://www.suse.com/security/cve/CVE-2015-0348", }, { category: "external", summary: "SUSE Bug 927089 for CVE-2015-0348", url: "https://bugzilla.suse.com/927089", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "moderate", }, ], title: "CVE-2015-0348", }, { cve: "CVE-2015-0349", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-0349", }, ], notes: [ { category: "general", text: "Use-after-free vulnerability in Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-0351, CVE-2015-0358, and CVE-2015-3039.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-0349", url: "https://www.suse.com/security/cve/CVE-2015-0349", }, { category: "external", summary: "SUSE Bug 927089 for CVE-2015-0349", url: "https://bugzilla.suse.com/927089", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "moderate", }, ], title: "CVE-2015-0349", }, { cve: "CVE-2015-0350", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-0350", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-0347, CVE-2015-0352, CVE-2015-0353, CVE-2015-0354, CVE-2015-0355, CVE-2015-0360, CVE-2015-3038, CVE-2015-3041, CVE-2015-3042, and CVE-2015-3043.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-0350", url: "https://www.suse.com/security/cve/CVE-2015-0350", }, { category: "external", summary: "SUSE Bug 927089 for CVE-2015-0350", url: "https://bugzilla.suse.com/927089", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "moderate", }, ], title: "CVE-2015-0350", }, { cve: "CVE-2015-0351", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-0351", }, ], notes: [ { category: "general", text: "Use-after-free vulnerability in Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-0349, CVE-2015-0358, and CVE-2015-3039.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-0351", url: "https://www.suse.com/security/cve/CVE-2015-0351", }, { category: "external", summary: "SUSE Bug 927089 for CVE-2015-0351", url: "https://bugzilla.suse.com/927089", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "moderate", }, ], title: "CVE-2015-0351", }, { cve: "CVE-2015-0352", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-0352", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-0347, CVE-2015-0350, CVE-2015-0353, CVE-2015-0354, CVE-2015-0355, CVE-2015-0360, CVE-2015-3038, CVE-2015-3041, CVE-2015-3042, and CVE-2015-3043.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-0352", url: "https://www.suse.com/security/cve/CVE-2015-0352", }, { category: "external", summary: "SUSE Bug 927089 for CVE-2015-0352", url: "https://bugzilla.suse.com/927089", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "moderate", }, ], title: "CVE-2015-0352", }, { cve: "CVE-2015-0353", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-0353", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-0347, CVE-2015-0350, CVE-2015-0352, CVE-2015-0354, CVE-2015-0355, CVE-2015-0360, CVE-2015-3038, CVE-2015-3041, CVE-2015-3042, and CVE-2015-3043.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-0353", url: "https://www.suse.com/security/cve/CVE-2015-0353", }, { category: "external", summary: "SUSE Bug 927089 for CVE-2015-0353", url: "https://bugzilla.suse.com/927089", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "moderate", }, ], title: "CVE-2015-0353", }, { cve: "CVE-2015-0354", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-0354", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-0347, CVE-2015-0350, CVE-2015-0352, CVE-2015-0353, CVE-2015-0355, CVE-2015-0360, CVE-2015-3038, CVE-2015-3041, CVE-2015-3042, and CVE-2015-3043.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-0354", url: "https://www.suse.com/security/cve/CVE-2015-0354", }, { category: "external", summary: "SUSE Bug 927089 for CVE-2015-0354", url: "https://bugzilla.suse.com/927089", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "moderate", }, ], title: "CVE-2015-0354", }, { cve: "CVE-2015-0355", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-0355", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-0347, CVE-2015-0350, CVE-2015-0352, CVE-2015-0353, CVE-2015-0354, CVE-2015-0360, CVE-2015-3038, CVE-2015-3041, CVE-2015-3042, and CVE-2015-3043.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-0355", url: "https://www.suse.com/security/cve/CVE-2015-0355", }, { category: "external", summary: "SUSE Bug 927089 for CVE-2015-0355", url: "https://bugzilla.suse.com/927089", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "moderate", }, ], title: "CVE-2015-0355", }, { cve: "CVE-2015-0356", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-0356", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code by leveraging an unspecified \"type confusion.\"", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-0356", url: "https://www.suse.com/security/cve/CVE-2015-0356", }, { category: "external", summary: "SUSE Bug 927089 for CVE-2015-0356", url: "https://bugzilla.suse.com/927089", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "moderate", }, ], title: "CVE-2015-0356", }, { cve: "CVE-2015-0357", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-0357", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux does not properly restrict discovery of memory addresses, which allows attackers to bypass the ASLR protection mechanism via unspecified vectors, a different vulnerability than CVE-2015-3040.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-0357", url: "https://www.suse.com/security/cve/CVE-2015-0357", }, { category: "external", summary: "SUSE Bug 927089 for CVE-2015-0357", url: "https://bugzilla.suse.com/927089", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "moderate", }, ], title: "CVE-2015-0357", }, { cve: "CVE-2015-0358", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-0358", }, ], notes: [ { category: "general", text: "Use-after-free vulnerability in Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-0349, CVE-2015-0351, and CVE-2015-3039.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-0358", url: "https://www.suse.com/security/cve/CVE-2015-0358", }, { category: "external", summary: "SUSE Bug 927089 for CVE-2015-0358", url: "https://bugzilla.suse.com/927089", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "moderate", }, ], title: "CVE-2015-0358", }, { cve: "CVE-2015-0359", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-0359", }, ], notes: [ { category: "general", text: "Double free vulnerability in Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-0346.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-0359", url: "https://www.suse.com/security/cve/CVE-2015-0359", }, { category: "external", summary: "SUSE Bug 927089 for CVE-2015-0359", url: "https://bugzilla.suse.com/927089", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "moderate", }, ], title: "CVE-2015-0359", }, { cve: "CVE-2015-0360", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-0360", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-0347, CVE-2015-0350, CVE-2015-0352, CVE-2015-0353, CVE-2015-0354, CVE-2015-0355, CVE-2015-3038, CVE-2015-3041, CVE-2015-3042, and CVE-2015-3043.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-0360", url: "https://www.suse.com/security/cve/CVE-2015-0360", }, { category: "external", summary: "SUSE Bug 927089 for CVE-2015-0360", url: "https://bugzilla.suse.com/927089", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "moderate", }, ], title: "CVE-2015-0360", }, { cve: "CVE-2015-3038", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-3038", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-0347, CVE-2015-0350, CVE-2015-0352, CVE-2015-0353, CVE-2015-0354, CVE-2015-0355, CVE-2015-0360, CVE-2015-3041, CVE-2015-3042, and CVE-2015-3043.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-3038", url: "https://www.suse.com/security/cve/CVE-2015-3038", }, { category: "external", summary: "SUSE Bug 927089 for CVE-2015-3038", url: "https://bugzilla.suse.com/927089", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "moderate", }, ], title: "CVE-2015-3038", }, { cve: "CVE-2015-3039", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-3039", }, ], notes: [ { category: "general", text: "Use-after-free vulnerability in Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-0349, CVE-2015-0351, and CVE-2015-0358.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-3039", url: "https://www.suse.com/security/cve/CVE-2015-3039", }, { category: "external", summary: "SUSE Bug 927089 for CVE-2015-3039", url: "https://bugzilla.suse.com/927089", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "moderate", }, ], title: "CVE-2015-3039", }, { cve: "CVE-2015-3040", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-3040", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux does not properly restrict discovery of memory addresses, which allows attackers to bypass the ASLR protection mechanism via unspecified vectors, a different vulnerability than CVE-2015-0357.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-3040", url: "https://www.suse.com/security/cve/CVE-2015-3040", }, { category: "external", summary: "SUSE Bug 927089 for CVE-2015-3040", url: "https://bugzilla.suse.com/927089", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "moderate", }, ], title: "CVE-2015-3040", }, { cve: "CVE-2015-3041", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-3041", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-0347, CVE-2015-0350, CVE-2015-0352, CVE-2015-0353, CVE-2015-0354, CVE-2015-0355, CVE-2015-0360, CVE-2015-3038, CVE-2015-3042, and CVE-2015-3043.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-3041", url: "https://www.suse.com/security/cve/CVE-2015-3041", }, { category: "external", summary: "SUSE Bug 927089 for CVE-2015-3041", url: "https://bugzilla.suse.com/927089", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "moderate", }, ], title: "CVE-2015-3041", }, { cve: "CVE-2015-3042", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-3042", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-0347, CVE-2015-0350, CVE-2015-0352, CVE-2015-0353, CVE-2015-0354, CVE-2015-0355, CVE-2015-0360, CVE-2015-3038, CVE-2015-3041, and CVE-2015-3043.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-3042", url: "https://www.suse.com/security/cve/CVE-2015-3042", }, { category: "external", summary: "SUSE Bug 927089 for CVE-2015-3042", url: "https://bugzilla.suse.com/927089", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "moderate", }, ], title: "CVE-2015-3042", }, { cve: "CVE-2015-3043", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-3043", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, as exploited in the wild in April 2015, a different vulnerability than CVE-2015-0347, CVE-2015-0350, CVE-2015-0352, CVE-2015-0353, CVE-2015-0354, CVE-2015-0355, CVE-2015-0360, CVE-2015-3038, CVE-2015-3041, and CVE-2015-3042.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-3043", url: "https://www.suse.com/security/cve/CVE-2015-3043", }, { category: "external", summary: "SUSE Bug 927089 for CVE-2015-3043", url: "https://bugzilla.suse.com/927089", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 9.8, baseSeverity: "CRITICAL", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "moderate", }, ], title: "CVE-2015-3043", }, { cve: "CVE-2015-3044", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-3044", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to bypass intended access restrictions and obtain sensitive information via unspecified vectors.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-3044", url: "https://www.suse.com/security/cve/CVE-2015-3044", }, { category: "external", summary: "SUSE Bug 927089 for CVE-2015-3044", url: "https://bugzilla.suse.com/927089", }, { category: "external", summary: "SUSE Bug 930677 for CVE-2015-3044", url: "https://bugzilla.suse.com/930677", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "moderate", }, ], title: "CVE-2015-3044", }, { cve: "CVE-2015-3077", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-3077", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.289 and 14.x through 17.x before 17.0.0.188 on Windows and OS X and before 11.2.202.460 on Linux, Adobe AIR before 17.0.0.172, Adobe AIR SDK before 17.0.0.172, and Adobe AIR SDK & Compiler before 17.0.0.172 allow attackers to execute arbitrary code by leveraging an unspecified \"type confusion,\" a different vulnerability than CVE-2015-3084 and CVE-2015-3086.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-3077", url: "https://www.suse.com/security/cve/CVE-2015-3077", }, { category: "external", summary: "SUSE Bug 930677 for CVE-2015-3077", url: "https://bugzilla.suse.com/930677", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2015-3077", }, { cve: "CVE-2015-3078", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-3078", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.289 and 14.x through 17.x before 17.0.0.188 on Windows and OS X and before 11.2.202.460 on Linux, Adobe AIR before 17.0.0.172, Adobe AIR SDK before 17.0.0.172, and Adobe AIR SDK & Compiler before 17.0.0.172 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-3089, CVE-2015-3090, and CVE-2015-3093.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-3078", url: "https://www.suse.com/security/cve/CVE-2015-3078", }, { category: "external", summary: "SUSE Bug 930677 for CVE-2015-3078", url: "https://bugzilla.suse.com/930677", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2015-3078", }, { cve: "CVE-2015-3079", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-3079", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.289 and 14.x through 17.x before 17.0.0.188 on Windows and OS X and before 11.2.202.460 on Linux, Adobe AIR before 17.0.0.172, Adobe AIR SDK before 17.0.0.172, and Adobe AIR SDK & Compiler before 17.0.0.172 allow attackers to bypass intended access restrictions and obtain sensitive information via unspecified vectors.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-3079", url: "https://www.suse.com/security/cve/CVE-2015-3079", }, { category: "external", summary: "SUSE Bug 930677 for CVE-2015-3079", url: "https://bugzilla.suse.com/930677", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "moderate", }, ], title: "CVE-2015-3079", }, { cve: "CVE-2015-3080", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-3080", }, ], notes: [ { category: "general", text: "Use-after-free vulnerability in Adobe Flash Player before 13.0.0.289 and 14.x through 17.x before 17.0.0.188 on Windows and OS X and before 11.2.202.460 on Linux, Adobe AIR before 17.0.0.172, Adobe AIR SDK before 17.0.0.172, and Adobe AIR SDK & Compiler before 17.0.0.172 allows attackers to execute arbitrary code via unspecified vectors.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-3080", url: "https://www.suse.com/security/cve/CVE-2015-3080", }, { category: "external", summary: "SUSE Bug 930677 for CVE-2015-3080", url: "https://bugzilla.suse.com/930677", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2015-3080", }, { cve: "CVE-2015-3081", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-3081", }, ], notes: [ { category: "general", text: "Race condition in Adobe Flash Player before 13.0.0.289 and 14.x through 17.x before 17.0.0.188 on Windows and OS X and before 11.2.202.460 on Linux, Adobe AIR before 17.0.0.172, Adobe AIR SDK before 17.0.0.172, and Adobe AIR SDK & Compiler before 17.0.0.172 allows attackers to bypass the Internet Explorer Protected Mode protection mechanism via unspecified vectors.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-3081", url: "https://www.suse.com/security/cve/CVE-2015-3081", }, { category: "external", summary: "SUSE Bug 930677 for CVE-2015-3081", url: "https://bugzilla.suse.com/930677", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "moderate", }, ], title: "CVE-2015-3081", }, { cve: "CVE-2015-3082", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-3082", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.289 and 14.x through 17.x before 17.0.0.188 on Windows and OS X and before 11.2.202.460 on Linux, Adobe AIR before 17.0.0.172, Adobe AIR SDK before 17.0.0.172, and Adobe AIR SDK & Compiler before 17.0.0.172 allow remote attackers to bypass intended restrictions on filesystem write operations via unspecified vectors, a different vulnerability than CVE-2015-3083 and CVE-2015-3085.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-3082", url: "https://www.suse.com/security/cve/CVE-2015-3082", }, { category: "external", summary: "SUSE Bug 930677 for CVE-2015-3082", url: "https://bugzilla.suse.com/930677", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2015-3082", }, { cve: "CVE-2015-3083", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-3083", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.289 and 14.x through 17.x before 17.0.0.188 on Windows and OS X and before 11.2.202.460 on Linux, Adobe AIR before 17.0.0.172, Adobe AIR SDK before 17.0.0.172, and Adobe AIR SDK & Compiler before 17.0.0.172 allow remote attackers to bypass intended restrictions on filesystem write operations via unspecified vectors, a different vulnerability than CVE-2015-3082 and CVE-2015-3085.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-3083", url: "https://www.suse.com/security/cve/CVE-2015-3083", }, { category: "external", summary: "SUSE Bug 930677 for CVE-2015-3083", url: "https://bugzilla.suse.com/930677", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2015-3083", }, { cve: "CVE-2015-3084", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-3084", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.289 and 14.x through 17.x before 17.0.0.188 on Windows and OS X and before 11.2.202.460 on Linux, Adobe AIR before 17.0.0.172, Adobe AIR SDK before 17.0.0.172, and Adobe AIR SDK & Compiler before 17.0.0.172 allow attackers to execute arbitrary code by leveraging an unspecified \"type confusion,\" a different vulnerability than CVE-2015-3077 and CVE-2015-3086.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-3084", url: "https://www.suse.com/security/cve/CVE-2015-3084", }, { category: "external", summary: "SUSE Bug 930677 for CVE-2015-3084", url: "https://bugzilla.suse.com/930677", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2015-3084", }, { cve: "CVE-2015-3085", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-3085", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.289 and 14.x through 17.x before 17.0.0.188 on Windows and OS X and before 11.2.202.460 on Linux, Adobe AIR before 17.0.0.172, Adobe AIR SDK before 17.0.0.172, and Adobe AIR SDK & Compiler before 17.0.0.172 allow remote attackers to bypass intended restrictions on filesystem write operations via unspecified vectors, a different vulnerability than CVE-2015-3082 and CVE-2015-3083.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-3085", url: "https://www.suse.com/security/cve/CVE-2015-3085", }, { category: "external", summary: "SUSE Bug 930677 for CVE-2015-3085", url: "https://bugzilla.suse.com/930677", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2015-3085", }, { cve: "CVE-2015-3086", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-3086", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.289 and 14.x through 17.x before 17.0.0.188 on Windows and OS X and before 11.2.202.460 on Linux, Adobe AIR before 17.0.0.172, Adobe AIR SDK before 17.0.0.172, and Adobe AIR SDK & Compiler before 17.0.0.172 allow attackers to execute arbitrary code by leveraging an unspecified \"type confusion,\" a different vulnerability than CVE-2015-3077 and CVE-2015-3084.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-3086", url: "https://www.suse.com/security/cve/CVE-2015-3086", }, { category: "external", summary: "SUSE Bug 930677 for CVE-2015-3086", url: "https://bugzilla.suse.com/930677", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2015-3086", }, { cve: "CVE-2015-3087", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-3087", }, ], notes: [ { category: "general", text: "Integer overflow in Adobe Flash Player before 13.0.0.289 and 14.x through 17.x before 17.0.0.188 on Windows and OS X and before 11.2.202.460 on Linux, Adobe AIR before 17.0.0.172, Adobe AIR SDK before 17.0.0.172, and Adobe AIR SDK & Compiler before 17.0.0.172 allows attackers to execute arbitrary code via unspecified vectors.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-3087", url: "https://www.suse.com/security/cve/CVE-2015-3087", }, { category: "external", summary: "SUSE Bug 930677 for CVE-2015-3087", url: "https://bugzilla.suse.com/930677", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2015-3087", }, { cve: "CVE-2015-3088", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-3088", }, ], notes: [ { category: "general", text: "Heap-based buffer overflow in Adobe Flash Player before 13.0.0.289 and 14.x through 17.x before 17.0.0.188 on Windows and OS X and before 11.2.202.460 on Linux, Adobe AIR before 17.0.0.172, Adobe AIR SDK before 17.0.0.172, and Adobe AIR SDK & Compiler before 17.0.0.172 allows attackers to execute arbitrary code via unspecified vectors.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-3088", url: "https://www.suse.com/security/cve/CVE-2015-3088", }, { category: "external", summary: "SUSE Bug 930677 for CVE-2015-3088", url: "https://bugzilla.suse.com/930677", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2015-3088", }, { cve: "CVE-2015-3089", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-3089", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.289 and 14.x through 17.x before 17.0.0.188 on Windows and OS X and before 11.2.202.460 on Linux, Adobe AIR before 17.0.0.172, Adobe AIR SDK before 17.0.0.172, and Adobe AIR SDK & Compiler before 17.0.0.172 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-3078, CVE-2015-3090, and CVE-2015-3093.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-3089", url: "https://www.suse.com/security/cve/CVE-2015-3089", }, { category: "external", summary: "SUSE Bug 930677 for CVE-2015-3089", url: "https://bugzilla.suse.com/930677", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2015-3089", }, { cve: "CVE-2015-3090", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-3090", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.289 and 14.x through 17.x before 17.0.0.188 on Windows and OS X and before 11.2.202.460 on Linux, Adobe AIR before 17.0.0.172, Adobe AIR SDK before 17.0.0.172, and Adobe AIR SDK & Compiler before 17.0.0.172 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-3078, CVE-2015-3089, and CVE-2015-3093.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-3090", url: "https://www.suse.com/security/cve/CVE-2015-3090", }, { category: "external", summary: "SUSE Bug 930677 for CVE-2015-3090", url: "https://bugzilla.suse.com/930677", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2015-3090", }, { cve: "CVE-2015-3091", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-3091", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.289 and 14.x through 17.x before 17.0.0.188 on Windows and OS X and before 11.2.202.460 on Linux, Adobe AIR before 17.0.0.172, Adobe AIR SDK before 17.0.0.172, and Adobe AIR SDK & Compiler before 17.0.0.172 do not properly restrict discovery of memory addresses, which allows attackers to bypass the ASLR protection mechanism via unspecified vectors, a different vulnerability than CVE-2015-3092.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-3091", url: "https://www.suse.com/security/cve/CVE-2015-3091", }, { category: "external", summary: "SUSE Bug 930677 for CVE-2015-3091", url: "https://bugzilla.suse.com/930677", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2015-3091", }, { cve: "CVE-2015-3092", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-3092", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.289 and 14.x through 17.x before 17.0.0.188 on Windows and OS X and before 11.2.202.460 on Linux, Adobe AIR before 17.0.0.172, Adobe AIR SDK before 17.0.0.172, and Adobe AIR SDK & Compiler before 17.0.0.172 do not properly restrict discovery of memory addresses, which allows attackers to bypass the ASLR protection mechanism via unspecified vectors, a different vulnerability than CVE-2015-3091.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-3092", url: "https://www.suse.com/security/cve/CVE-2015-3092", }, { category: "external", summary: "SUSE Bug 930677 for CVE-2015-3092", url: "https://bugzilla.suse.com/930677", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2015-3092", }, { cve: "CVE-2015-3093", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-3093", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.289 and 14.x through 17.x before 17.0.0.188 on Windows and OS X and before 11.2.202.460 on Linux, Adobe AIR before 17.0.0.172, Adobe AIR SDK before 17.0.0.172, and Adobe AIR SDK & Compiler before 17.0.0.172 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-3078, CVE-2015-3089, and CVE-2015-3090.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-3093", url: "https://www.suse.com/security/cve/CVE-2015-3093", }, { category: "external", summary: "SUSE Bug 930677 for CVE-2015-3093", url: "https://bugzilla.suse.com/930677", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2015-3093", }, { cve: "CVE-2015-3096", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-3096", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.292 and 14.x through 18.x before 18.0.0.160 on Windows and OS X and before 11.2.202.466 on Linux, Adobe AIR before 18.0.0.144 on Windows and before 18.0.0.143 on OS X and Android, Adobe AIR SDK before 18.0.0.144 on Windows and before 18.0.0.143 on OS X, and Adobe AIR SDK & Compiler before 18.0.0.144 on Windows and before 18.0.0.143 on OS X allow remote attackers to bypass a CVE-2014-5333 protection mechanism via unspecified vectors.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-3096", url: "https://www.suse.com/security/cve/CVE-2015-3096", }, { category: "external", summary: "SUSE Bug 934088 for CVE-2015-3096", url: "https://bugzilla.suse.com/934088", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "important", }, ], title: "CVE-2015-3096", }, { cve: "CVE-2015-3098", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-3098", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.292 and 14.x through 18.x before 18.0.0.160 on Windows and OS X and before 11.2.202.466 on Linux, Adobe AIR before 18.0.0.144 on Windows and before 18.0.0.143 on OS X and Android, Adobe AIR SDK before 18.0.0.144 on Windows and before 18.0.0.143 on OS X, and Adobe AIR SDK & Compiler before 18.0.0.144 on Windows and before 18.0.0.143 on OS X allow remote attackers to bypass the Same Origin Policy via unspecified vectors, a different vulnerability than CVE-2015-3099 and CVE-2015-3102.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-3098", url: "https://www.suse.com/security/cve/CVE-2015-3098", }, { category: "external", summary: "SUSE Bug 934088 for CVE-2015-3098", url: "https://bugzilla.suse.com/934088", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "important", }, ], title: "CVE-2015-3098", }, { cve: "CVE-2015-3099", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-3099", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.292 and 14.x through 18.x before 18.0.0.160 on Windows and OS X and before 11.2.202.466 on Linux, Adobe AIR before 18.0.0.144 on Windows and before 18.0.0.143 on OS X and Android, Adobe AIR SDK before 18.0.0.144 on Windows and before 18.0.0.143 on OS X, and Adobe AIR SDK & Compiler before 18.0.0.144 on Windows and before 18.0.0.143 on OS X allow remote attackers to bypass the Same Origin Policy via unspecified vectors, a different vulnerability than CVE-2015-3098 and CVE-2015-3102.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-3099", url: "https://www.suse.com/security/cve/CVE-2015-3099", }, { category: "external", summary: "SUSE Bug 934088 for CVE-2015-3099", url: "https://bugzilla.suse.com/934088", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "important", }, ], title: "CVE-2015-3099", }, { cve: "CVE-2015-3100", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-3100", }, ], notes: [ { category: "general", text: "Stack-based buffer overflow in Adobe Flash Player before 13.0.0.292 and 14.x through 18.x before 18.0.0.160 on Windows and OS X and before 11.2.202.466 on Linux, Adobe AIR before 18.0.0.144 on Windows and before 18.0.0.143 on OS X and Android, Adobe AIR SDK before 18.0.0.144 on Windows and before 18.0.0.143 on OS X, and Adobe AIR SDK & Compiler before 18.0.0.144 on Windows and before 18.0.0.143 on OS X allows attackers to execute arbitrary code via unspecified vectors.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-3100", url: "https://www.suse.com/security/cve/CVE-2015-3100", }, { category: "external", summary: "SUSE Bug 934088 for CVE-2015-3100", url: "https://bugzilla.suse.com/934088", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "important", }, ], title: "CVE-2015-3100", }, { cve: "CVE-2015-3102", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-3102", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.292 and 14.x through 18.x before 18.0.0.160 on Windows and OS X and before 11.2.202.466 on Linux, Adobe AIR before 18.0.0.144 on Windows and before 18.0.0.143 on OS X and Android, Adobe AIR SDK before 18.0.0.144 on Windows and before 18.0.0.143 on OS X, and Adobe AIR SDK & Compiler before 18.0.0.144 on Windows and before 18.0.0.143 on OS X allow remote attackers to bypass the Same Origin Policy via unspecified vectors, a different vulnerability than CVE-2015-3098 and CVE-2015-3099.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-3102", url: "https://www.suse.com/security/cve/CVE-2015-3102", }, { category: "external", summary: "SUSE Bug 934088 for CVE-2015-3102", url: "https://bugzilla.suse.com/934088", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "important", }, ], title: "CVE-2015-3102", }, { cve: "CVE-2015-3103", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-3103", }, ], notes: [ { category: "general", text: "Use-after-free vulnerability in Adobe Flash Player before 13.0.0.292 and 14.x through 18.x before 18.0.0.160 on Windows and OS X and before 11.2.202.466 on Linux, Adobe AIR before 18.0.0.144 on Windows and before 18.0.0.143 on OS X and Android, Adobe AIR SDK before 18.0.0.144 on Windows and before 18.0.0.143 on OS X, and Adobe AIR SDK & Compiler before 18.0.0.144 on Windows and before 18.0.0.143 on OS X allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-3106 and CVE-2015-3107.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-3103", url: "https://www.suse.com/security/cve/CVE-2015-3103", }, { category: "external", summary: "SUSE Bug 934088 for CVE-2015-3103", url: "https://bugzilla.suse.com/934088", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "important", }, ], title: "CVE-2015-3103", }, { cve: "CVE-2015-3106", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-3106", }, ], notes: [ { category: "general", text: "Use-after-free vulnerability in Adobe Flash Player before 13.0.0.292 and 14.x through 18.x before 18.0.0.160 on Windows and OS X and before 11.2.202.466 on Linux, Adobe AIR before 18.0.0.144 on Windows and before 18.0.0.143 on OS X and Android, Adobe AIR SDK before 18.0.0.144 on Windows and before 18.0.0.143 on OS X, and Adobe AIR SDK & Compiler before 18.0.0.144 on Windows and before 18.0.0.143 on OS X allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-3103 and CVE-2015-3107.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-3106", url: "https://www.suse.com/security/cve/CVE-2015-3106", }, { category: "external", summary: "SUSE Bug 934088 for CVE-2015-3106", url: "https://bugzilla.suse.com/934088", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "important", }, ], title: "CVE-2015-3106", }, { cve: "CVE-2015-3107", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-3107", }, ], notes: [ { category: "general", text: "Use-after-free vulnerability in Adobe Flash Player before 13.0.0.292 and 14.x through 18.x before 18.0.0.160 on Windows and OS X and before 11.2.202.466 on Linux, Adobe AIR before 18.0.0.144 on Windows and before 18.0.0.143 on OS X and Android, Adobe AIR SDK before 18.0.0.144 on Windows and before 18.0.0.143 on OS X, and Adobe AIR SDK & Compiler before 18.0.0.144 on Windows and before 18.0.0.143 on OS X allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-3103 and CVE-2015-3106.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-3107", url: "https://www.suse.com/security/cve/CVE-2015-3107", }, { category: "external", summary: "SUSE Bug 934088 for CVE-2015-3107", url: "https://bugzilla.suse.com/934088", }, { category: "external", summary: "SUSE Bug 941239 for CVE-2015-3107", url: "https://bugzilla.suse.com/941239", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "important", }, ], title: "CVE-2015-3107", }, { cve: "CVE-2015-3108", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-3108", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.292 and 14.x through 18.x before 18.0.0.160 on Windows and OS X and before 11.2.202.466 on Linux, Adobe AIR before 18.0.0.144 on Windows and before 18.0.0.143 on OS X and Android, Adobe AIR SDK before 18.0.0.144 on Windows and before 18.0.0.143 on OS X, and Adobe AIR SDK & Compiler before 18.0.0.144 on Windows and before 18.0.0.143 on OS X do not properly restrict discovery of memory addresses, which allows attackers to bypass the ASLR protection mechanism via unspecified vectors.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-3108", url: "https://www.suse.com/security/cve/CVE-2015-3108", }, { category: "external", summary: "SUSE Bug 934088 for CVE-2015-3108", url: "https://bugzilla.suse.com/934088", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "important", }, ], title: "CVE-2015-3108", }, { cve: "CVE-2015-3113", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-3113", }, ], notes: [ { category: "general", text: "Heap-based buffer overflow in Adobe Flash Player before 13.0.0.296 and 14.x through 18.x before 18.0.0.194 on Windows and OS X and before 11.2.202.468 on Linux allows remote attackers to execute arbitrary code via unspecified vectors, as exploited in the wild in June 2015.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-3113", url: "https://www.suse.com/security/cve/CVE-2015-3113", }, { category: "external", summary: "SUSE Bug 935701 for CVE-2015-3113", url: "https://bugzilla.suse.com/935701", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 9.8, baseSeverity: "CRITICAL", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "important", }, ], title: "CVE-2015-3113", }, ], }
suse-su-2015:0239-1
Vulnerability from csaf_suse
Notes
{ document: { aggregate_severity: { namespace: "https://www.suse.com/support/security/rating/", text: "moderate", }, category: "csaf_security_advisory", csaf_version: "2.0", distribution: { text: "Copyright 2024 SUSE LLC. All rights reserved.", tlp: { label: "WHITE", url: "https://www.first.org/tlp/", }, }, lang: "en", notes: [ { category: "summary", text: "Security update for flash-player", title: "Title of the patch", }, { category: "description", text: "\nflash-player was updated to version 11.2.202.418 to fix 18 security issues:\n\n * Memory corruption vulnerabilities that could lead to code execution\n (CVE-2014-0576, CVE-2014-0581, CVE-2014-8440, CVE-2014-8441).\n * Use-after-free vulnerabilities that could lead to code execution\n (CVE-2014-0573, CVE-2014-0588, CVE-2014-8438).\n * A double free vulnerability that could lead to code execution\n (CVE-2014-0574).\n * Type confusion vulnerabilities that could lead to code execution\n (CVE-2014-0577, CVE-2014-0584, CVE-2014-0585, CVE-2014-0586,\n CVE-2014-0590).\n * Heap buffer overflow vulnerabilities that could lead to code\n execution (CVE-2014-0582, CVE-2014-0589).\n * An information disclosure vulnerability that could be exploited to\n disclose session tokens (CVE-2014-8437).\n * A heap buffer overflow vulnerability that could be exploited to\n perform privilege escalation from low to medium integrity level\n (CVE-2014-0583).\n * A permission issue that could be exploited to perform privilege\n escalation from low to medium integrity level (CVE-2014-8442).\n\nFurther information can be found at \nhttp://helpx.adobe.com/security/products/flash-player/apsb14-24.html\n<http://helpx.adobe.com/security/products/flash-player/apsb14-24.html> .\n\nSecurity Issues:\n\n * CVE-2014-0576\n <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0576>\n * CVE-2014-0581\n <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0581>\n * CVE-2014-8440\n <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8440>\n * CVE-2014-8441\n <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8441>\n * CVE-2014-0573\n <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0573>\n * CVE-2014-0588\n <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0588>\n * CVE-2014-8438\n <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8438>\n * CVE-2014-0574\n <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0574>\n * CVE-2014-0577\n <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0577>\n * CVE-2014-0584\n <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0584>\n * CVE-2014-0585\n <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0585>\n * CVE-2014-0586\n <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0586>\n * CVE-2014-0590\n <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0590>\n * CVE-2014-0582\n <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0582>\n * CVE-2014-0589\n <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0589>\n * CVE-2014-8437\n <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8437>\n * CVE-2014-0583\n <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0583>\n * CVE-2014-8442\n <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8442>\n\n", title: "Description of the patch", }, { category: "details", text: "sledsp3-flash-player", title: "Patchnames", }, { category: "legal_disclaimer", text: "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).", title: "Terms of use", }, ], publisher: { category: "vendor", contact_details: "https://www.suse.com/support/security/contact/", name: "SUSE Product Security Team", namespace: "https://www.suse.com/", }, references: [ { category: "external", summary: "SUSE ratings", url: "https://www.suse.com/support/security/rating/", }, { category: "self", summary: "URL of this CSAF notice", url: "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2015_0239-1.json", }, { category: "self", summary: "URL for SUSE-SU-2015:0239-1", url: "https://www.suse.com/support/update/announcement/2015/suse-su-20150239-1/", }, { category: "self", summary: "E-Mail link for SUSE-SU-2015:0239-1", url: "https://lists.suse.com/pipermail/sle-security-updates/2015-February/001212.html", }, { category: "self", summary: "SUSE Bug 824512", url: "https://bugzilla.suse.com/824512", }, { category: "self", summary: "SUSE Bug 828810", url: "https://bugzilla.suse.com/828810", }, { category: "self", summary: "SUSE Bug 839897", url: "https://bugzilla.suse.com/839897", }, { category: "self", summary: "SUSE Bug 850220", url: "https://bugzilla.suse.com/850220", }, { category: "self", summary: "SUSE Bug 854881", url: "https://bugzilla.suse.com/854881", }, { category: "self", summary: "SUSE Bug 856386", url: "https://bugzilla.suse.com/856386", }, { category: "self", summary: "SUSE Bug 858822", url: "https://bugzilla.suse.com/858822", }, { category: "self", summary: "SUSE Bug 862288", url: "https://bugzilla.suse.com/862288", }, { category: "self", summary: "SUSE Bug 865021", url: "https://bugzilla.suse.com/865021", }, { category: "self", summary: "SUSE Bug 867808", url: "https://bugzilla.suse.com/867808", }, { category: "self", summary: "SUSE Bug 872692", url: "https://bugzilla.suse.com/872692", }, { category: "self", summary: "SUSE Bug 875577", url: "https://bugzilla.suse.com/875577", }, { category: "self", summary: "SUSE Bug 877649", url: "https://bugzilla.suse.com/877649", }, { category: "self", summary: "SUSE Bug 882187", url: "https://bugzilla.suse.com/882187", }, { category: "self", summary: "SUSE Bug 886472", url: "https://bugzilla.suse.com/886472", }, { category: "self", summary: "SUSE Bug 891688", url: "https://bugzilla.suse.com/891688", }, { category: "self", summary: "SUSE Bug 895856", url: "https://bugzilla.suse.com/895856", }, { category: "self", summary: "SUSE Bug 901334", url: "https://bugzilla.suse.com/901334", }, { category: "self", summary: "SUSE Bug 905032", url: "https://bugzilla.suse.com/905032", }, { category: "self", summary: "SUSE Bug 907257", url: "https://bugzilla.suse.com/907257", }, { category: "self", summary: "SUSE Bug 909219", url: "https://bugzilla.suse.com/909219", }, { category: "self", summary: "SUSE Bug 913057", url: "https://bugzilla.suse.com/913057", }, { category: "self", summary: "SUSE Bug 914333", url: "https://bugzilla.suse.com/914333", }, { category: "self", summary: "SUSE Bug 914463", url: "https://bugzilla.suse.com/914463", }, { category: "self", summary: "SUSE Bug 915918", url: "https://bugzilla.suse.com/915918", }, { category: "self", summary: "SUSE Bug 922033", url: "https://bugzilla.suse.com/922033", }, { category: "self", summary: "SUSE Bug 927089", url: "https://bugzilla.suse.com/927089", }, { category: "self", summary: "SUSE Bug 930677", url: "https://bugzilla.suse.com/930677", }, { category: "self", summary: "SUSE Bug 934088", url: "https://bugzilla.suse.com/934088", }, { category: "self", summary: "SUSE Bug 935701", url: "https://bugzilla.suse.com/935701", }, { category: "self", summary: "SUSE CVE CVE-2013-3343 page", url: "https://www.suse.com/security/cve/CVE-2013-3343/", }, { category: "self", summary: "SUSE CVE CVE-2013-3344 page", url: "https://www.suse.com/security/cve/CVE-2013-3344/", }, { category: "self", summary: "SUSE CVE CVE-2013-3345 page", url: "https://www.suse.com/security/cve/CVE-2013-3345/", }, { category: "self", summary: "SUSE CVE CVE-2013-3347 page", url: "https://www.suse.com/security/cve/CVE-2013-3347/", }, { category: "self", summary: "SUSE CVE CVE-2013-3361 page", url: "https://www.suse.com/security/cve/CVE-2013-3361/", }, { category: "self", summary: "SUSE CVE CVE-2013-3362 page", url: "https://www.suse.com/security/cve/CVE-2013-3362/", }, { category: "self", summary: "SUSE CVE CVE-2013-3363 page", url: "https://www.suse.com/security/cve/CVE-2013-3363/", }, { category: "self", summary: "SUSE CVE CVE-2013-5324 page", url: "https://www.suse.com/security/cve/CVE-2013-5324/", }, { category: "self", summary: "SUSE CVE CVE-2013-5329 page", url: "https://www.suse.com/security/cve/CVE-2013-5329/", }, { category: "self", summary: "SUSE CVE CVE-2013-5330 page", url: "https://www.suse.com/security/cve/CVE-2013-5330/", }, { category: "self", summary: "SUSE CVE CVE-2013-5331 page", url: "https://www.suse.com/security/cve/CVE-2013-5331/", }, { category: "self", summary: "SUSE CVE CVE-2013-5332 page", url: "https://www.suse.com/security/cve/CVE-2013-5332/", }, { category: "self", summary: "SUSE CVE CVE-2014-0491 page", url: "https://www.suse.com/security/cve/CVE-2014-0491/", }, { category: "self", summary: "SUSE CVE CVE-2014-0492 page", url: "https://www.suse.com/security/cve/CVE-2014-0492/", }, { category: "self", summary: "SUSE CVE CVE-2014-0497 page", url: "https://www.suse.com/security/cve/CVE-2014-0497/", }, { category: "self", summary: "SUSE CVE CVE-2014-0498 page", url: "https://www.suse.com/security/cve/CVE-2014-0498/", }, { category: "self", summary: "SUSE CVE CVE-2014-0499 page", url: "https://www.suse.com/security/cve/CVE-2014-0499/", }, { category: "self", summary: "SUSE CVE CVE-2014-0502 page", url: "https://www.suse.com/security/cve/CVE-2014-0502/", }, { category: "self", summary: "SUSE CVE CVE-2014-0503 page", url: "https://www.suse.com/security/cve/CVE-2014-0503/", }, { category: "self", summary: "SUSE CVE CVE-2014-0504 page", url: "https://www.suse.com/security/cve/CVE-2014-0504/", }, { category: "self", summary: "SUSE CVE CVE-2014-0506 page", url: "https://www.suse.com/security/cve/CVE-2014-0506/", }, { category: "self", summary: "SUSE CVE CVE-2014-0507 page", url: "https://www.suse.com/security/cve/CVE-2014-0507/", }, { category: "self", summary: "SUSE CVE CVE-2014-0508 page", url: "https://www.suse.com/security/cve/CVE-2014-0508/", }, { category: "self", summary: "SUSE CVE CVE-2014-0509 page", url: "https://www.suse.com/security/cve/CVE-2014-0509/", }, { category: "self", summary: "SUSE CVE CVE-2014-0510 page", url: "https://www.suse.com/security/cve/CVE-2014-0510/", }, { category: "self", summary: "SUSE CVE CVE-2014-0515 page", url: "https://www.suse.com/security/cve/CVE-2014-0515/", }, { category: "self", summary: "SUSE CVE CVE-2014-0516 page", url: "https://www.suse.com/security/cve/CVE-2014-0516/", }, { category: "self", summary: "SUSE CVE CVE-2014-0517 page", url: "https://www.suse.com/security/cve/CVE-2014-0517/", }, { category: "self", summary: "SUSE CVE CVE-2014-0518 page", url: "https://www.suse.com/security/cve/CVE-2014-0518/", }, { category: "self", summary: "SUSE CVE CVE-2014-0519 page", url: "https://www.suse.com/security/cve/CVE-2014-0519/", }, { category: "self", summary: "SUSE CVE CVE-2014-0520 page", url: "https://www.suse.com/security/cve/CVE-2014-0520/", }, { category: "self", summary: "SUSE CVE CVE-2014-0531 page", url: "https://www.suse.com/security/cve/CVE-2014-0531/", }, { category: "self", summary: "SUSE CVE CVE-2014-0532 page", url: "https://www.suse.com/security/cve/CVE-2014-0532/", }, { category: "self", summary: "SUSE CVE CVE-2014-0533 page", url: "https://www.suse.com/security/cve/CVE-2014-0533/", }, { category: "self", summary: "SUSE CVE CVE-2014-0534 page", url: "https://www.suse.com/security/cve/CVE-2014-0534/", }, { category: "self", summary: "SUSE CVE CVE-2014-0535 page", url: "https://www.suse.com/security/cve/CVE-2014-0535/", }, { category: "self", summary: "SUSE CVE CVE-2014-0536 page", url: "https://www.suse.com/security/cve/CVE-2014-0536/", }, { category: "self", summary: "SUSE CVE CVE-2014-0537 page", url: "https://www.suse.com/security/cve/CVE-2014-0537/", }, { category: "self", summary: "SUSE CVE CVE-2014-0538 page", url: "https://www.suse.com/security/cve/CVE-2014-0538/", }, { category: "self", summary: "SUSE CVE CVE-2014-0539 page", url: "https://www.suse.com/security/cve/CVE-2014-0539/", }, { category: "self", summary: "SUSE CVE CVE-2014-0540 page", url: "https://www.suse.com/security/cve/CVE-2014-0540/", }, { category: "self", summary: "SUSE CVE CVE-2014-0541 page", url: "https://www.suse.com/security/cve/CVE-2014-0541/", }, { category: "self", summary: "SUSE CVE CVE-2014-0542 page", url: "https://www.suse.com/security/cve/CVE-2014-0542/", }, { category: "self", summary: "SUSE CVE CVE-2014-0543 page", url: "https://www.suse.com/security/cve/CVE-2014-0543/", }, { category: "self", summary: "SUSE CVE CVE-2014-0544 page", url: "https://www.suse.com/security/cve/CVE-2014-0544/", }, { category: "self", summary: "SUSE CVE CVE-2014-0545 page", url: "https://www.suse.com/security/cve/CVE-2014-0545/", }, { category: "self", summary: "SUSE CVE CVE-2014-0547 page", url: "https://www.suse.com/security/cve/CVE-2014-0547/", }, { category: "self", summary: "SUSE CVE CVE-2014-0548 page", url: "https://www.suse.com/security/cve/CVE-2014-0548/", }, { category: "self", summary: "SUSE CVE CVE-2014-0549 page", url: "https://www.suse.com/security/cve/CVE-2014-0549/", }, { category: "self", summary: "SUSE CVE CVE-2014-0550 page", url: "https://www.suse.com/security/cve/CVE-2014-0550/", }, { category: "self", summary: "SUSE CVE CVE-2014-0551 page", url: "https://www.suse.com/security/cve/CVE-2014-0551/", }, { category: "self", summary: "SUSE CVE CVE-2014-0552 page", url: "https://www.suse.com/security/cve/CVE-2014-0552/", }, { category: "self", summary: "SUSE CVE CVE-2014-0553 page", url: "https://www.suse.com/security/cve/CVE-2014-0553/", }, { category: "self", summary: "SUSE CVE CVE-2014-0554 page", url: "https://www.suse.com/security/cve/CVE-2014-0554/", }, { category: "self", summary: "SUSE CVE CVE-2014-0555 page", url: "https://www.suse.com/security/cve/CVE-2014-0555/", }, { category: "self", summary: "SUSE CVE CVE-2014-0556 page", url: "https://www.suse.com/security/cve/CVE-2014-0556/", }, { category: "self", summary: "SUSE CVE CVE-2014-0557 page", url: "https://www.suse.com/security/cve/CVE-2014-0557/", }, { category: "self", summary: "SUSE CVE CVE-2014-0558 page", url: "https://www.suse.com/security/cve/CVE-2014-0558/", }, { category: "self", summary: "SUSE CVE CVE-2014-0559 page", url: "https://www.suse.com/security/cve/CVE-2014-0559/", }, { category: "self", summary: "SUSE CVE CVE-2014-0564 page", url: "https://www.suse.com/security/cve/CVE-2014-0564/", }, { category: "self", summary: "SUSE CVE CVE-2014-0569 page", url: "https://www.suse.com/security/cve/CVE-2014-0569/", }, { category: "self", summary: "SUSE CVE CVE-2014-0573 page", url: "https://www.suse.com/security/cve/CVE-2014-0573/", }, { category: "self", summary: "SUSE CVE CVE-2014-0574 page", url: "https://www.suse.com/security/cve/CVE-2014-0574/", }, { category: "self", summary: "SUSE CVE CVE-2014-0576 page", url: "https://www.suse.com/security/cve/CVE-2014-0576/", }, { category: "self", summary: "SUSE CVE CVE-2014-0577 page", url: "https://www.suse.com/security/cve/CVE-2014-0577/", }, { category: "self", summary: "SUSE CVE CVE-2014-0580 page", url: "https://www.suse.com/security/cve/CVE-2014-0580/", }, { category: "self", summary: "SUSE CVE CVE-2014-0581 page", url: "https://www.suse.com/security/cve/CVE-2014-0581/", }, { category: "self", summary: "SUSE CVE CVE-2014-0582 page", url: "https://www.suse.com/security/cve/CVE-2014-0582/", }, { category: "self", summary: "SUSE CVE CVE-2014-0583 page", url: "https://www.suse.com/security/cve/CVE-2014-0583/", }, { category: "self", summary: "SUSE CVE CVE-2014-0584 page", url: "https://www.suse.com/security/cve/CVE-2014-0584/", }, { category: "self", summary: "SUSE CVE CVE-2014-0585 page", url: "https://www.suse.com/security/cve/CVE-2014-0585/", }, { category: "self", summary: "SUSE CVE CVE-2014-0586 page", url: "https://www.suse.com/security/cve/CVE-2014-0586/", }, { category: "self", summary: "SUSE CVE CVE-2014-0587 page", url: "https://www.suse.com/security/cve/CVE-2014-0587/", }, { category: "self", summary: "SUSE CVE CVE-2014-0588 page", url: "https://www.suse.com/security/cve/CVE-2014-0588/", }, { category: "self", summary: "SUSE CVE CVE-2014-0589 page", url: "https://www.suse.com/security/cve/CVE-2014-0589/", }, { category: "self", summary: "SUSE CVE CVE-2014-0590 page", url: "https://www.suse.com/security/cve/CVE-2014-0590/", }, { category: "self", summary: "SUSE CVE CVE-2014-4671 page", url: "https://www.suse.com/security/cve/CVE-2014-4671/", }, { category: "self", summary: "SUSE CVE CVE-2014-8437 page", url: "https://www.suse.com/security/cve/CVE-2014-8437/", }, { category: "self", summary: "SUSE CVE CVE-2014-8438 page", url: "https://www.suse.com/security/cve/CVE-2014-8438/", }, { category: "self", summary: "SUSE CVE CVE-2014-8439 page", url: "https://www.suse.com/security/cve/CVE-2014-8439/", }, { category: "self", summary: "SUSE CVE CVE-2014-8440 page", url: "https://www.suse.com/security/cve/CVE-2014-8440/", }, { category: "self", summary: "SUSE CVE CVE-2014-8441 page", url: "https://www.suse.com/security/cve/CVE-2014-8441/", }, { category: "self", summary: "SUSE CVE CVE-2014-8442 page", url: "https://www.suse.com/security/cve/CVE-2014-8442/", }, { category: "self", summary: "SUSE CVE CVE-2014-8443 page", url: "https://www.suse.com/security/cve/CVE-2014-8443/", }, { category: "self", summary: "SUSE CVE CVE-2014-9162 page", url: "https://www.suse.com/security/cve/CVE-2014-9162/", }, { category: "self", summary: "SUSE CVE CVE-2014-9163 page", url: "https://www.suse.com/security/cve/CVE-2014-9163/", }, { category: "self", summary: "SUSE CVE CVE-2014-9164 page", url: "https://www.suse.com/security/cve/CVE-2014-9164/", }, { category: "self", summary: "SUSE CVE CVE-2015-0301 page", url: "https://www.suse.com/security/cve/CVE-2015-0301/", }, { category: "self", summary: "SUSE CVE CVE-2015-0302 page", url: "https://www.suse.com/security/cve/CVE-2015-0302/", }, { category: "self", summary: "SUSE CVE CVE-2015-0303 page", url: "https://www.suse.com/security/cve/CVE-2015-0303/", }, { category: "self", summary: "SUSE CVE CVE-2015-0304 page", url: "https://www.suse.com/security/cve/CVE-2015-0304/", }, { category: "self", summary: "SUSE CVE CVE-2015-0305 page", url: "https://www.suse.com/security/cve/CVE-2015-0305/", }, { category: "self", summary: "SUSE CVE CVE-2015-0306 page", url: "https://www.suse.com/security/cve/CVE-2015-0306/", }, { category: "self", summary: "SUSE CVE CVE-2015-0307 page", url: "https://www.suse.com/security/cve/CVE-2015-0307/", }, { category: "self", summary: "SUSE CVE CVE-2015-0308 page", url: "https://www.suse.com/security/cve/CVE-2015-0308/", }, { category: "self", summary: "SUSE CVE CVE-2015-0309 page", url: "https://www.suse.com/security/cve/CVE-2015-0309/", }, { category: "self", summary: "SUSE CVE CVE-2015-0310 page", url: "https://www.suse.com/security/cve/CVE-2015-0310/", }, { category: "self", summary: "SUSE CVE CVE-2015-0311 page", url: "https://www.suse.com/security/cve/CVE-2015-0311/", }, { category: "self", summary: "SUSE CVE CVE-2015-0313 page", url: "https://www.suse.com/security/cve/CVE-2015-0313/", }, { category: "self", summary: "SUSE CVE CVE-2015-0314 page", url: "https://www.suse.com/security/cve/CVE-2015-0314/", }, { category: "self", summary: "SUSE CVE CVE-2015-0315 page", url: "https://www.suse.com/security/cve/CVE-2015-0315/", }, { category: "self", summary: "SUSE CVE CVE-2015-0316 page", url: "https://www.suse.com/security/cve/CVE-2015-0316/", }, { category: "self", summary: "SUSE CVE CVE-2015-0317 page", url: "https://www.suse.com/security/cve/CVE-2015-0317/", }, { category: "self", summary: "SUSE CVE CVE-2015-0318 page", url: "https://www.suse.com/security/cve/CVE-2015-0318/", }, { category: "self", summary: "SUSE CVE CVE-2015-0319 page", url: "https://www.suse.com/security/cve/CVE-2015-0319/", }, { category: "self", summary: "SUSE CVE CVE-2015-0320 page", url: "https://www.suse.com/security/cve/CVE-2015-0320/", }, { category: "self", summary: "SUSE CVE CVE-2015-0321 page", url: "https://www.suse.com/security/cve/CVE-2015-0321/", }, { category: "self", summary: "SUSE CVE CVE-2015-0322 page", url: "https://www.suse.com/security/cve/CVE-2015-0322/", }, { category: "self", summary: "SUSE CVE CVE-2015-0323 page", url: "https://www.suse.com/security/cve/CVE-2015-0323/", }, { category: "self", summary: "SUSE CVE CVE-2015-0324 page", url: "https://www.suse.com/security/cve/CVE-2015-0324/", }, { category: "self", summary: "SUSE CVE CVE-2015-0325 page", url: "https://www.suse.com/security/cve/CVE-2015-0325/", }, { category: "self", summary: "SUSE CVE CVE-2015-0326 page", url: "https://www.suse.com/security/cve/CVE-2015-0326/", }, { category: "self", summary: "SUSE CVE CVE-2015-0327 page", url: "https://www.suse.com/security/cve/CVE-2015-0327/", }, { category: "self", summary: "SUSE CVE CVE-2015-0328 page", url: "https://www.suse.com/security/cve/CVE-2015-0328/", }, { category: "self", summary: "SUSE CVE CVE-2015-0329 page", url: "https://www.suse.com/security/cve/CVE-2015-0329/", }, { category: "self", summary: "SUSE CVE CVE-2015-0330 page", url: "https://www.suse.com/security/cve/CVE-2015-0330/", }, { category: "self", summary: "SUSE CVE CVE-2015-0332 page", url: "https://www.suse.com/security/cve/CVE-2015-0332/", }, { category: "self", summary: "SUSE CVE CVE-2015-0333 page", url: "https://www.suse.com/security/cve/CVE-2015-0333/", }, { category: "self", summary: "SUSE CVE CVE-2015-0334 page", url: "https://www.suse.com/security/cve/CVE-2015-0334/", }, { category: "self", summary: "SUSE CVE CVE-2015-0335 page", url: "https://www.suse.com/security/cve/CVE-2015-0335/", }, { category: "self", summary: "SUSE CVE CVE-2015-0336 page", url: "https://www.suse.com/security/cve/CVE-2015-0336/", }, { category: "self", summary: "SUSE CVE CVE-2015-0337 page", url: "https://www.suse.com/security/cve/CVE-2015-0337/", }, { category: "self", summary: "SUSE CVE CVE-2015-0338 page", url: "https://www.suse.com/security/cve/CVE-2015-0338/", }, { category: "self", summary: "SUSE CVE CVE-2015-0339 page", url: "https://www.suse.com/security/cve/CVE-2015-0339/", }, { category: "self", summary: "SUSE CVE CVE-2015-0340 page", url: "https://www.suse.com/security/cve/CVE-2015-0340/", }, { category: "self", summary: "SUSE CVE CVE-2015-0341 page", url: "https://www.suse.com/security/cve/CVE-2015-0341/", }, { category: "self", summary: "SUSE CVE CVE-2015-0342 page", url: "https://www.suse.com/security/cve/CVE-2015-0342/", }, { category: "self", summary: "SUSE CVE CVE-2015-0346 page", url: "https://www.suse.com/security/cve/CVE-2015-0346/", }, { category: "self", summary: "SUSE CVE CVE-2015-0347 page", url: "https://www.suse.com/security/cve/CVE-2015-0347/", }, { category: "self", summary: "SUSE CVE CVE-2015-0348 page", url: "https://www.suse.com/security/cve/CVE-2015-0348/", }, { category: "self", summary: "SUSE CVE CVE-2015-0349 page", url: "https://www.suse.com/security/cve/CVE-2015-0349/", }, { category: "self", summary: "SUSE CVE CVE-2015-0350 page", url: "https://www.suse.com/security/cve/CVE-2015-0350/", }, { category: "self", summary: "SUSE CVE CVE-2015-0351 page", url: "https://www.suse.com/security/cve/CVE-2015-0351/", }, { category: "self", summary: "SUSE CVE CVE-2015-0352 page", url: "https://www.suse.com/security/cve/CVE-2015-0352/", }, { category: "self", summary: "SUSE CVE CVE-2015-0353 page", url: "https://www.suse.com/security/cve/CVE-2015-0353/", }, { category: "self", summary: "SUSE CVE CVE-2015-0354 page", url: "https://www.suse.com/security/cve/CVE-2015-0354/", }, { category: "self", summary: "SUSE CVE CVE-2015-0355 page", url: "https://www.suse.com/security/cve/CVE-2015-0355/", }, { category: "self", summary: "SUSE CVE CVE-2015-0356 page", url: "https://www.suse.com/security/cve/CVE-2015-0356/", }, { category: "self", summary: "SUSE CVE CVE-2015-0357 page", url: "https://www.suse.com/security/cve/CVE-2015-0357/", }, { category: "self", summary: "SUSE CVE CVE-2015-0358 page", url: "https://www.suse.com/security/cve/CVE-2015-0358/", }, { category: "self", summary: "SUSE CVE CVE-2015-0359 page", url: "https://www.suse.com/security/cve/CVE-2015-0359/", }, { category: "self", summary: "SUSE CVE CVE-2015-0360 page", url: "https://www.suse.com/security/cve/CVE-2015-0360/", }, { category: "self", summary: "SUSE CVE CVE-2015-3038 page", url: "https://www.suse.com/security/cve/CVE-2015-3038/", }, { category: "self", summary: "SUSE CVE CVE-2015-3039 page", url: "https://www.suse.com/security/cve/CVE-2015-3039/", }, { category: "self", summary: "SUSE CVE CVE-2015-3040 page", url: "https://www.suse.com/security/cve/CVE-2015-3040/", }, { category: "self", summary: "SUSE CVE CVE-2015-3041 page", url: "https://www.suse.com/security/cve/CVE-2015-3041/", }, { category: "self", summary: "SUSE CVE CVE-2015-3042 page", url: "https://www.suse.com/security/cve/CVE-2015-3042/", }, { category: "self", summary: "SUSE CVE CVE-2015-3043 page", url: "https://www.suse.com/security/cve/CVE-2015-3043/", }, { category: "self", summary: "SUSE CVE CVE-2015-3044 page", url: "https://www.suse.com/security/cve/CVE-2015-3044/", }, { category: "self", summary: "SUSE CVE CVE-2015-3077 page", url: "https://www.suse.com/security/cve/CVE-2015-3077/", }, { category: "self", summary: "SUSE CVE CVE-2015-3078 page", url: "https://www.suse.com/security/cve/CVE-2015-3078/", }, { category: "self", summary: "SUSE CVE CVE-2015-3079 page", url: "https://www.suse.com/security/cve/CVE-2015-3079/", }, { category: "self", summary: "SUSE CVE CVE-2015-3080 page", url: "https://www.suse.com/security/cve/CVE-2015-3080/", }, { category: "self", summary: "SUSE CVE CVE-2015-3081 page", url: "https://www.suse.com/security/cve/CVE-2015-3081/", }, { category: "self", summary: "SUSE CVE CVE-2015-3082 page", url: "https://www.suse.com/security/cve/CVE-2015-3082/", }, { category: "self", summary: "SUSE CVE CVE-2015-3083 page", url: "https://www.suse.com/security/cve/CVE-2015-3083/", }, { category: "self", summary: "SUSE CVE CVE-2015-3084 page", url: "https://www.suse.com/security/cve/CVE-2015-3084/", }, { category: "self", summary: "SUSE CVE CVE-2015-3085 page", url: "https://www.suse.com/security/cve/CVE-2015-3085/", }, { category: "self", summary: "SUSE CVE CVE-2015-3086 page", url: "https://www.suse.com/security/cve/CVE-2015-3086/", }, { category: "self", summary: "SUSE CVE CVE-2015-3087 page", url: "https://www.suse.com/security/cve/CVE-2015-3087/", }, { category: "self", summary: "SUSE CVE CVE-2015-3088 page", url: "https://www.suse.com/security/cve/CVE-2015-3088/", }, { category: "self", summary: "SUSE CVE CVE-2015-3089 page", url: "https://www.suse.com/security/cve/CVE-2015-3089/", }, { category: "self", summary: "SUSE CVE CVE-2015-3090 page", url: "https://www.suse.com/security/cve/CVE-2015-3090/", }, { category: "self", summary: "SUSE CVE CVE-2015-3091 page", url: "https://www.suse.com/security/cve/CVE-2015-3091/", }, { category: "self", summary: "SUSE CVE CVE-2015-3092 page", url: "https://www.suse.com/security/cve/CVE-2015-3092/", }, { category: "self", summary: "SUSE CVE CVE-2015-3093 page", url: "https://www.suse.com/security/cve/CVE-2015-3093/", }, { category: "self", summary: "SUSE CVE CVE-2015-3096 page", url: "https://www.suse.com/security/cve/CVE-2015-3096/", }, { category: "self", summary: "SUSE CVE CVE-2015-3098 page", url: "https://www.suse.com/security/cve/CVE-2015-3098/", }, { category: "self", summary: "SUSE CVE CVE-2015-3099 page", url: "https://www.suse.com/security/cve/CVE-2015-3099/", }, { category: "self", summary: "SUSE CVE CVE-2015-3100 page", url: "https://www.suse.com/security/cve/CVE-2015-3100/", }, { category: "self", summary: "SUSE CVE CVE-2015-3102 page", url: "https://www.suse.com/security/cve/CVE-2015-3102/", }, { category: "self", summary: "SUSE CVE CVE-2015-3103 page", url: "https://www.suse.com/security/cve/CVE-2015-3103/", }, { category: "self", summary: "SUSE CVE CVE-2015-3106 page", url: "https://www.suse.com/security/cve/CVE-2015-3106/", }, { category: "self", summary: "SUSE CVE CVE-2015-3107 page", url: "https://www.suse.com/security/cve/CVE-2015-3107/", }, { category: "self", summary: "SUSE CVE CVE-2015-3108 page", url: "https://www.suse.com/security/cve/CVE-2015-3108/", }, { category: "self", summary: "SUSE CVE CVE-2015-3113 page", url: "https://www.suse.com/security/cve/CVE-2015-3113/", }, ], title: "Security update for flash-player", tracking: { current_release_date: "2014-11-14T12:52:02Z", generator: { date: "2014-11-14T12:52:02Z", engine: { name: "cve-database.git:bin/generate-csaf.pl", version: "1", }, }, id: "SUSE-SU-2015:0239-1", initial_release_date: "2014-11-14T12:52:02Z", revision_history: [ { date: "2014-11-14T12:52:02Z", number: "1", summary: "Current version", }, ], status: "final", version: "1", }, }, product_tree: { branches: [ { branches: [ { branches: [ { category: "product_version", name: "flash-player-11.2.202.418-0.3.1.i586", product: { name: "flash-player-11.2.202.418-0.3.1.i586", product_id: "flash-player-11.2.202.418-0.3.1.i586", }, }, { category: "product_version", name: "flash-player-gnome-11.2.202.418-0.3.1.i586", product: { name: "flash-player-gnome-11.2.202.418-0.3.1.i586", product_id: "flash-player-gnome-11.2.202.418-0.3.1.i586", }, }, { category: "product_version", name: "flash-player-kde4-11.2.202.418-0.3.1.i586", product: { name: "flash-player-kde4-11.2.202.418-0.3.1.i586", product_id: "flash-player-kde4-11.2.202.418-0.3.1.i586", }, }, ], category: "architecture", name: "i586", }, { branches: [ { category: "product_version", name: "flash-player-11.2.202.418-0.3.1.x86_64", product: { name: "flash-player-11.2.202.418-0.3.1.x86_64", product_id: "flash-player-11.2.202.418-0.3.1.x86_64", }, }, { category: "product_version", name: "flash-player-gnome-11.2.202.418-0.3.1.x86_64", product: { name: "flash-player-gnome-11.2.202.418-0.3.1.x86_64", product_id: "flash-player-gnome-11.2.202.418-0.3.1.x86_64", }, }, { category: "product_version", name: "flash-player-kde4-11.2.202.418-0.3.1.x86_64", product: { name: "flash-player-kde4-11.2.202.418-0.3.1.x86_64", product_id: "flash-player-kde4-11.2.202.418-0.3.1.x86_64", }, }, ], category: "architecture", name: "x86_64", }, { branches: [ { category: "product_name", name: "SUSE Linux Enterprise Desktop 11 SP3", product: { name: "SUSE Linux Enterprise Desktop 11 SP3", product_id: "SUSE Linux Enterprise Desktop 11 SP3", product_identification_helper: { cpe: "cpe:/o:suse:suse_sled:11:sp3", }, }, }, ], category: "product_family", name: "SUSE Linux Enterprise", }, ], category: "vendor", name: "SUSE", }, ], relationships: [ { category: "default_component_of", full_product_name: { name: "flash-player-11.2.202.418-0.3.1.i586 as component of SUSE Linux Enterprise Desktop 11 SP3", product_id: "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", }, product_reference: "flash-player-11.2.202.418-0.3.1.i586", relates_to_product_reference: "SUSE Linux Enterprise Desktop 11 SP3", }, { category: "default_component_of", full_product_name: { name: "flash-player-11.2.202.418-0.3.1.x86_64 as component of SUSE Linux Enterprise Desktop 11 SP3", product_id: "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", }, product_reference: "flash-player-11.2.202.418-0.3.1.x86_64", relates_to_product_reference: "SUSE Linux Enterprise Desktop 11 SP3", }, { category: "default_component_of", full_product_name: { name: "flash-player-gnome-11.2.202.418-0.3.1.i586 as component of SUSE Linux Enterprise Desktop 11 SP3", product_id: "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", }, product_reference: "flash-player-gnome-11.2.202.418-0.3.1.i586", relates_to_product_reference: "SUSE Linux Enterprise Desktop 11 SP3", }, { category: "default_component_of", full_product_name: { name: "flash-player-gnome-11.2.202.418-0.3.1.x86_64 as component of SUSE Linux Enterprise Desktop 11 SP3", product_id: "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", }, product_reference: "flash-player-gnome-11.2.202.418-0.3.1.x86_64", relates_to_product_reference: "SUSE Linux Enterprise Desktop 11 SP3", }, { category: "default_component_of", full_product_name: { name: "flash-player-kde4-11.2.202.418-0.3.1.i586 as component of SUSE Linux Enterprise Desktop 11 SP3", product_id: "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", }, product_reference: "flash-player-kde4-11.2.202.418-0.3.1.i586", relates_to_product_reference: "SUSE Linux Enterprise Desktop 11 SP3", }, { category: "default_component_of", full_product_name: { name: "flash-player-kde4-11.2.202.418-0.3.1.x86_64 as component of SUSE Linux Enterprise Desktop 11 SP3", product_id: "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", }, product_reference: "flash-player-kde4-11.2.202.418-0.3.1.x86_64", relates_to_product_reference: "SUSE Linux Enterprise Desktop 11 SP3", }, ], }, vulnerabilities: [ { cve: "CVE-2013-3343", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2013-3343", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 10.3.183.90 and 11.x before 11.7.700.224 on Windows, before 10.3.183.90 and 11.x before 11.7.700.225 on Mac OS X, before 10.3.183.90 and 11.x before 11.2.202.291 on Linux, before 11.1.111.59 on Android 2.x and 3.x, and before 11.1.115.63 on Android 4.x; Adobe AIR before 3.7.0.2090 on Windows and Android and before 3.7.0.2100 on Mac OS X; and Adobe AIR SDK & Compiler before 3.7.0.2090 on Windows and before 3.7.0.2100 on Mac OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2013-3343", url: "https://www.suse.com/security/cve/CVE-2013-3343", }, { category: "external", summary: "SUSE Bug 824512 for CVE-2013-3343", url: "https://bugzilla.suse.com/824512", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2013-3343", }, { cve: "CVE-2013-3344", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2013-3344", }, ], notes: [ { category: "general", text: "Heap-based buffer overflow in Adobe Flash Player before 11.7.700.232 and 11.8.x before 11.8.800.94 on Windows and Mac OS X, before 11.2.202.297 on Linux, before 11.1.111.64 on Android 2.x and 3.x, and before 11.1.115.69 on Android 4.x allows attackers to execute arbitrary code via unspecified vectors.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2013-3344", url: "https://www.suse.com/security/cve/CVE-2013-3344", }, { category: "external", summary: "SUSE Bug 828810 for CVE-2013-3344", url: "https://bugzilla.suse.com/828810", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2013-3344", }, { cve: "CVE-2013-3345", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2013-3345", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 11.7.700.232 and 11.8.x before 11.8.800.94 on Windows and Mac OS X, before 11.2.202.297 on Linux, before 11.1.111.64 on Android 2.x and 3.x, and before 11.1.115.69 on Android 4.x allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2013-3345", url: "https://www.suse.com/security/cve/CVE-2013-3345", }, { category: "external", summary: "SUSE Bug 828810 for CVE-2013-3345", url: "https://bugzilla.suse.com/828810", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "low", }, ], title: "CVE-2013-3345", }, { cve: "CVE-2013-3347", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2013-3347", }, ], notes: [ { category: "general", text: "Integer overflow in Adobe Flash Player before 11.7.700.232 and 11.8.x before 11.8.800.94 on Windows and Mac OS X, before 11.2.202.297 on Linux, before 11.1.111.64 on Android 2.x and 3.x, and before 11.1.115.69 on Android 4.x allows attackers to execute arbitrary code via PCM data that is not properly handled during resampling.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2013-3347", url: "https://www.suse.com/security/cve/CVE-2013-3347", }, { category: "external", summary: "SUSE Bug 828810 for CVE-2013-3347", url: "https://bugzilla.suse.com/828810", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2013-3347", }, { cve: "CVE-2013-3361", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2013-3361", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 11.7.700.242 and 11.8.x before 11.8.800.168 on Windows and Mac OS X, before 11.2.202.310 on Linux, before 11.1.111.73 on Android 2.x and 3.x, and before 11.1.115.81 on Android 4.x; Adobe AIR before 3.8.0.1430; and Adobe AIR SDK & Compiler before 3.8.0.1430 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2013-3362, CVE-2013-3363, and CVE-2013-5324.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2013-3361", url: "https://www.suse.com/security/cve/CVE-2013-3361", }, { category: "external", summary: "SUSE Bug 839897 for CVE-2013-3361", url: "https://bugzilla.suse.com/839897", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2013-3361", }, { cve: "CVE-2013-3362", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2013-3362", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 11.7.700.242 and 11.8.x before 11.8.800.168 on Windows and Mac OS X, before 11.2.202.310 on Linux, before 11.1.111.73 on Android 2.x and 3.x, and before 11.1.115.81 on Android 4.x; Adobe AIR before 3.8.0.1430; and Adobe AIR SDK & Compiler before 3.8.0.1430 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2013-3361, CVE-2013-3363, and CVE-2013-5324.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2013-3362", url: "https://www.suse.com/security/cve/CVE-2013-3362", }, { category: "external", summary: "SUSE Bug 839897 for CVE-2013-3362", url: "https://bugzilla.suse.com/839897", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2013-3362", }, { cve: "CVE-2013-3363", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2013-3363", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 11.7.700.242 and 11.8.x before 11.8.800.168 on Windows and Mac OS X, before 11.2.202.310 on Linux, before 11.1.111.73 on Android 2.x and 3.x, and before 11.1.115.81 on Android 4.x; Adobe AIR before 3.8.0.1430; and Adobe AIR SDK & Compiler before 3.8.0.1430 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2013-3361, CVE-2013-3362, and CVE-2013-5324.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2013-3363", url: "https://www.suse.com/security/cve/CVE-2013-3363", }, { category: "external", summary: "SUSE Bug 839897 for CVE-2013-3363", url: "https://bugzilla.suse.com/839897", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2013-3363", }, { cve: "CVE-2013-5324", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2013-5324", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 11.7.700.242 and 11.8.x before 11.8.800.168 on Windows and Mac OS X, before 11.2.202.310 on Linux, before 11.1.111.73 on Android 2.x and 3.x, and before 11.1.115.81 on Android 4.x; Adobe AIR before 3.8.0.1430; and Adobe AIR SDK & Compiler before 3.8.0.1430 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2013-3361, CVE-2013-3362, and CVE-2013-3363.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2013-5324", url: "https://www.suse.com/security/cve/CVE-2013-5324", }, { category: "external", summary: "SUSE Bug 839897 for CVE-2013-5324", url: "https://bugzilla.suse.com/839897", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2013-5324", }, { cve: "CVE-2013-5329", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2013-5329", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 11.7.700.252 and 11.8.x and 11.9.x before 11.9.900.152 on Windows and Mac OS X and before 11.2.202.327 on Linux, Adobe AIR before 3.9.0.1210, Adobe AIR SDK before 3.9.0.1210, and Adobe AIR SDK & Compiler before 3.9.0.1210 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2013-5330.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2013-5329", url: "https://www.suse.com/security/cve/CVE-2013-5329", }, { category: "external", summary: "SUSE Bug 850220 for CVE-2013-5329", url: "https://bugzilla.suse.com/850220", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "important", }, ], title: "CVE-2013-5329", }, { cve: "CVE-2013-5330", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2013-5330", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 11.7.700.252 and 11.8.x and 11.9.x before 11.9.900.152 on Windows and Mac OS X and before 11.2.202.327 on Linux, Adobe AIR before 3.9.0.1210, Adobe AIR SDK before 3.9.0.1210, and Adobe AIR SDK & Compiler before 3.9.0.1210 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2013-5329.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2013-5330", url: "https://www.suse.com/security/cve/CVE-2013-5330", }, { category: "external", summary: "SUSE Bug 850220 for CVE-2013-5330", url: "https://bugzilla.suse.com/850220", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "important", }, ], title: "CVE-2013-5330", }, { cve: "CVE-2013-5331", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2013-5331", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 11.7.700.257 and 11.8.x and 11.9.x before 11.9.900.170 on Windows and Mac OS X and before 11.2.202.332 on Linux, Adobe AIR before 3.9.0.1380, Adobe AIR SDK before 3.9.0.1380, and Adobe AIR SDK & Compiler before 3.9.0.1380 allow remote attackers to execute arbitrary code via crafted .swf content that leverages an unspecified \"type confusion,\" as exploited in the wild in December 2013.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2013-5331", url: "https://www.suse.com/security/cve/CVE-2013-5331", }, { category: "external", summary: "SUSE Bug 854881 for CVE-2013-5331", url: "https://bugzilla.suse.com/854881", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2013-5331", }, { cve: "CVE-2013-5332", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2013-5332", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 11.7.700.257 and 11.8.x and 11.9.x before 11.9.900.170 on Windows and Mac OS X and before 11.2.202.332 on Linux, Adobe AIR before 3.9.0.1380, Adobe AIR SDK before 3.9.0.1380, and Adobe AIR SDK & Compiler before 3.9.0.1380 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2013-5332", url: "https://www.suse.com/security/cve/CVE-2013-5332", }, { category: "external", summary: "SUSE Bug 854881 for CVE-2013-5332", url: "https://bugzilla.suse.com/854881", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2013-5332", }, { cve: "CVE-2014-0491", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0491", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 11.7.700.260 and 11.8.x and 11.9.x before 12.0.0.38 on Windows and Mac OS X and before 11.2.202.335 on Linux, Adobe AIR before 4.0.0.1390, Adobe AIR SDK before 4.0.0.1390, and Adobe AIR SDK & Compiler before 4.0.0.1390 allow attackers to bypass unspecified protection mechanisms via unknown vectors.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0491", url: "https://www.suse.com/security/cve/CVE-2014-0491", }, { category: "external", summary: "SUSE Bug 858822 for CVE-2014-0491", url: "https://bugzilla.suse.com/858822", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2014-0491", }, { cve: "CVE-2014-0492", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0492", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 11.7.700.260 and 11.8.x and 11.9.x before 12.0.0.38 on Windows and Mac OS X and before 11.2.202.335 on Linux, Adobe AIR before 4.0.0.1390, Adobe AIR SDK before 4.0.0.1390, and Adobe AIR SDK & Compiler before 4.0.0.1390 allow attackers to defeat the ASLR protection mechanism by leveraging an \"address leak.\"", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0492", url: "https://www.suse.com/security/cve/CVE-2014-0492", }, { category: "external", summary: "SUSE Bug 858822 for CVE-2014-0492", url: "https://bugzilla.suse.com/858822", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2014-0492", }, { cve: "CVE-2014-0497", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0497", }, ], notes: [ { category: "general", text: "Integer underflow in Adobe Flash Player before 11.7.700.261 and 11.8.x through 12.0.x before 12.0.0.44 on Windows and Mac OS X, and before 11.2.202.336 on Linux, allows remote attackers to execute arbitrary code via unspecified vectors.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0497", url: "https://www.suse.com/security/cve/CVE-2014-0497", }, { category: "external", summary: "SUSE Bug 862288 for CVE-2014-0497", url: "https://bugzilla.suse.com/862288", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 9.8, baseSeverity: "CRITICAL", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2014-0497", }, { cve: "CVE-2014-0498", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0498", }, ], notes: [ { category: "general", text: "Stack-based buffer overflow in Adobe Flash Player before 11.7.700.269 and 11.8.x through 12.0.x before 12.0.0.70 on Windows and Mac OS X and before 11.2.202.341 on Linux, Adobe AIR before 4.0.0.1628 on Android, Adobe AIR SDK before 4.0.0.1628, and Adobe AIR SDK & Compiler before 4.0.0.1628 allows attackers to execute arbitrary code via unspecified vectors.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0498", url: "https://www.suse.com/security/cve/CVE-2014-0498", }, { category: "external", summary: "SUSE Bug 865021 for CVE-2014-0498", url: "https://bugzilla.suse.com/865021", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2014-0498", }, { cve: "CVE-2014-0499", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0499", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 11.7.700.269 and 11.8.x through 12.0.x before 12.0.0.70 on Windows and Mac OS X and before 11.2.202.341 on Linux, Adobe AIR before 4.0.0.1628 on Android, Adobe AIR SDK before 4.0.0.1628, and Adobe AIR SDK & Compiler before 4.0.0.1628 do not prevent access to address information, which makes it easier for attackers to bypass the ASLR protection mechanism via unspecified vectors.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0499", url: "https://www.suse.com/security/cve/CVE-2014-0499", }, { category: "external", summary: "SUSE Bug 865021 for CVE-2014-0499", url: "https://bugzilla.suse.com/865021", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2014-0499", }, { cve: "CVE-2014-0502", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0502", }, ], notes: [ { category: "general", text: "Double free vulnerability in Adobe Flash Player before 11.7.700.269 and 11.8.x through 12.0.x before 12.0.0.70 on Windows and Mac OS X and before 11.2.202.341 on Linux, Adobe AIR before 4.0.0.1628 on Android, Adobe AIR SDK before 4.0.0.1628, and Adobe AIR SDK & Compiler before 4.0.0.1628 allows remote attackers to execute arbitrary code via unspecified vectors, as exploited in the wild in February 2014.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0502", url: "https://www.suse.com/security/cve/CVE-2014-0502", }, { category: "external", summary: "SUSE Bug 865021 for CVE-2014-0502", url: "https://bugzilla.suse.com/865021", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 8.8, baseSeverity: "HIGH", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2014-0502", }, { cve: "CVE-2014-0503", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0503", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 11.7.700.272 and 11.8.x through 12.0.x before 12.0.0.77 on Windows and OS X, and before 11.2.202.346 on Linux, allows remote attackers to bypass the Same Origin Policy via unspecified vectors.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0503", url: "https://www.suse.com/security/cve/CVE-2014-0503", }, { category: "external", summary: "SUSE Bug 867808 for CVE-2014-0503", url: "https://bugzilla.suse.com/867808", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2014-0503", }, { cve: "CVE-2014-0504", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0504", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 11.7.700.272 and 11.8.x through 12.0.x before 12.0.0.77 on Windows and OS X, and before 11.2.202.346 on Linux, allows attackers to read the clipboard via unspecified vectors.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0504", url: "https://www.suse.com/security/cve/CVE-2014-0504", }, { category: "external", summary: "SUSE Bug 867808 for CVE-2014-0504", url: "https://bugzilla.suse.com/867808", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2014-0504", }, { cve: "CVE-2014-0506", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0506", }, ], notes: [ { category: "general", text: "Use-after-free vulnerability in Adobe Flash Player before 11.7.700.275 and 11.8.x through 13.0.x before 13.0.0.182 on Windows and OS X and before 11.2.202.350 on Linux, Adobe AIR before 13.0.0.83 on Android, Adobe AIR SDK before 13.0.0.83, and Adobe AIR SDK & Compiler before 13.0.0.83 allows remote attackers to execute arbitrary code, and possibly bypass an Internet Explorer sandbox protection mechanism, via unspecified vectors, as demonstrated by VUPEN during a Pwn2Own competition at CanSecWest 2014.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0506", url: "https://www.suse.com/security/cve/CVE-2014-0506", }, { category: "external", summary: "SUSE Bug 872692 for CVE-2014-0506", url: "https://bugzilla.suse.com/872692", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2014-0506", }, { cve: "CVE-2014-0507", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0507", }, ], notes: [ { category: "general", text: "Buffer overflow in Adobe Flash Player before 11.7.700.275 and 11.8.x through 13.0.x before 13.0.0.182 on Windows and OS X and before 11.2.202.350 on Linux, Adobe AIR before 13.0.0.83 on Android, Adobe AIR SDK before 13.0.0.83, and Adobe AIR SDK & Compiler before 13.0.0.83 allows attackers to execute arbitrary code via unspecified vectors.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0507", url: "https://www.suse.com/security/cve/CVE-2014-0507", }, { category: "external", summary: "SUSE Bug 872692 for CVE-2014-0507", url: "https://bugzilla.suse.com/872692", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2014-0507", }, { cve: "CVE-2014-0508", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0508", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 11.7.700.275 and 11.8.x through 13.0.x before 13.0.0.182 on Windows and OS X and before 11.2.202.350 on Linux, Adobe AIR before 13.0.0.83 on Android, Adobe AIR SDK before 13.0.0.83, and Adobe AIR SDK & Compiler before 13.0.0.83 allow attackers to bypass intended access restrictions and obtain sensitive information via unspecified vectors.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0508", url: "https://www.suse.com/security/cve/CVE-2014-0508", }, { category: "external", summary: "SUSE Bug 872692 for CVE-2014-0508", url: "https://bugzilla.suse.com/872692", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "moderate", }, ], title: "CVE-2014-0508", }, { cve: "CVE-2014-0509", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0509", }, ], notes: [ { category: "general", text: "Cross-site scripting (XSS) vulnerability in Adobe Flash Player before 11.7.700.275 and 11.8.x through 13.0.x before 13.0.0.182 on Windows and OS X and before 11.2.202.350 on Linux, Adobe AIR before 13.0.0.83 on Android, Adobe AIR SDK before 13.0.0.83, and Adobe AIR SDK & Compiler before 13.0.0.83 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0509", url: "https://www.suse.com/security/cve/CVE-2014-0509", }, { category: "external", summary: "SUSE Bug 872692 for CVE-2014-0509", url: "https://bugzilla.suse.com/872692", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "moderate", }, ], title: "CVE-2014-0509", }, { cve: "CVE-2014-0510", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0510", }, ], notes: [ { category: "general", text: "Heap-based buffer overflow in Adobe Flash Player 12.0.0.77 allows remote attackers to execute arbitrary code and bypass a sandbox protection mechanism via unspecified vectors, as demonstrated by Zeguang Zhao and Liang Chen during a Pwn2Own competition at CanSecWest 2014.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0510", url: "https://www.suse.com/security/cve/CVE-2014-0510", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2014-0510", }, { cve: "CVE-2014-0515", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0515", }, ], notes: [ { category: "general", text: "Buffer overflow in Adobe Flash Player before 11.7.700.279 and 11.8.x through 13.0.x before 13.0.0.206 on Windows and OS X, and before 11.2.202.356 on Linux, allows remote attackers to execute arbitrary code via unspecified vectors, as exploited in the wild in April 2014.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0515", url: "https://www.suse.com/security/cve/CVE-2014-0515", }, { category: "external", summary: "SUSE Bug 875577 for CVE-2014-0515", url: "https://bugzilla.suse.com/875577", }, { category: "external", summary: "SUSE Bug 886454 for CVE-2014-0515", url: "https://bugzilla.suse.com/886454", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2014-0515", }, { cve: "CVE-2014-0516", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0516", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.214 on Windows and OS X and before 11.2.202.359 on Linux, Adobe AIR SDK before 13.0.0.111, and Adobe AIR SDK & Compiler before 13.0.0.111 allow remote attackers to bypass the Same Origin Policy via unspecified vectors.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0516", url: "https://www.suse.com/security/cve/CVE-2014-0516", }, { category: "external", summary: "SUSE Bug 877649 for CVE-2014-0516", url: "https://bugzilla.suse.com/877649", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "important", }, ], title: "CVE-2014-0516", }, { cve: "CVE-2014-0517", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0517", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.214 on Windows and OS X and before 11.2.202.359 on Linux, Adobe AIR SDK before 13.0.0.111, and Adobe AIR SDK & Compiler before 13.0.0.111 allow attackers to bypass intended access restrictions via unspecified vectors, a different vulnerability than CVE-2014-0518, CVE-2014-0519, and CVE-2014-0520.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0517", url: "https://www.suse.com/security/cve/CVE-2014-0517", }, { category: "external", summary: "SUSE Bug 877649 for CVE-2014-0517", url: "https://bugzilla.suse.com/877649", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "important", }, ], title: "CVE-2014-0517", }, { cve: "CVE-2014-0518", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0518", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.214 on Windows and OS X and before 11.2.202.359 on Linux, Adobe AIR SDK before 13.0.0.111, and Adobe AIR SDK & Compiler before 13.0.0.111 allow attackers to bypass intended access restrictions via unspecified vectors, a different vulnerability than CVE-2014-0517, CVE-2014-0519, and CVE-2014-0520.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0518", url: "https://www.suse.com/security/cve/CVE-2014-0518", }, { category: "external", summary: "SUSE Bug 877649 for CVE-2014-0518", url: "https://bugzilla.suse.com/877649", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "important", }, ], title: "CVE-2014-0518", }, { cve: "CVE-2014-0519", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0519", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.214 on Windows and OS X and before 11.2.202.359 on Linux, Adobe AIR SDK before 13.0.0.111, and Adobe AIR SDK & Compiler before 13.0.0.111 allow attackers to bypass intended access restrictions via unspecified vectors, a different vulnerability than CVE-2014-0517, CVE-2014-0518, and CVE-2014-0520.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0519", url: "https://www.suse.com/security/cve/CVE-2014-0519", }, { category: "external", summary: "SUSE Bug 877649 for CVE-2014-0519", url: "https://bugzilla.suse.com/877649", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "important", }, ], title: "CVE-2014-0519", }, { cve: "CVE-2014-0520", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0520", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.214 on Windows and OS X and before 11.2.202.359 on Linux, Adobe AIR SDK before 13.0.0.111, and Adobe AIR SDK & Compiler before 13.0.0.111 allow attackers to bypass intended access restrictions via unspecified vectors, a different vulnerability than CVE-2014-0517, CVE-2014-0518, and CVE-2014-0519.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0520", url: "https://www.suse.com/security/cve/CVE-2014-0520", }, { category: "external", summary: "SUSE Bug 877649 for CVE-2014-0520", url: "https://bugzilla.suse.com/877649", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "important", }, ], title: "CVE-2014-0520", }, { cve: "CVE-2014-0531", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0531", }, ], notes: [ { category: "general", text: "Cross-site scripting (XSS) vulnerability in Adobe Flash Player before 13.0.0.223 and 14.x before 14.0.0.125 on Windows and OS X and before 11.2.202.378 on Linux, Adobe AIR before 14.0.0.110, Adobe AIR SDK before 14.0.0.110, and Adobe AIR SDK & Compiler before 14.0.0.110 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2014-0532 and CVE-2014-0533.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0531", url: "https://www.suse.com/security/cve/CVE-2014-0531", }, { category: "external", summary: "SUSE Bug 882187 for CVE-2014-0531", url: "https://bugzilla.suse.com/882187", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2014-0531", }, { cve: "CVE-2014-0532", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0532", }, ], notes: [ { category: "general", text: "Cross-site scripting (XSS) vulnerability in Adobe Flash Player before 13.0.0.223 and 14.x before 14.0.0.125 on Windows and OS X and before 11.2.202.378 on Linux, Adobe AIR before 14.0.0.110, Adobe AIR SDK before 14.0.0.110, and Adobe AIR SDK & Compiler before 14.0.0.110 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2014-0531 and CVE-2014-0533.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0532", url: "https://www.suse.com/security/cve/CVE-2014-0532", }, { category: "external", summary: "SUSE Bug 882187 for CVE-2014-0532", url: "https://bugzilla.suse.com/882187", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2014-0532", }, { cve: "CVE-2014-0533", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0533", }, ], notes: [ { category: "general", text: "Cross-site scripting (XSS) vulnerability in Adobe Flash Player before 13.0.0.223 and 14.x before 14.0.0.125 on Windows and OS X and before 11.2.202.378 on Linux, Adobe AIR before 14.0.0.110, Adobe AIR SDK before 14.0.0.110, and Adobe AIR SDK & Compiler before 14.0.0.110 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2014-0531 and CVE-2014-0532.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0533", url: "https://www.suse.com/security/cve/CVE-2014-0533", }, { category: "external", summary: "SUSE Bug 882187 for CVE-2014-0533", url: "https://bugzilla.suse.com/882187", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2014-0533", }, { cve: "CVE-2014-0534", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0534", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.223 and 14.x before 14.0.0.125 on Windows and OS X and before 11.2.202.378 on Linux, Adobe AIR before 14.0.0.110, Adobe AIR SDK before 14.0.0.110, and Adobe AIR SDK & Compiler before 14.0.0.110 allow attackers to bypass intended access restrictions via unspecified vectors, a different vulnerability than CVE-2014-0535.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0534", url: "https://www.suse.com/security/cve/CVE-2014-0534", }, { category: "external", summary: "SUSE Bug 882187 for CVE-2014-0534", url: "https://bugzilla.suse.com/882187", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2014-0534", }, { cve: "CVE-2014-0535", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0535", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.223 and 14.x before 14.0.0.125 on Windows and OS X and before 11.2.202.378 on Linux, Adobe AIR before 14.0.0.110, Adobe AIR SDK before 14.0.0.110, and Adobe AIR SDK & Compiler before 14.0.0.110 allow attackers to bypass intended access restrictions via unspecified vectors, a different vulnerability than CVE-2014-0534.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0535", url: "https://www.suse.com/security/cve/CVE-2014-0535", }, { category: "external", summary: "SUSE Bug 882187 for CVE-2014-0535", url: "https://bugzilla.suse.com/882187", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2014-0535", }, { cve: "CVE-2014-0536", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0536", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.223 and 14.x before 14.0.0.125 on Windows and OS X and before 11.2.202.378 on Linux, Adobe AIR before 14.0.0.110, Adobe AIR SDK before 14.0.0.110, and Adobe AIR SDK & Compiler before 14.0.0.110 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0536", url: "https://www.suse.com/security/cve/CVE-2014-0536", }, { category: "external", summary: "SUSE Bug 882187 for CVE-2014-0536", url: "https://bugzilla.suse.com/882187", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2014-0536", }, { cve: "CVE-2014-0537", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0537", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.231 and 14.x before 14.0.0.145 on Windows and OS X and before 11.2.202.394 on Linux, Adobe AIR before 14.0.0.137 on Android, Adobe AIR SDK before 14.0.0.137, and Adobe AIR SDK & Compiler before 14.0.0.137 allow attackers to bypass intended access restrictions via unspecified vectors, a different vulnerability than CVE-2014-0539.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0537", url: "https://www.suse.com/security/cve/CVE-2014-0537", }, { category: "external", summary: "SUSE Bug 886454 for CVE-2014-0537", url: "https://bugzilla.suse.com/886454", }, { category: "external", summary: "SUSE Bug 886472 for CVE-2014-0537", url: "https://bugzilla.suse.com/886472", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2014-0537", }, { cve: "CVE-2014-0538", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0538", }, ], notes: [ { category: "general", text: "Use-after-free vulnerability in Adobe Flash Player before 13.0.0.241 and 14.x before 14.0.0.176 on Windows and OS X and before 11.2.202.400 on Linux, Adobe AIR before 14.0.0.178 on Windows and OS X and before 14.0.0.179 on Android, Adobe AIR SDK before 14.0.0.178, and Adobe AIR SDK & Compiler before 14.0.0.178 allows attackers to execute arbitrary code via unspecified vectors.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0538", url: "https://www.suse.com/security/cve/CVE-2014-0538", }, { category: "external", summary: "SUSE Bug 891688 for CVE-2014-0538", url: "https://bugzilla.suse.com/891688", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2014-0538", }, { cve: "CVE-2014-0539", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0539", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.231 and 14.x before 14.0.0.145 on Windows and OS X and before 11.2.202.394 on Linux, Adobe AIR before 14.0.0.137 on Android, Adobe AIR SDK before 14.0.0.137, and Adobe AIR SDK & Compiler before 14.0.0.137 allow attackers to bypass intended access restrictions via unspecified vectors, a different vulnerability than CVE-2014-0537.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0539", url: "https://www.suse.com/security/cve/CVE-2014-0539", }, { category: "external", summary: "SUSE Bug 886454 for CVE-2014-0539", url: "https://bugzilla.suse.com/886454", }, { category: "external", summary: "SUSE Bug 886472 for CVE-2014-0539", url: "https://bugzilla.suse.com/886472", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2014-0539", }, { cve: "CVE-2014-0540", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0540", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.241 and 14.x before 14.0.0.176 on Windows and OS X and before 11.2.202.400 on Linux, Adobe AIR before 14.0.0.178 on Windows and OS X and before 14.0.0.179 on Android, Adobe AIR SDK before 14.0.0.178, and Adobe AIR SDK & Compiler before 14.0.0.178 do not properly restrict discovery of memory addresses, which allows attackers to bypass the ASLR protection mechanism via unspecified vectors, a different vulnerability than CVE-2014-0542, CVE-2014-0543, CVE-2014-0544, and CVE-2014-0545.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0540", url: "https://www.suse.com/security/cve/CVE-2014-0540", }, { category: "external", summary: "SUSE Bug 891688 for CVE-2014-0540", url: "https://bugzilla.suse.com/891688", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2014-0540", }, { cve: "CVE-2014-0541", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0541", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.241 and 14.x before 14.0.0.176 on Windows and OS X and before 11.2.202.400 on Linux, Adobe AIR before 14.0.0.178 on Windows and OS X and before 14.0.0.179 on Android, Adobe AIR SDK before 14.0.0.178, and Adobe AIR SDK & Compiler before 14.0.0.178 allow attackers to bypass intended access restrictions via unspecified vectors.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0541", url: "https://www.suse.com/security/cve/CVE-2014-0541", }, { category: "external", summary: "SUSE Bug 891688 for CVE-2014-0541", url: "https://bugzilla.suse.com/891688", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2014-0541", }, { cve: "CVE-2014-0542", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0542", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.241 and 14.x before 14.0.0.176 on Windows and OS X and before 11.2.202.400 on Linux, Adobe AIR before 14.0.0.178 on Windows and OS X and before 14.0.0.179 on Android, Adobe AIR SDK before 14.0.0.178, and Adobe AIR SDK & Compiler before 14.0.0.178 do not properly restrict discovery of memory addresses, which allows attackers to bypass the ASLR protection mechanism via unspecified vectors, a different vulnerability than CVE-2014-0540, CVE-2014-0543, CVE-2014-0544, and CVE-2014-0545.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0542", url: "https://www.suse.com/security/cve/CVE-2014-0542", }, { category: "external", summary: "SUSE Bug 891688 for CVE-2014-0542", url: "https://bugzilla.suse.com/891688", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2014-0542", }, { cve: "CVE-2014-0543", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0543", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.241 and 14.x before 14.0.0.176 on Windows and OS X and before 11.2.202.400 on Linux, Adobe AIR before 14.0.0.178 on Windows and OS X and before 14.0.0.179 on Android, Adobe AIR SDK before 14.0.0.178, and Adobe AIR SDK & Compiler before 14.0.0.178 do not properly restrict discovery of memory addresses, which allows attackers to bypass the ASLR protection mechanism via unspecified vectors, a different vulnerability than CVE-2014-0540, CVE-2014-0542, CVE-2014-0544, and CVE-2014-0545.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0543", url: "https://www.suse.com/security/cve/CVE-2014-0543", }, { category: "external", summary: "SUSE Bug 891688 for CVE-2014-0543", url: "https://bugzilla.suse.com/891688", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2014-0543", }, { cve: "CVE-2014-0544", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0544", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.241 and 14.x before 14.0.0.176 on Windows and OS X and before 11.2.202.400 on Linux, Adobe AIR before 14.0.0.178 on Windows and OS X and before 14.0.0.179 on Android, Adobe AIR SDK before 14.0.0.178, and Adobe AIR SDK & Compiler before 14.0.0.178 do not properly restrict discovery of memory addresses, which allows attackers to bypass the ASLR protection mechanism via unspecified vectors, a different vulnerability than CVE-2014-0540, CVE-2014-0542, CVE-2014-0543, and CVE-2014-0545.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0544", url: "https://www.suse.com/security/cve/CVE-2014-0544", }, { category: "external", summary: "SUSE Bug 891688 for CVE-2014-0544", url: "https://bugzilla.suse.com/891688", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2014-0544", }, { cve: "CVE-2014-0545", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0545", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.241 and 14.x before 14.0.0.176 on Windows and OS X and before 11.2.202.400 on Linux, Adobe AIR before 14.0.0.178 on Windows and OS X and before 14.0.0.179 on Android, Adobe AIR SDK before 14.0.0.178, and Adobe AIR SDK & Compiler before 14.0.0.178 do not properly restrict discovery of memory addresses, which allows attackers to bypass the ASLR protection mechanism via unspecified vectors, a different vulnerability than CVE-2014-0540, CVE-2014-0542, CVE-2014-0543, and CVE-2014-0544.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0545", url: "https://www.suse.com/security/cve/CVE-2014-0545", }, { category: "external", summary: "SUSE Bug 891688 for CVE-2014-0545", url: "https://bugzilla.suse.com/891688", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2014-0545", }, { cve: "CVE-2014-0547", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0547", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.244 and 14.x and 15.x before 15.0.0.152 on Windows and OS X and before 11.2.202.406 on Linux, Adobe AIR before 15.0.0.249 on Windows and OS X and before 15.0.0.252 on Android, Adobe AIR SDK before 15.0.0.249, and Adobe AIR SDK & Compiler before 15.0.0.249 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2014-0549, CVE-2014-0550, CVE-2014-0551, CVE-2014-0552, and CVE-2014-0555.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0547", url: "https://www.suse.com/security/cve/CVE-2014-0547", }, { category: "external", summary: "SUSE Bug 895856 for CVE-2014-0547", url: "https://bugzilla.suse.com/895856", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2014-0547", }, { cve: "CVE-2014-0548", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0548", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.244 and 14.x and 15.x before 15.0.0.152 on Windows and OS X and before 11.2.202.406 on Linux, Adobe AIR before 15.0.0.249 on Windows and OS X and before 15.0.0.252 on Android, Adobe AIR SDK before 15.0.0.249, and Adobe AIR SDK & Compiler before 15.0.0.249 allow remote attackers to bypass the Same Origin Policy via unspecified vectors.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0548", url: "https://www.suse.com/security/cve/CVE-2014-0548", }, { category: "external", summary: "SUSE Bug 895856 for CVE-2014-0548", url: "https://bugzilla.suse.com/895856", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2014-0548", }, { cve: "CVE-2014-0549", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0549", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.244 and 14.x and 15.x before 15.0.0.152 on Windows and OS X and before 11.2.202.406 on Linux, Adobe AIR before 15.0.0.249 on Windows and OS X and before 15.0.0.252 on Android, Adobe AIR SDK before 15.0.0.249, and Adobe AIR SDK & Compiler before 15.0.0.249 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2014-0547, CVE-2014-0550, CVE-2014-0551, CVE-2014-0552, and CVE-2014-0555.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0549", url: "https://www.suse.com/security/cve/CVE-2014-0549", }, { category: "external", summary: "SUSE Bug 895856 for CVE-2014-0549", url: "https://bugzilla.suse.com/895856", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2014-0549", }, { cve: "CVE-2014-0550", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0550", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.244 and 14.x and 15.x before 15.0.0.152 on Windows and OS X and before 11.2.202.406 on Linux, Adobe AIR before 15.0.0.249 on Windows and OS X and before 15.0.0.252 on Android, Adobe AIR SDK before 15.0.0.249, and Adobe AIR SDK & Compiler before 15.0.0.249 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2014-0547, CVE-2014-0549, CVE-2014-0551, CVE-2014-0552, and CVE-2014-0555.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0550", url: "https://www.suse.com/security/cve/CVE-2014-0550", }, { category: "external", summary: "SUSE Bug 895856 for CVE-2014-0550", url: "https://bugzilla.suse.com/895856", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2014-0550", }, { cve: "CVE-2014-0551", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0551", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.244 and 14.x and 15.x before 15.0.0.152 on Windows and OS X and before 11.2.202.406 on Linux, Adobe AIR before 15.0.0.249 on Windows and OS X and before 15.0.0.252 on Android, Adobe AIR SDK before 15.0.0.249, and Adobe AIR SDK & Compiler before 15.0.0.249 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2014-0547, CVE-2014-0549, CVE-2014-0550, CVE-2014-0552, and CVE-2014-0555.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0551", url: "https://www.suse.com/security/cve/CVE-2014-0551", }, { category: "external", summary: "SUSE Bug 895856 for CVE-2014-0551", url: "https://bugzilla.suse.com/895856", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2014-0551", }, { cve: "CVE-2014-0552", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0552", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.244 and 14.x and 15.x before 15.0.0.152 on Windows and OS X and before 11.2.202.406 on Linux, Adobe AIR before 15.0.0.249 on Windows and OS X and before 15.0.0.252 on Android, Adobe AIR SDK before 15.0.0.249, and Adobe AIR SDK & Compiler before 15.0.0.249 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2014-0547, CVE-2014-0549, CVE-2014-0550, CVE-2014-0551, and CVE-2014-0555.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0552", url: "https://www.suse.com/security/cve/CVE-2014-0552", }, { category: "external", summary: "SUSE Bug 895856 for CVE-2014-0552", url: "https://bugzilla.suse.com/895856", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2014-0552", }, { cve: "CVE-2014-0553", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0553", }, ], notes: [ { category: "general", text: "Use-after-free vulnerability in Adobe Flash Player before 13.0.0.244 and 14.x and 15.x before 15.0.0.152 on Windows and OS X and before 11.2.202.406 on Linux, Adobe AIR before 15.0.0.249 on Windows and OS X and before 15.0.0.252 on Android, Adobe AIR SDK before 15.0.0.249, and Adobe AIR SDK & Compiler before 15.0.0.249 allows attackers to execute arbitrary code via unspecified vectors.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0553", url: "https://www.suse.com/security/cve/CVE-2014-0553", }, { category: "external", summary: "SUSE Bug 895856 for CVE-2014-0553", url: "https://bugzilla.suse.com/895856", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2014-0553", }, { cve: "CVE-2014-0554", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0554", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.244 and 14.x and 15.x before 15.0.0.152 on Windows and OS X and before 11.2.202.406 on Linux, Adobe AIR before 15.0.0.249 on Windows and OS X and before 15.0.0.252 on Android, Adobe AIR SDK before 15.0.0.249, and Adobe AIR SDK & Compiler before 15.0.0.249 allow attackers to bypass intended access restrictions via unspecified vectors.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0554", url: "https://www.suse.com/security/cve/CVE-2014-0554", }, { category: "external", summary: "SUSE Bug 895856 for CVE-2014-0554", url: "https://bugzilla.suse.com/895856", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2014-0554", }, { cve: "CVE-2014-0555", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0555", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.244 and 14.x and 15.x before 15.0.0.152 on Windows and OS X and before 11.2.202.406 on Linux, Adobe AIR before 15.0.0.249 on Windows and OS X and before 15.0.0.252 on Android, Adobe AIR SDK before 15.0.0.249, and Adobe AIR SDK & Compiler before 15.0.0.249 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2014-0547, CVE-2014-0549, CVE-2014-0550, CVE-2014-0551, and CVE-2014-0552.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0555", url: "https://www.suse.com/security/cve/CVE-2014-0555", }, { category: "external", summary: "SUSE Bug 895856 for CVE-2014-0555", url: "https://bugzilla.suse.com/895856", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2014-0555", }, { cve: "CVE-2014-0556", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0556", }, ], notes: [ { category: "general", text: "Heap-based buffer overflow in Adobe Flash Player before 13.0.0.244 and 14.x and 15.x before 15.0.0.152 on Windows and OS X and before 11.2.202.406 on Linux, Adobe AIR before 15.0.0.249 on Windows and OS X and before 15.0.0.252 on Android, Adobe AIR SDK before 15.0.0.249, and Adobe AIR SDK & Compiler before 15.0.0.249 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2014-0559.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0556", url: "https://www.suse.com/security/cve/CVE-2014-0556", }, { category: "external", summary: "SUSE Bug 895856 for CVE-2014-0556", url: "https://bugzilla.suse.com/895856", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2014-0556", }, { cve: "CVE-2014-0557", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0557", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.244 and 14.x and 15.x before 15.0.0.152 on Windows and OS X and before 11.2.202.406 on Linux, Adobe AIR before 15.0.0.249 on Windows and OS X and before 15.0.0.252 on Android, Adobe AIR SDK before 15.0.0.249, and Adobe AIR SDK & Compiler before 15.0.0.249 do not properly restrict discovery of memory addresses, which allows attackers to bypass the ASLR protection mechanism via unspecified vectors.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0557", url: "https://www.suse.com/security/cve/CVE-2014-0557", }, { category: "external", summary: "SUSE Bug 895856 for CVE-2014-0557", url: "https://bugzilla.suse.com/895856", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2014-0557", }, { cve: "CVE-2014-0558", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0558", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.250 and 14.x and 15.x before 15.0.0.189 on Windows and OS X and before 11.2.202.411 on Linux, Adobe AIR before 15.0.0.293, Adobe AIR SDK before 15.0.0.302, and Adobe AIR SDK & Compiler before 15.0.0.302 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2014-0564.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0558", url: "https://www.suse.com/security/cve/CVE-2014-0558", }, { category: "external", summary: "SUSE Bug 901334 for CVE-2014-0558", url: "https://bugzilla.suse.com/901334", }, { category: "external", summary: "SUSE Bug 905032 for CVE-2014-0558", url: "https://bugzilla.suse.com/905032", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "moderate", }, ], title: "CVE-2014-0558", }, { cve: "CVE-2014-0559", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0559", }, ], notes: [ { category: "general", text: "Heap-based buffer overflow in Adobe Flash Player before 13.0.0.244 and 14.x and 15.x before 15.0.0.152 on Windows and OS X and before 11.2.202.406 on Linux, Adobe AIR before 15.0.0.249 on Windows and OS X and before 15.0.0.252 on Android, Adobe AIR SDK before 15.0.0.249, and Adobe AIR SDK & Compiler before 15.0.0.249 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2014-0556.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0559", url: "https://www.suse.com/security/cve/CVE-2014-0559", }, { category: "external", summary: "SUSE Bug 895856 for CVE-2014-0559", url: "https://bugzilla.suse.com/895856", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2014-0559", }, { cve: "CVE-2014-0564", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0564", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.250 and 14.x and 15.x before 15.0.0.189 on Windows and OS X and before 11.2.202.411 on Linux, Adobe AIR before 15.0.0.293, Adobe AIR SDK before 15.0.0.302, and Adobe AIR SDK & Compiler before 15.0.0.302 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2014-0558.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0564", url: "https://www.suse.com/security/cve/CVE-2014-0564", }, { category: "external", summary: "SUSE Bug 901334 for CVE-2014-0564", url: "https://bugzilla.suse.com/901334", }, { category: "external", summary: "SUSE Bug 905032 for CVE-2014-0564", url: "https://bugzilla.suse.com/905032", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "moderate", }, ], title: "CVE-2014-0564", }, { cve: "CVE-2014-0569", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0569", }, ], notes: [ { category: "general", text: "Integer overflow in Adobe Flash Player before 13.0.0.250 and 14.x and 15.x before 15.0.0.189 on Windows and OS X and before 11.2.202.411 on Linux, Adobe AIR before 15.0.0.293, Adobe AIR SDK before 15.0.0.302, and Adobe AIR SDK & Compiler before 15.0.0.302 allows attackers to execute arbitrary code via unspecified vectors.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0569", url: "https://www.suse.com/security/cve/CVE-2014-0569", }, { category: "external", summary: "SUSE Bug 901334 for CVE-2014-0569", url: "https://bugzilla.suse.com/901334", }, { category: "external", summary: "SUSE Bug 905032 for CVE-2014-0569", url: "https://bugzilla.suse.com/905032", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "moderate", }, ], title: "CVE-2014-0569", }, { cve: "CVE-2014-0573", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0573", }, ], notes: [ { category: "general", text: "Use-after-free vulnerability in Adobe Flash Player before 13.0.0.252 and 14.x and 15.x before 15.0.0.223 on Windows and OS X and before 11.2.202.418 on Linux, Adobe AIR before 15.0.0.356, Adobe AIR SDK before 15.0.0.356, and Adobe AIR SDK & Compiler before 15.0.0.356 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2014-0588 and CVE-2014-8438.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0573", url: "https://www.suse.com/security/cve/CVE-2014-0573", }, { category: "external", summary: "SUSE Bug 905032 for CVE-2014-0573", url: "https://bugzilla.suse.com/905032", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2014-0573", }, { cve: "CVE-2014-0574", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0574", }, ], notes: [ { category: "general", text: "Double free vulnerability in Adobe Flash Player before 13.0.0.252 and 14.x and 15.x before 15.0.0.223 on Windows and OS X and before 11.2.202.418 on Linux, Adobe AIR before 15.0.0.356, Adobe AIR SDK before 15.0.0.356, and Adobe AIR SDK & Compiler before 15.0.0.356 allows attackers to execute arbitrary code via unspecified vectors.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0574", url: "https://www.suse.com/security/cve/CVE-2014-0574", }, { category: "external", summary: "SUSE Bug 905032 for CVE-2014-0574", url: "https://bugzilla.suse.com/905032", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2014-0574", }, { cve: "CVE-2014-0576", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0576", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.252 and 14.x and 15.x before 15.0.0.223 on Windows and OS X and before 11.2.202.418 on Linux, Adobe AIR before 15.0.0.356, Adobe AIR SDK before 15.0.0.356, and Adobe AIR SDK & Compiler before 15.0.0.356 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2014-0581, CVE-2014-8440, and CVE-2014-8441.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0576", url: "https://www.suse.com/security/cve/CVE-2014-0576", }, { category: "external", summary: "SUSE Bug 905032 for CVE-2014-0576", url: "https://bugzilla.suse.com/905032", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2014-0576", }, { cve: "CVE-2014-0577", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0577", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.252 and 14.x and 15.x before 15.0.0.223 on Windows and OS X and before 11.2.202.418 on Linux, Adobe AIR before 15.0.0.356, Adobe AIR SDK before 15.0.0.356, and Adobe AIR SDK & Compiler before 15.0.0.356 allow attackers to execute arbitrary code by leveraging an unspecified \"type confusion,\" a different vulnerability than CVE-2014-0584, CVE-2014-0585, CVE-2014-0586, and CVE-2014-0590.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0577", url: "https://www.suse.com/security/cve/CVE-2014-0577", }, { category: "external", summary: "SUSE Bug 905032 for CVE-2014-0577", url: "https://bugzilla.suse.com/905032", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2014-0577", }, { cve: "CVE-2014-0580", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0580", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.259 and 14.x through 16.x before 16.0.0.235 on Windows and OS X and before 11.2.202.425 on Linux allows remote attackers to bypass the Same Origin Policy via unspecified vectors.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0580", url: "https://www.suse.com/security/cve/CVE-2014-0580", }, { category: "external", summary: "SUSE Bug 909219 for CVE-2014-0580", url: "https://bugzilla.suse.com/909219", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2014-0580", }, { cve: "CVE-2014-0581", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0581", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.252 and 14.x and 15.x before 15.0.0.223 on Windows and OS X and before 11.2.202.418 on Linux, Adobe AIR before 15.0.0.356, Adobe AIR SDK before 15.0.0.356, and Adobe AIR SDK & Compiler before 15.0.0.356 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2014-0576, CVE-2014-8440, and CVE-2014-8441.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0581", url: "https://www.suse.com/security/cve/CVE-2014-0581", }, { category: "external", summary: "SUSE Bug 905032 for CVE-2014-0581", url: "https://bugzilla.suse.com/905032", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "important", }, ], title: "CVE-2014-0581", }, { cve: "CVE-2014-0582", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0582", }, ], notes: [ { category: "general", text: "Heap-based buffer overflow in Adobe Flash Player before 13.0.0.252 and 14.x and 15.x before 15.0.0.223 on Windows and OS X and before 11.2.202.418 on Linux, Adobe AIR before 15.0.0.356, Adobe AIR SDK before 15.0.0.356, and Adobe AIR SDK & Compiler before 15.0.0.356 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2014-0589.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0582", url: "https://www.suse.com/security/cve/CVE-2014-0582", }, { category: "external", summary: "SUSE Bug 905032 for CVE-2014-0582", url: "https://bugzilla.suse.com/905032", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "important", }, ], title: "CVE-2014-0582", }, { cve: "CVE-2014-0583", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0583", }, ], notes: [ { category: "general", text: "Heap-based buffer overflow in Adobe Flash Player before 13.0.0.252 and 14.x and 15.x before 15.0.0.223 on Windows and OS X and before 11.2.202.418 on Linux, Adobe AIR before 15.0.0.356, Adobe AIR SDK before 15.0.0.356, and Adobe AIR SDK & Compiler before 15.0.0.356 allows attackers to complete a transition from Low Integrity to Medium Integrity via unspecified vectors.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0583", url: "https://www.suse.com/security/cve/CVE-2014-0583", }, { category: "external", summary: "SUSE Bug 905032 for CVE-2014-0583", url: "https://bugzilla.suse.com/905032", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2014-0583", }, { cve: "CVE-2014-0584", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0584", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.252 and 14.x and 15.x before 15.0.0.223 on Windows and OS X and before 11.2.202.418 on Linux, Adobe AIR before 15.0.0.356, Adobe AIR SDK before 15.0.0.356, and Adobe AIR SDK & Compiler before 15.0.0.356 allow attackers to execute arbitrary code by leveraging an unspecified \"type confusion,\" a different vulnerability than CVE-2014-0577, CVE-2014-0585, CVE-2014-0586, and CVE-2014-0590.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0584", url: "https://www.suse.com/security/cve/CVE-2014-0584", }, { category: "external", summary: "SUSE Bug 905032 for CVE-2014-0584", url: "https://bugzilla.suse.com/905032", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "important", }, ], title: "CVE-2014-0584", }, { cve: "CVE-2014-0585", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0585", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.252 and 14.x and 15.x before 15.0.0.223 on Windows and OS X and before 11.2.202.418 on Linux, Adobe AIR before 15.0.0.356, Adobe AIR SDK before 15.0.0.356, and Adobe AIR SDK & Compiler before 15.0.0.356 allow attackers to execute arbitrary code by leveraging an unspecified \"type confusion,\" a different vulnerability than CVE-2014-0577, CVE-2014-0584, CVE-2014-0586, and CVE-2014-0590.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0585", url: "https://www.suse.com/security/cve/CVE-2014-0585", }, { category: "external", summary: "SUSE Bug 905032 for CVE-2014-0585", url: "https://bugzilla.suse.com/905032", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "important", }, ], title: "CVE-2014-0585", }, { cve: "CVE-2014-0586", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0586", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.252 and 14.x and 15.x before 15.0.0.223 on Windows and OS X and before 11.2.202.418 on Linux, Adobe AIR before 15.0.0.356, Adobe AIR SDK before 15.0.0.356, and Adobe AIR SDK & Compiler before 15.0.0.356 allow attackers to execute arbitrary code by leveraging an unspecified \"type confusion,\" a different vulnerability than CVE-2014-0577, CVE-2014-0584, CVE-2014-0585, and CVE-2014-0590.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0586", url: "https://www.suse.com/security/cve/CVE-2014-0586", }, { category: "external", summary: "SUSE Bug 905032 for CVE-2014-0586", url: "https://bugzilla.suse.com/905032", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "important", }, ], title: "CVE-2014-0586", }, { cve: "CVE-2014-0587", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0587", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.259 and 14.x through 16.x before 16.0.0.235 on Windows and OS X and before 11.2.202.425 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2014-9164.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0587", url: "https://www.suse.com/security/cve/CVE-2014-0587", }, { category: "external", summary: "SUSE Bug 909219 for CVE-2014-0587", url: "https://bugzilla.suse.com/909219", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2014-0587", }, { cve: "CVE-2014-0588", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0588", }, ], notes: [ { category: "general", text: "Use-after-free vulnerability in Adobe Flash Player before 13.0.0.252 and 14.x and 15.x before 15.0.0.223 on Windows and OS X and before 11.2.202.418 on Linux, Adobe AIR before 15.0.0.356, Adobe AIR SDK before 15.0.0.356, and Adobe AIR SDK & Compiler before 15.0.0.356 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2014-0573 and CVE-2014-8438.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0588", url: "https://www.suse.com/security/cve/CVE-2014-0588", }, { category: "external", summary: "SUSE Bug 905032 for CVE-2014-0588", url: "https://bugzilla.suse.com/905032", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "important", }, ], title: "CVE-2014-0588", }, { cve: "CVE-2014-0589", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0589", }, ], notes: [ { category: "general", text: "Heap-based buffer overflow in Adobe Flash Player before 13.0.0.252 and 14.x and 15.x before 15.0.0.223 on Windows and OS X and before 11.2.202.418 on Linux, Adobe AIR before 15.0.0.356, Adobe AIR SDK before 15.0.0.356, and Adobe AIR SDK & Compiler before 15.0.0.356 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2014-0582.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0589", url: "https://www.suse.com/security/cve/CVE-2014-0589", }, { category: "external", summary: "SUSE Bug 905032 for CVE-2014-0589", url: "https://bugzilla.suse.com/905032", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "important", }, ], title: "CVE-2014-0589", }, { cve: "CVE-2014-0590", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0590", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.252 and 14.x and 15.x before 15.0.0.223 on Windows and OS X and before 11.2.202.418 on Linux, Adobe AIR before 15.0.0.356, Adobe AIR SDK before 15.0.0.356, and Adobe AIR SDK & Compiler before 15.0.0.356 allow attackers to execute arbitrary code by leveraging an unspecified \"type confusion,\" a different vulnerability than CVE-2014-0577, CVE-2014-0584, CVE-2014-0585, and CVE-2014-0586.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0590", url: "https://www.suse.com/security/cve/CVE-2014-0590", }, { category: "external", summary: "SUSE Bug 905032 for CVE-2014-0590", url: "https://bugzilla.suse.com/905032", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "important", }, ], title: "CVE-2014-0590", }, { cve: "CVE-2014-4671", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-4671", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.231 and 14.x before 14.0.0.145 on Windows and OS X and before 11.2.202.394 on Linux, Adobe AIR before 14.0.0.137 on Android, Adobe AIR SDK before 14.0.0.137, and Adobe AIR SDK & Compiler before 14.0.0.137 do not properly restrict the SWF file format, which allows remote attackers to conduct cross-site request forgery (CSRF) attacks against JSONP endpoints, and obtain sensitive information, via a crafted OBJECT element with SWF content satisfying the character-set requirements of a callback API.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-4671", url: "https://www.suse.com/security/cve/CVE-2014-4671", }, { category: "external", summary: "SUSE Bug 886454 for CVE-2014-4671", url: "https://bugzilla.suse.com/886454", }, { category: "external", summary: "SUSE Bug 891688 for CVE-2014-4671", url: "https://bugzilla.suse.com/891688", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2014-4671", }, { cve: "CVE-2014-8437", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-8437", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.252 and 14.x and 15.x before 15.0.0.223 on Windows and OS X and before 11.2.202.418 on Linux, Adobe AIR before 15.0.0.356, Adobe AIR SDK before 15.0.0.356, and Adobe AIR SDK & Compiler before 15.0.0.356 allow remote attackers to discover session tokens via unspecified vectors.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-8437", url: "https://www.suse.com/security/cve/CVE-2014-8437", }, { category: "external", summary: "SUSE Bug 905032 for CVE-2014-8437", url: "https://bugzilla.suse.com/905032", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "important", }, ], title: "CVE-2014-8437", }, { cve: "CVE-2014-8438", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-8438", }, ], notes: [ { category: "general", text: "Use-after-free vulnerability in Adobe Flash Player before 13.0.0.252 and 14.x and 15.x before 15.0.0.223 on Windows and OS X and before 11.2.202.418 on Linux, Adobe AIR before 15.0.0.356, Adobe AIR SDK before 15.0.0.356, and Adobe AIR SDK & Compiler before 15.0.0.356 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2014-0573 and CVE-2014-0588.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-8438", url: "https://www.suse.com/security/cve/CVE-2014-8438", }, { category: "external", summary: "SUSE Bug 905032 for CVE-2014-8438", url: "https://bugzilla.suse.com/905032", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "important", }, ], title: "CVE-2014-8438", }, { cve: "CVE-2014-8439", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-8439", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.258 and 14.x and 15.x before 15.0.0.239 on Windows and OS X and before 11.2.202.424 on Linux, Adobe AIR before 15.0.0.293, Adobe AIR SDK before 15.0.0.302, and Adobe AIR SDK & Compiler before 15.0.0.302 allow attackers to execute arbitrary code or cause a denial of service (invalid pointer dereference) via unspecified vectors.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-8439", url: "https://www.suse.com/security/cve/CVE-2014-8439", }, { category: "external", summary: "SUSE Bug 907257 for CVE-2014-8439", url: "https://bugzilla.suse.com/907257", }, { category: "external", summary: "SUSE Bug 909219 for CVE-2014-8439", url: "https://bugzilla.suse.com/909219", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2014-8439", }, { cve: "CVE-2014-8440", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-8440", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.252 and 14.x and 15.x before 15.0.0.223 on Windows and OS X and before 11.2.202.418 on Linux, Adobe AIR before 15.0.0.356, Adobe AIR SDK before 15.0.0.356, and Adobe AIR SDK & Compiler before 15.0.0.356 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2014-0576, CVE-2014-0581, and CVE-2014-8441.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-8440", url: "https://www.suse.com/security/cve/CVE-2014-8440", }, { category: "external", summary: "SUSE Bug 905032 for CVE-2014-8440", url: "https://bugzilla.suse.com/905032", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "important", }, ], title: "CVE-2014-8440", }, { cve: "CVE-2014-8441", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-8441", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.252 and 14.x and 15.x before 15.0.0.223 on Windows and OS X and before 11.2.202.418 on Linux, Adobe AIR before 15.0.0.356, Adobe AIR SDK before 15.0.0.356, and Adobe AIR SDK & Compiler before 15.0.0.356 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2014-0576, CVE-2014-0581, and CVE-2014-8440.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-8441", url: "https://www.suse.com/security/cve/CVE-2014-8441", }, { category: "external", summary: "SUSE Bug 905032 for CVE-2014-8441", url: "https://bugzilla.suse.com/905032", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "important", }, ], title: "CVE-2014-8441", }, { cve: "CVE-2014-8442", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-8442", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.252 and 14.x and 15.x before 15.0.0.223 on Windows and OS X and before 11.2.202.418 on Linux, Adobe AIR before 15.0.0.356, Adobe AIR SDK before 15.0.0.356, and Adobe AIR SDK & Compiler before 15.0.0.356 allow attackers to complete a transition from Low Integrity to Medium Integrity by leveraging incorrect permissions.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-8442", url: "https://www.suse.com/security/cve/CVE-2014-8442", }, { category: "external", summary: "SUSE Bug 905032 for CVE-2014-8442", url: "https://bugzilla.suse.com/905032", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2014-8442", }, { cve: "CVE-2014-8443", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-8443", }, ], notes: [ { category: "general", text: "Use-after-free vulnerability in Adobe Flash Player before 13.0.0.259 and 14.x through 16.x before 16.0.0.235 on Windows and OS X and before 11.2.202.425 on Linux allows attackers to execute arbitrary code via unspecified vectors.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-8443", url: "https://www.suse.com/security/cve/CVE-2014-8443", }, { category: "external", summary: "SUSE Bug 909219 for CVE-2014-8443", url: "https://bugzilla.suse.com/909219", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2014-8443", }, { cve: "CVE-2014-9162", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-9162", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.259 and 14.x through 16.x before 16.0.0.235 on Windows and OS X and before 11.2.202.425 on Linux allows attackers to obtain sensitive information via unspecified vectors.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-9162", url: "https://www.suse.com/security/cve/CVE-2014-9162", }, { category: "external", summary: "SUSE Bug 909219 for CVE-2014-9162", url: "https://bugzilla.suse.com/909219", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2014-9162", }, { cve: "CVE-2014-9163", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-9163", }, ], notes: [ { category: "general", text: "Stack-based buffer overflow in Adobe Flash Player before 13.0.0.259 and 14.x and 15.x before 15.0.0.246 on Windows and OS X and before 11.2.202.425 on Linux allows attackers to execute arbitrary code via unspecified vectors, as exploited in the wild in December 2014.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-9163", url: "https://www.suse.com/security/cve/CVE-2014-9163", }, { category: "external", summary: "SUSE Bug 909219 for CVE-2014-9163", url: "https://bugzilla.suse.com/909219", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2014-9163", }, { cve: "CVE-2014-9164", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-9164", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.259 and 14.x through 16.x before 16.0.0.235 on Windows and OS X and before 11.2.202.425 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2014-0587.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-9164", url: "https://www.suse.com/security/cve/CVE-2014-9164", }, { category: "external", summary: "SUSE Bug 909219 for CVE-2014-9164", url: "https://bugzilla.suse.com/909219", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2014-9164", }, { cve: "CVE-2015-0301", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-0301", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.260 and 14.x through 16.x before 16.0.0.257 on Windows and OS X and before 11.2.202.429 on Linux, Adobe AIR before 16.0.0.245 on Windows and OS X and before 16.0.0.272 on Android, Adobe AIR SDK before 16.0.0.272, and Adobe AIR SDK & Compiler before 16.0.0.272 do not properly validate files, which has unspecified impact and attack vectors.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-0301", url: "https://www.suse.com/security/cve/CVE-2015-0301", }, { category: "external", summary: "SUSE Bug 913057 for CVE-2015-0301", url: "https://bugzilla.suse.com/913057", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2015-0301", }, { cve: "CVE-2015-0302", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-0302", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.260 and 14.x through 16.x before 16.0.0.257 on Windows and OS X and before 11.2.202.429 on Linux, Adobe AIR before 16.0.0.245 on Windows and OS X and before 16.0.0.272 on Android, Adobe AIR SDK before 16.0.0.272, and Adobe AIR SDK & Compiler before 16.0.0.272 allow attackers to obtain sensitive keystroke information via unspecified vectors.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-0302", url: "https://www.suse.com/security/cve/CVE-2015-0302", }, { category: "external", summary: "SUSE Bug 913057 for CVE-2015-0302", url: "https://bugzilla.suse.com/913057", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2015-0302", }, { cve: "CVE-2015-0303", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-0303", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.260 and 14.x through 16.x before 16.0.0.257 on Windows and OS X and before 11.2.202.429 on Linux, Adobe AIR before 16.0.0.245 on Windows and OS X and before 16.0.0.272 on Android, Adobe AIR SDK before 16.0.0.272, and Adobe AIR SDK & Compiler before 16.0.0.272 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-0306.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-0303", url: "https://www.suse.com/security/cve/CVE-2015-0303", }, { category: "external", summary: "SUSE Bug 913057 for CVE-2015-0303", url: "https://bugzilla.suse.com/913057", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2015-0303", }, { cve: "CVE-2015-0304", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-0304", }, ], notes: [ { category: "general", text: "Heap-based buffer overflow in Adobe Flash Player before 13.0.0.260 and 14.x through 16.x before 16.0.0.257 on Windows and OS X and before 11.2.202.429 on Linux, Adobe AIR before 16.0.0.245 on Windows and OS X and before 16.0.0.272 on Android, Adobe AIR SDK before 16.0.0.272, and Adobe AIR SDK & Compiler before 16.0.0.272 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-0309.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-0304", url: "https://www.suse.com/security/cve/CVE-2015-0304", }, { category: "external", summary: "SUSE Bug 913057 for CVE-2015-0304", url: "https://bugzilla.suse.com/913057", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2015-0304", }, { cve: "CVE-2015-0305", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-0305", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.260 and 14.x through 16.x before 16.0.0.257 on Windows and OS X and before 11.2.202.429 on Linux, Adobe AIR before 16.0.0.245 on Windows and OS X and before 16.0.0.272 on Android, Adobe AIR SDK before 16.0.0.272, and Adobe AIR SDK & Compiler before 16.0.0.272 allow attackers to execute arbitrary code by leveraging an unspecified \"type confusion.\"", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-0305", url: "https://www.suse.com/security/cve/CVE-2015-0305", }, { category: "external", summary: "SUSE Bug 913057 for CVE-2015-0305", url: "https://bugzilla.suse.com/913057", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2015-0305", }, { cve: "CVE-2015-0306", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-0306", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.260 and 14.x through 16.x before 16.0.0.257 on Windows and OS X and before 11.2.202.429 on Linux, Adobe AIR before 16.0.0.245 on Windows and OS X and before 16.0.0.272 on Android, Adobe AIR SDK before 16.0.0.272, and Adobe AIR SDK & Compiler before 16.0.0.272 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-0303.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-0306", url: "https://www.suse.com/security/cve/CVE-2015-0306", }, { category: "external", summary: "SUSE Bug 913057 for CVE-2015-0306", url: "https://bugzilla.suse.com/913057", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2015-0306", }, { cve: "CVE-2015-0307", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-0307", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.260 and 14.x through 16.x before 16.0.0.257 on Windows and OS X and before 11.2.202.429 on Linux, Adobe AIR before 16.0.0.245 on Windows and OS X and before 16.0.0.272 on Android, Adobe AIR SDK before 16.0.0.272, and Adobe AIR SDK & Compiler before 16.0.0.272 allow remote attackers to obtain sensitive information from process memory or cause a denial of service (out-of-bounds read) via unspecified vectors.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-0307", url: "https://www.suse.com/security/cve/CVE-2015-0307", }, { category: "external", summary: "SUSE Bug 913057 for CVE-2015-0307", url: "https://bugzilla.suse.com/913057", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2015-0307", }, { cve: "CVE-2015-0308", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-0308", }, ], notes: [ { category: "general", text: "Use-after-free vulnerability in Adobe Flash Player before 13.0.0.260 and 14.x through 16.x before 16.0.0.257 on Windows and OS X and before 11.2.202.429 on Linux, Adobe AIR before 16.0.0.245 on Windows and OS X and before 16.0.0.272 on Android, Adobe AIR SDK before 16.0.0.272, and Adobe AIR SDK & Compiler before 16.0.0.272 allows attackers to execute arbitrary code via unspecified vectors.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-0308", url: "https://www.suse.com/security/cve/CVE-2015-0308", }, { category: "external", summary: "SUSE Bug 913057 for CVE-2015-0308", url: "https://bugzilla.suse.com/913057", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2015-0308", }, { cve: "CVE-2015-0309", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-0309", }, ], notes: [ { category: "general", text: "Heap-based buffer overflow in Adobe Flash Player before 13.0.0.260 and 14.x through 16.x before 16.0.0.257 on Windows and OS X and before 11.2.202.429 on Linux, Adobe AIR before 16.0.0.245 on Windows and OS X and before 16.0.0.272 on Android, Adobe AIR SDK before 16.0.0.272, and Adobe AIR SDK & Compiler before 16.0.0.272 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-0304.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-0309", url: "https://www.suse.com/security/cve/CVE-2015-0309", }, { category: "external", summary: "SUSE Bug 913057 for CVE-2015-0309", url: "https://bugzilla.suse.com/913057", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2015-0309", }, { cve: "CVE-2015-0310", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-0310", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.262 and 14.x through 16.x before 16.0.0.287 on Windows and OS X and before 11.2.202.438 on Linux does not properly restrict discovery of memory addresses, which allows attackers to bypass the ASLR protection mechanism on Windows, and have an unspecified impact on other platforms, via unknown vectors, as exploited in the wild in January 2015.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-0310", url: "https://www.suse.com/security/cve/CVE-2015-0310", }, { category: "external", summary: "SUSE Bug 914333 for CVE-2015-0310", url: "https://bugzilla.suse.com/914333", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2015-0310", }, { cve: "CVE-2015-0311", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-0311", }, ], notes: [ { category: "general", text: "Unspecified vulnerability in Adobe Flash Player through 13.0.0.262 and 14.x, 15.x, and 16.x through 16.0.0.287 on Windows and OS X and through 11.2.202.438 on Linux allows remote attackers to execute arbitrary code via unknown vectors, as exploited in the wild in January 2015.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-0311", url: "https://www.suse.com/security/cve/CVE-2015-0311", }, { category: "external", summary: "SUSE Bug 914463 for CVE-2015-0311", url: "https://bugzilla.suse.com/914463", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 9.8, baseSeverity: "CRITICAL", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2015-0311", }, { cve: "CVE-2015-0313", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-0313", }, ], notes: [ { category: "general", text: "Use-after-free vulnerability in Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows and OS X and before 11.2.202.442 on Linux allows remote attackers to execute arbitrary code via unspecified vectors, as exploited in the wild in February 2015, a different vulnerability than CVE-2015-0315, CVE-2015-0320, and CVE-2015-0322.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-0313", url: "https://www.suse.com/security/cve/CVE-2015-0313", }, { category: "external", summary: "SUSE Bug 915918 for CVE-2015-0313", url: "https://bugzilla.suse.com/915918", }, { category: "external", summary: "SUSE Bug 916374 for CVE-2015-0313", url: "https://bugzilla.suse.com/916374", }, { category: "external", summary: "SUSE Bug 922033 for CVE-2015-0313", url: "https://bugzilla.suse.com/922033", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 9.8, baseSeverity: "CRITICAL", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2015-0313", }, { cve: "CVE-2015-0314", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-0314", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows and OS X and before 11.2.202.442 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-0316, CVE-2015-0318, CVE-2015-0321, CVE-2015-0329, and CVE-2015-0330.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-0314", url: "https://www.suse.com/security/cve/CVE-2015-0314", }, { category: "external", summary: "SUSE Bug 915918 for CVE-2015-0314", url: "https://bugzilla.suse.com/915918", }, { category: "external", summary: "SUSE Bug 922033 for CVE-2015-0314", url: "https://bugzilla.suse.com/922033", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2015-0314", }, { cve: "CVE-2015-0315", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-0315", }, ], notes: [ { category: "general", text: "Use-after-free vulnerability in Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows and OS X and before 11.2.202.442 on Linux allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-0313, CVE-2015-0320, and CVE-2015-0322.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-0315", url: "https://www.suse.com/security/cve/CVE-2015-0315", }, { category: "external", summary: "SUSE Bug 915918 for CVE-2015-0315", url: "https://bugzilla.suse.com/915918", }, { category: "external", summary: "SUSE Bug 922033 for CVE-2015-0315", url: "https://bugzilla.suse.com/922033", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2015-0315", }, { cve: "CVE-2015-0316", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-0316", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows and OS X and before 11.2.202.442 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-0314, CVE-2015-0318, CVE-2015-0321, CVE-2015-0329, and CVE-2015-0330.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-0316", url: "https://www.suse.com/security/cve/CVE-2015-0316", }, { category: "external", summary: "SUSE Bug 915918 for CVE-2015-0316", url: "https://bugzilla.suse.com/915918", }, { category: "external", summary: "SUSE Bug 922033 for CVE-2015-0316", url: "https://bugzilla.suse.com/922033", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2015-0316", }, { cve: "CVE-2015-0317", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-0317", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows and OS X and before 11.2.202.442 on Linux allows attackers to execute arbitrary code by leveraging an unspecified \"type confusion,\" a different vulnerability than CVE-2015-0319.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-0317", url: "https://www.suse.com/security/cve/CVE-2015-0317", }, { category: "external", summary: "SUSE Bug 915918 for CVE-2015-0317", url: "https://bugzilla.suse.com/915918", }, { category: "external", summary: "SUSE Bug 922033 for CVE-2015-0317", url: "https://bugzilla.suse.com/922033", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2015-0317", }, { cve: "CVE-2015-0318", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-0318", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows and OS X and before 11.2.202.442 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-0314, CVE-2015-0316, CVE-2015-0321, CVE-2015-0329, and CVE-2015-0330.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-0318", url: "https://www.suse.com/security/cve/CVE-2015-0318", }, { category: "external", summary: "SUSE Bug 915918 for CVE-2015-0318", url: "https://bugzilla.suse.com/915918", }, { category: "external", summary: "SUSE Bug 922033 for CVE-2015-0318", url: "https://bugzilla.suse.com/922033", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2015-0318", }, { cve: "CVE-2015-0319", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-0319", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows and OS X and before 11.2.202.442 on Linux allows attackers to execute arbitrary code by leveraging an unspecified \"type confusion,\" a different vulnerability than CVE-2015-0317.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-0319", url: "https://www.suse.com/security/cve/CVE-2015-0319", }, { category: "external", summary: "SUSE Bug 915918 for CVE-2015-0319", url: "https://bugzilla.suse.com/915918", }, { category: "external", summary: "SUSE Bug 922033 for CVE-2015-0319", url: "https://bugzilla.suse.com/922033", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2015-0319", }, { cve: "CVE-2015-0320", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-0320", }, ], notes: [ { category: "general", text: "Use-after-free vulnerability in Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows and OS X and before 11.2.202.442 on Linux allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-0313, CVE-2015-0315, and CVE-2015-0322.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-0320", url: "https://www.suse.com/security/cve/CVE-2015-0320", }, { category: "external", summary: "SUSE Bug 915918 for CVE-2015-0320", url: "https://bugzilla.suse.com/915918", }, { category: "external", summary: "SUSE Bug 922033 for CVE-2015-0320", url: "https://bugzilla.suse.com/922033", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2015-0320", }, { cve: "CVE-2015-0321", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-0321", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows and OS X and before 11.2.202.442 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-0314, CVE-2015-0316, CVE-2015-0318, CVE-2015-0329, and CVE-2015-0330.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-0321", url: "https://www.suse.com/security/cve/CVE-2015-0321", }, { category: "external", summary: "SUSE Bug 915918 for CVE-2015-0321", url: "https://bugzilla.suse.com/915918", }, { category: "external", summary: "SUSE Bug 922033 for CVE-2015-0321", url: "https://bugzilla.suse.com/922033", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2015-0321", }, { cve: "CVE-2015-0322", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-0322", }, ], notes: [ { category: "general", text: "Use-after-free vulnerability in Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows and OS X and before 11.2.202.442 on Linux allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-0313, CVE-2015-0315, and CVE-2015-0320.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-0322", url: "https://www.suse.com/security/cve/CVE-2015-0322", }, { category: "external", summary: "SUSE Bug 915918 for CVE-2015-0322", url: "https://bugzilla.suse.com/915918", }, { category: "external", summary: "SUSE Bug 922033 for CVE-2015-0322", url: "https://bugzilla.suse.com/922033", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2015-0322", }, { cve: "CVE-2015-0323", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-0323", }, ], notes: [ { category: "general", text: "Heap-based buffer overflow in Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows and OS X and before 11.2.202.442 on Linux allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-0327.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-0323", url: "https://www.suse.com/security/cve/CVE-2015-0323", }, { category: "external", summary: "SUSE Bug 915918 for CVE-2015-0323", url: "https://bugzilla.suse.com/915918", }, { category: "external", summary: "SUSE Bug 922033 for CVE-2015-0323", url: "https://bugzilla.suse.com/922033", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2015-0323", }, { cve: "CVE-2015-0324", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-0324", }, ], notes: [ { category: "general", text: "Buffer overflow in Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows and OS X and before 11.2.202.442 on Linux allows attackers to execute arbitrary code via unspecified vectors.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-0324", url: "https://www.suse.com/security/cve/CVE-2015-0324", }, { category: "external", summary: "SUSE Bug 915918 for CVE-2015-0324", url: "https://bugzilla.suse.com/915918", }, { category: "external", summary: "SUSE Bug 922033 for CVE-2015-0324", url: "https://bugzilla.suse.com/922033", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2015-0324", }, { cve: "CVE-2015-0325", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-0325", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows and OS X and before 11.2.202.442 on Linux allows attackers to cause a denial of service (NULL pointer dereference) or possibly have unspecified other impact via unknown vectors, a different vulnerability than CVE-2015-0326 and CVE-2015-0328.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-0325", url: "https://www.suse.com/security/cve/CVE-2015-0325", }, { category: "external", summary: "SUSE Bug 915918 for CVE-2015-0325", url: "https://bugzilla.suse.com/915918", }, { category: "external", summary: "SUSE Bug 922033 for CVE-2015-0325", url: "https://bugzilla.suse.com/922033", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2015-0325", }, { cve: "CVE-2015-0326", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-0326", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows and OS X and before 11.2.202.442 on Linux allows attackers to cause a denial of service (NULL pointer dereference) or possibly have unspecified other impact via unknown vectors, a different vulnerability than CVE-2015-0325 and CVE-2015-0328.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-0326", url: "https://www.suse.com/security/cve/CVE-2015-0326", }, { category: "external", summary: "SUSE Bug 915918 for CVE-2015-0326", url: "https://bugzilla.suse.com/915918", }, { category: "external", summary: "SUSE Bug 922033 for CVE-2015-0326", url: "https://bugzilla.suse.com/922033", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2015-0326", }, { cve: "CVE-2015-0327", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-0327", }, ], notes: [ { category: "general", text: "Heap-based buffer overflow in Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows and OS X and before 11.2.202.442 on Linux allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-0323.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-0327", url: "https://www.suse.com/security/cve/CVE-2015-0327", }, { category: "external", summary: "SUSE Bug 915918 for CVE-2015-0327", url: "https://bugzilla.suse.com/915918", }, { category: "external", summary: "SUSE Bug 922033 for CVE-2015-0327", url: "https://bugzilla.suse.com/922033", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2015-0327", }, { cve: "CVE-2015-0328", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-0328", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows and OS X and before 11.2.202.442 on Linux allows attackers to cause a denial of service (NULL pointer dereference) or possibly have unspecified other impact via unknown vectors, a different vulnerability than CVE-2015-0325 and CVE-2015-0326.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-0328", url: "https://www.suse.com/security/cve/CVE-2015-0328", }, { category: "external", summary: "SUSE Bug 915918 for CVE-2015-0328", url: "https://bugzilla.suse.com/915918", }, { category: "external", summary: "SUSE Bug 922033 for CVE-2015-0328", url: "https://bugzilla.suse.com/922033", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2015-0328", }, { cve: "CVE-2015-0329", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-0329", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows and OS X and before 11.2.202.442 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-0314, CVE-2015-0316, CVE-2015-0318, CVE-2015-0321, and CVE-2015-0330.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-0329", url: "https://www.suse.com/security/cve/CVE-2015-0329", }, { category: "external", summary: "SUSE Bug 915918 for CVE-2015-0329", url: "https://bugzilla.suse.com/915918", }, { category: "external", summary: "SUSE Bug 922033 for CVE-2015-0329", url: "https://bugzilla.suse.com/922033", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2015-0329", }, { cve: "CVE-2015-0330", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-0330", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows and OS X and before 11.2.202.442 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-0314, CVE-2015-0316, CVE-2015-0318, CVE-2015-0321, and CVE-2015-0329.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-0330", url: "https://www.suse.com/security/cve/CVE-2015-0330", }, { category: "external", summary: "SUSE Bug 915918 for CVE-2015-0330", url: "https://bugzilla.suse.com/915918", }, { category: "external", summary: "SUSE Bug 922033 for CVE-2015-0330", url: "https://bugzilla.suse.com/922033", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2015-0330", }, { cve: "CVE-2015-0332", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-0332", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.277 and 14.x through 17.x before 17.0.0.134 on Windows and OS X and before 11.2.202.451 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-0333, CVE-2015-0335, and CVE-2015-0339.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-0332", url: "https://www.suse.com/security/cve/CVE-2015-0332", }, { category: "external", summary: "SUSE Bug 922033 for CVE-2015-0332", url: "https://bugzilla.suse.com/922033", }, { category: "external", summary: "SUSE Bug 922296 for CVE-2015-0332", url: "https://bugzilla.suse.com/922296", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2015-0332", }, { cve: "CVE-2015-0333", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-0333", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.277 and 14.x through 17.x before 17.0.0.134 on Windows and OS X and before 11.2.202.451 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-0332, CVE-2015-0335, and CVE-2015-0339.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-0333", url: "https://www.suse.com/security/cve/CVE-2015-0333", }, { category: "external", summary: "SUSE Bug 922033 for CVE-2015-0333", url: "https://bugzilla.suse.com/922033", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2015-0333", }, { cve: "CVE-2015-0334", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-0334", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.277 and 14.x through 17.x before 17.0.0.134 on Windows and OS X and before 11.2.202.451 on Linux allows attackers to execute arbitrary code by leveraging an unspecified \"type confusion,\" a different vulnerability than CVE-2015-0336.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-0334", url: "https://www.suse.com/security/cve/CVE-2015-0334", }, { category: "external", summary: "SUSE Bug 922033 for CVE-2015-0334", url: "https://bugzilla.suse.com/922033", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2015-0334", }, { cve: "CVE-2015-0335", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-0335", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.277 and 14.x through 17.x before 17.0.0.134 on Windows and OS X and before 11.2.202.451 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-0332, CVE-2015-0333, and CVE-2015-0339.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-0335", url: "https://www.suse.com/security/cve/CVE-2015-0335", }, { category: "external", summary: "SUSE Bug 922033 for CVE-2015-0335", url: "https://bugzilla.suse.com/922033", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2015-0335", }, { cve: "CVE-2015-0336", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-0336", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.277 and 14.x through 17.x before 17.0.0.134 on Windows and OS X and before 11.2.202.451 on Linux allows attackers to execute arbitrary code by leveraging an unspecified \"type confusion,\" a different vulnerability than CVE-2015-0334.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-0336", url: "https://www.suse.com/security/cve/CVE-2015-0336", }, { category: "external", summary: "SUSE Bug 922033 for CVE-2015-0336", url: "https://bugzilla.suse.com/922033", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2015-0336", }, { cve: "CVE-2015-0337", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-0337", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.277 and 14.x through 17.x before 17.0.0.134 on Windows and OS X and before 11.2.202.451 on Linux allows remote attackers to bypass the Same Origin Policy via unspecified vectors.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-0337", url: "https://www.suse.com/security/cve/CVE-2015-0337", }, { category: "external", summary: "SUSE Bug 922033 for CVE-2015-0337", url: "https://bugzilla.suse.com/922033", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2015-0337", }, { cve: "CVE-2015-0338", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-0338", }, ], notes: [ { category: "general", text: "Integer overflow in Adobe Flash Player before 13.0.0.277 and 14.x through 17.x before 17.0.0.134 on Windows and OS X and before 11.2.202.451 on Linux allows attackers to execute arbitrary code via unspecified vectors.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-0338", url: "https://www.suse.com/security/cve/CVE-2015-0338", }, { category: "external", summary: "SUSE Bug 922033 for CVE-2015-0338", url: "https://bugzilla.suse.com/922033", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2015-0338", }, { cve: "CVE-2015-0339", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-0339", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.277 and 14.x through 17.x before 17.0.0.134 on Windows and OS X and before 11.2.202.451 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-0332, CVE-2015-0333, and CVE-2015-0335.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-0339", url: "https://www.suse.com/security/cve/CVE-2015-0339", }, { category: "external", summary: "SUSE Bug 922033 for CVE-2015-0339", url: "https://bugzilla.suse.com/922033", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2015-0339", }, { cve: "CVE-2015-0340", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-0340", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.277 and 14.x through 17.x before 17.0.0.134 on Windows and OS X and before 11.2.202.451 on Linux allows remote attackers to bypass intended file-upload restrictions via unspecified vectors.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-0340", url: "https://www.suse.com/security/cve/CVE-2015-0340", }, { category: "external", summary: "SUSE Bug 922033 for CVE-2015-0340", url: "https://bugzilla.suse.com/922033", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2015-0340", }, { cve: "CVE-2015-0341", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-0341", }, ], notes: [ { category: "general", text: "Use-after-free vulnerability in Adobe Flash Player before 13.0.0.277 and 14.x through 17.x before 17.0.0.134 on Windows and OS X and before 11.2.202.451 on Linux allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-0342.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-0341", url: "https://www.suse.com/security/cve/CVE-2015-0341", }, { category: "external", summary: "SUSE Bug 922033 for CVE-2015-0341", url: "https://bugzilla.suse.com/922033", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2015-0341", }, { cve: "CVE-2015-0342", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-0342", }, ], notes: [ { category: "general", text: "Use-after-free vulnerability in Adobe Flash Player before 13.0.0.277 and 14.x through 17.x before 17.0.0.134 on Windows and OS X and before 11.2.202.451 on Linux allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-0341.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-0342", url: "https://www.suse.com/security/cve/CVE-2015-0342", }, { category: "external", summary: "SUSE Bug 922033 for CVE-2015-0342", url: "https://bugzilla.suse.com/922033", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2015-0342", }, { cve: "CVE-2015-0346", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-0346", }, ], notes: [ { category: "general", text: "Double free vulnerability in Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-0359.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-0346", url: "https://www.suse.com/security/cve/CVE-2015-0346", }, { category: "external", summary: "SUSE Bug 927089 for CVE-2015-0346", url: "https://bugzilla.suse.com/927089", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "moderate", }, ], title: "CVE-2015-0346", }, { cve: "CVE-2015-0347", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-0347", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-0350, CVE-2015-0352, CVE-2015-0353, CVE-2015-0354, CVE-2015-0355, CVE-2015-0360, CVE-2015-3038, CVE-2015-3041, CVE-2015-3042, and CVE-2015-3043.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-0347", url: "https://www.suse.com/security/cve/CVE-2015-0347", }, { category: "external", summary: "SUSE Bug 927089 for CVE-2015-0347", url: "https://bugzilla.suse.com/927089", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "moderate", }, ], title: "CVE-2015-0347", }, { cve: "CVE-2015-0348", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-0348", }, ], notes: [ { category: "general", text: "Buffer overflow in Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code via unspecified vectors.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-0348", url: "https://www.suse.com/security/cve/CVE-2015-0348", }, { category: "external", summary: "SUSE Bug 927089 for CVE-2015-0348", url: "https://bugzilla.suse.com/927089", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "moderate", }, ], title: "CVE-2015-0348", }, { cve: "CVE-2015-0349", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-0349", }, ], notes: [ { category: "general", text: "Use-after-free vulnerability in Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-0351, CVE-2015-0358, and CVE-2015-3039.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-0349", url: "https://www.suse.com/security/cve/CVE-2015-0349", }, { category: "external", summary: "SUSE Bug 927089 for CVE-2015-0349", url: "https://bugzilla.suse.com/927089", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "moderate", }, ], title: "CVE-2015-0349", }, { cve: "CVE-2015-0350", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-0350", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-0347, CVE-2015-0352, CVE-2015-0353, CVE-2015-0354, CVE-2015-0355, CVE-2015-0360, CVE-2015-3038, CVE-2015-3041, CVE-2015-3042, and CVE-2015-3043.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-0350", url: "https://www.suse.com/security/cve/CVE-2015-0350", }, { category: "external", summary: "SUSE Bug 927089 for CVE-2015-0350", url: "https://bugzilla.suse.com/927089", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "moderate", }, ], title: "CVE-2015-0350", }, { cve: "CVE-2015-0351", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-0351", }, ], notes: [ { category: "general", text: "Use-after-free vulnerability in Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-0349, CVE-2015-0358, and CVE-2015-3039.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-0351", url: "https://www.suse.com/security/cve/CVE-2015-0351", }, { category: "external", summary: "SUSE Bug 927089 for CVE-2015-0351", url: "https://bugzilla.suse.com/927089", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "moderate", }, ], title: "CVE-2015-0351", }, { cve: "CVE-2015-0352", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-0352", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-0347, CVE-2015-0350, CVE-2015-0353, CVE-2015-0354, CVE-2015-0355, CVE-2015-0360, CVE-2015-3038, CVE-2015-3041, CVE-2015-3042, and CVE-2015-3043.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-0352", url: "https://www.suse.com/security/cve/CVE-2015-0352", }, { category: "external", summary: "SUSE Bug 927089 for CVE-2015-0352", url: "https://bugzilla.suse.com/927089", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "moderate", }, ], title: "CVE-2015-0352", }, { cve: "CVE-2015-0353", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-0353", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-0347, CVE-2015-0350, CVE-2015-0352, CVE-2015-0354, CVE-2015-0355, CVE-2015-0360, CVE-2015-3038, CVE-2015-3041, CVE-2015-3042, and CVE-2015-3043.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-0353", url: "https://www.suse.com/security/cve/CVE-2015-0353", }, { category: "external", summary: "SUSE Bug 927089 for CVE-2015-0353", url: "https://bugzilla.suse.com/927089", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "moderate", }, ], title: "CVE-2015-0353", }, { cve: "CVE-2015-0354", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-0354", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-0347, CVE-2015-0350, CVE-2015-0352, CVE-2015-0353, CVE-2015-0355, CVE-2015-0360, CVE-2015-3038, CVE-2015-3041, CVE-2015-3042, and CVE-2015-3043.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-0354", url: "https://www.suse.com/security/cve/CVE-2015-0354", }, { category: "external", summary: "SUSE Bug 927089 for CVE-2015-0354", url: "https://bugzilla.suse.com/927089", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "moderate", }, ], title: "CVE-2015-0354", }, { cve: "CVE-2015-0355", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-0355", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-0347, CVE-2015-0350, CVE-2015-0352, CVE-2015-0353, CVE-2015-0354, CVE-2015-0360, CVE-2015-3038, CVE-2015-3041, CVE-2015-3042, and CVE-2015-3043.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-0355", url: "https://www.suse.com/security/cve/CVE-2015-0355", }, { category: "external", summary: "SUSE Bug 927089 for CVE-2015-0355", url: "https://bugzilla.suse.com/927089", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "moderate", }, ], title: "CVE-2015-0355", }, { cve: "CVE-2015-0356", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-0356", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code by leveraging an unspecified \"type confusion.\"", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-0356", url: "https://www.suse.com/security/cve/CVE-2015-0356", }, { category: "external", summary: "SUSE Bug 927089 for CVE-2015-0356", url: "https://bugzilla.suse.com/927089", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "moderate", }, ], title: "CVE-2015-0356", }, { cve: "CVE-2015-0357", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-0357", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux does not properly restrict discovery of memory addresses, which allows attackers to bypass the ASLR protection mechanism via unspecified vectors, a different vulnerability than CVE-2015-3040.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-0357", url: "https://www.suse.com/security/cve/CVE-2015-0357", }, { category: "external", summary: "SUSE Bug 927089 for CVE-2015-0357", url: "https://bugzilla.suse.com/927089", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "moderate", }, ], title: "CVE-2015-0357", }, { cve: "CVE-2015-0358", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-0358", }, ], notes: [ { category: "general", text: "Use-after-free vulnerability in Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-0349, CVE-2015-0351, and CVE-2015-3039.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-0358", url: "https://www.suse.com/security/cve/CVE-2015-0358", }, { category: "external", summary: "SUSE Bug 927089 for CVE-2015-0358", url: "https://bugzilla.suse.com/927089", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "moderate", }, ], title: "CVE-2015-0358", }, { cve: "CVE-2015-0359", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-0359", }, ], notes: [ { category: "general", text: "Double free vulnerability in Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-0346.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-0359", url: "https://www.suse.com/security/cve/CVE-2015-0359", }, { category: "external", summary: "SUSE Bug 927089 for CVE-2015-0359", url: "https://bugzilla.suse.com/927089", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "moderate", }, ], title: "CVE-2015-0359", }, { cve: "CVE-2015-0360", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-0360", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-0347, CVE-2015-0350, CVE-2015-0352, CVE-2015-0353, CVE-2015-0354, CVE-2015-0355, CVE-2015-3038, CVE-2015-3041, CVE-2015-3042, and CVE-2015-3043.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-0360", url: "https://www.suse.com/security/cve/CVE-2015-0360", }, { category: "external", summary: "SUSE Bug 927089 for CVE-2015-0360", url: "https://bugzilla.suse.com/927089", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "moderate", }, ], title: "CVE-2015-0360", }, { cve: "CVE-2015-3038", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-3038", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-0347, CVE-2015-0350, CVE-2015-0352, CVE-2015-0353, CVE-2015-0354, CVE-2015-0355, CVE-2015-0360, CVE-2015-3041, CVE-2015-3042, and CVE-2015-3043.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-3038", url: "https://www.suse.com/security/cve/CVE-2015-3038", }, { category: "external", summary: "SUSE Bug 927089 for CVE-2015-3038", url: "https://bugzilla.suse.com/927089", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "moderate", }, ], title: "CVE-2015-3038", }, { cve: "CVE-2015-3039", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-3039", }, ], notes: [ { category: "general", text: "Use-after-free vulnerability in Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-0349, CVE-2015-0351, and CVE-2015-0358.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-3039", url: "https://www.suse.com/security/cve/CVE-2015-3039", }, { category: "external", summary: "SUSE Bug 927089 for CVE-2015-3039", url: "https://bugzilla.suse.com/927089", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "moderate", }, ], title: "CVE-2015-3039", }, { cve: "CVE-2015-3040", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-3040", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux does not properly restrict discovery of memory addresses, which allows attackers to bypass the ASLR protection mechanism via unspecified vectors, a different vulnerability than CVE-2015-0357.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-3040", url: "https://www.suse.com/security/cve/CVE-2015-3040", }, { category: "external", summary: "SUSE Bug 927089 for CVE-2015-3040", url: "https://bugzilla.suse.com/927089", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "moderate", }, ], title: "CVE-2015-3040", }, { cve: "CVE-2015-3041", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-3041", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-0347, CVE-2015-0350, CVE-2015-0352, CVE-2015-0353, CVE-2015-0354, CVE-2015-0355, CVE-2015-0360, CVE-2015-3038, CVE-2015-3042, and CVE-2015-3043.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-3041", url: "https://www.suse.com/security/cve/CVE-2015-3041", }, { category: "external", summary: "SUSE Bug 927089 for CVE-2015-3041", url: "https://bugzilla.suse.com/927089", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "moderate", }, ], title: "CVE-2015-3041", }, { cve: "CVE-2015-3042", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-3042", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-0347, CVE-2015-0350, CVE-2015-0352, CVE-2015-0353, CVE-2015-0354, CVE-2015-0355, CVE-2015-0360, CVE-2015-3038, CVE-2015-3041, and CVE-2015-3043.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-3042", url: "https://www.suse.com/security/cve/CVE-2015-3042", }, { category: "external", summary: "SUSE Bug 927089 for CVE-2015-3042", url: "https://bugzilla.suse.com/927089", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "moderate", }, ], title: "CVE-2015-3042", }, { cve: "CVE-2015-3043", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-3043", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, as exploited in the wild in April 2015, a different vulnerability than CVE-2015-0347, CVE-2015-0350, CVE-2015-0352, CVE-2015-0353, CVE-2015-0354, CVE-2015-0355, CVE-2015-0360, CVE-2015-3038, CVE-2015-3041, and CVE-2015-3042.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-3043", url: "https://www.suse.com/security/cve/CVE-2015-3043", }, { category: "external", summary: "SUSE Bug 927089 for CVE-2015-3043", url: "https://bugzilla.suse.com/927089", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 9.8, baseSeverity: "CRITICAL", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "moderate", }, ], title: "CVE-2015-3043", }, { cve: "CVE-2015-3044", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-3044", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to bypass intended access restrictions and obtain sensitive information via unspecified vectors.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-3044", url: "https://www.suse.com/security/cve/CVE-2015-3044", }, { category: "external", summary: "SUSE Bug 927089 for CVE-2015-3044", url: "https://bugzilla.suse.com/927089", }, { category: "external", summary: "SUSE Bug 930677 for CVE-2015-3044", url: "https://bugzilla.suse.com/930677", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "moderate", }, ], title: "CVE-2015-3044", }, { cve: "CVE-2015-3077", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-3077", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.289 and 14.x through 17.x before 17.0.0.188 on Windows and OS X and before 11.2.202.460 on Linux, Adobe AIR before 17.0.0.172, Adobe AIR SDK before 17.0.0.172, and Adobe AIR SDK & Compiler before 17.0.0.172 allow attackers to execute arbitrary code by leveraging an unspecified \"type confusion,\" a different vulnerability than CVE-2015-3084 and CVE-2015-3086.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-3077", url: "https://www.suse.com/security/cve/CVE-2015-3077", }, { category: "external", summary: "SUSE Bug 930677 for CVE-2015-3077", url: "https://bugzilla.suse.com/930677", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2015-3077", }, { cve: "CVE-2015-3078", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-3078", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.289 and 14.x through 17.x before 17.0.0.188 on Windows and OS X and before 11.2.202.460 on Linux, Adobe AIR before 17.0.0.172, Adobe AIR SDK before 17.0.0.172, and Adobe AIR SDK & Compiler before 17.0.0.172 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-3089, CVE-2015-3090, and CVE-2015-3093.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-3078", url: "https://www.suse.com/security/cve/CVE-2015-3078", }, { category: "external", summary: "SUSE Bug 930677 for CVE-2015-3078", url: "https://bugzilla.suse.com/930677", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2015-3078", }, { cve: "CVE-2015-3079", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-3079", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.289 and 14.x through 17.x before 17.0.0.188 on Windows and OS X and before 11.2.202.460 on Linux, Adobe AIR before 17.0.0.172, Adobe AIR SDK before 17.0.0.172, and Adobe AIR SDK & Compiler before 17.0.0.172 allow attackers to bypass intended access restrictions and obtain sensitive information via unspecified vectors.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-3079", url: "https://www.suse.com/security/cve/CVE-2015-3079", }, { category: "external", summary: "SUSE Bug 930677 for CVE-2015-3079", url: "https://bugzilla.suse.com/930677", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "moderate", }, ], title: "CVE-2015-3079", }, { cve: "CVE-2015-3080", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-3080", }, ], notes: [ { category: "general", text: "Use-after-free vulnerability in Adobe Flash Player before 13.0.0.289 and 14.x through 17.x before 17.0.0.188 on Windows and OS X and before 11.2.202.460 on Linux, Adobe AIR before 17.0.0.172, Adobe AIR SDK before 17.0.0.172, and Adobe AIR SDK & Compiler before 17.0.0.172 allows attackers to execute arbitrary code via unspecified vectors.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-3080", url: "https://www.suse.com/security/cve/CVE-2015-3080", }, { category: "external", summary: "SUSE Bug 930677 for CVE-2015-3080", url: "https://bugzilla.suse.com/930677", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2015-3080", }, { cve: "CVE-2015-3081", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-3081", }, ], notes: [ { category: "general", text: "Race condition in Adobe Flash Player before 13.0.0.289 and 14.x through 17.x before 17.0.0.188 on Windows and OS X and before 11.2.202.460 on Linux, Adobe AIR before 17.0.0.172, Adobe AIR SDK before 17.0.0.172, and Adobe AIR SDK & Compiler before 17.0.0.172 allows attackers to bypass the Internet Explorer Protected Mode protection mechanism via unspecified vectors.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-3081", url: "https://www.suse.com/security/cve/CVE-2015-3081", }, { category: "external", summary: "SUSE Bug 930677 for CVE-2015-3081", url: "https://bugzilla.suse.com/930677", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "moderate", }, ], title: "CVE-2015-3081", }, { cve: "CVE-2015-3082", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-3082", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.289 and 14.x through 17.x before 17.0.0.188 on Windows and OS X and before 11.2.202.460 on Linux, Adobe AIR before 17.0.0.172, Adobe AIR SDK before 17.0.0.172, and Adobe AIR SDK & Compiler before 17.0.0.172 allow remote attackers to bypass intended restrictions on filesystem write operations via unspecified vectors, a different vulnerability than CVE-2015-3083 and CVE-2015-3085.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-3082", url: "https://www.suse.com/security/cve/CVE-2015-3082", }, { category: "external", summary: "SUSE Bug 930677 for CVE-2015-3082", url: "https://bugzilla.suse.com/930677", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2015-3082", }, { cve: "CVE-2015-3083", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-3083", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.289 and 14.x through 17.x before 17.0.0.188 on Windows and OS X and before 11.2.202.460 on Linux, Adobe AIR before 17.0.0.172, Adobe AIR SDK before 17.0.0.172, and Adobe AIR SDK & Compiler before 17.0.0.172 allow remote attackers to bypass intended restrictions on filesystem write operations via unspecified vectors, a different vulnerability than CVE-2015-3082 and CVE-2015-3085.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-3083", url: "https://www.suse.com/security/cve/CVE-2015-3083", }, { category: "external", summary: "SUSE Bug 930677 for CVE-2015-3083", url: "https://bugzilla.suse.com/930677", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2015-3083", }, { cve: "CVE-2015-3084", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-3084", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.289 and 14.x through 17.x before 17.0.0.188 on Windows and OS X and before 11.2.202.460 on Linux, Adobe AIR before 17.0.0.172, Adobe AIR SDK before 17.0.0.172, and Adobe AIR SDK & Compiler before 17.0.0.172 allow attackers to execute arbitrary code by leveraging an unspecified \"type confusion,\" a different vulnerability than CVE-2015-3077 and CVE-2015-3086.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-3084", url: "https://www.suse.com/security/cve/CVE-2015-3084", }, { category: "external", summary: "SUSE Bug 930677 for CVE-2015-3084", url: "https://bugzilla.suse.com/930677", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2015-3084", }, { cve: "CVE-2015-3085", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-3085", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.289 and 14.x through 17.x before 17.0.0.188 on Windows and OS X and before 11.2.202.460 on Linux, Adobe AIR before 17.0.0.172, Adobe AIR SDK before 17.0.0.172, and Adobe AIR SDK & Compiler before 17.0.0.172 allow remote attackers to bypass intended restrictions on filesystem write operations via unspecified vectors, a different vulnerability than CVE-2015-3082 and CVE-2015-3083.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-3085", url: "https://www.suse.com/security/cve/CVE-2015-3085", }, { category: "external", summary: "SUSE Bug 930677 for CVE-2015-3085", url: "https://bugzilla.suse.com/930677", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2015-3085", }, { cve: "CVE-2015-3086", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-3086", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.289 and 14.x through 17.x before 17.0.0.188 on Windows and OS X and before 11.2.202.460 on Linux, Adobe AIR before 17.0.0.172, Adobe AIR SDK before 17.0.0.172, and Adobe AIR SDK & Compiler before 17.0.0.172 allow attackers to execute arbitrary code by leveraging an unspecified \"type confusion,\" a different vulnerability than CVE-2015-3077 and CVE-2015-3084.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-3086", url: "https://www.suse.com/security/cve/CVE-2015-3086", }, { category: "external", summary: "SUSE Bug 930677 for CVE-2015-3086", url: "https://bugzilla.suse.com/930677", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2015-3086", }, { cve: "CVE-2015-3087", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-3087", }, ], notes: [ { category: "general", text: "Integer overflow in Adobe Flash Player before 13.0.0.289 and 14.x through 17.x before 17.0.0.188 on Windows and OS X and before 11.2.202.460 on Linux, Adobe AIR before 17.0.0.172, Adobe AIR SDK before 17.0.0.172, and Adobe AIR SDK & Compiler before 17.0.0.172 allows attackers to execute arbitrary code via unspecified vectors.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-3087", url: "https://www.suse.com/security/cve/CVE-2015-3087", }, { category: "external", summary: "SUSE Bug 930677 for CVE-2015-3087", url: "https://bugzilla.suse.com/930677", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2015-3087", }, { cve: "CVE-2015-3088", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-3088", }, ], notes: [ { category: "general", text: "Heap-based buffer overflow in Adobe Flash Player before 13.0.0.289 and 14.x through 17.x before 17.0.0.188 on Windows and OS X and before 11.2.202.460 on Linux, Adobe AIR before 17.0.0.172, Adobe AIR SDK before 17.0.0.172, and Adobe AIR SDK & Compiler before 17.0.0.172 allows attackers to execute arbitrary code via unspecified vectors.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-3088", url: "https://www.suse.com/security/cve/CVE-2015-3088", }, { category: "external", summary: "SUSE Bug 930677 for CVE-2015-3088", url: "https://bugzilla.suse.com/930677", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2015-3088", }, { cve: "CVE-2015-3089", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-3089", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.289 and 14.x through 17.x before 17.0.0.188 on Windows and OS X and before 11.2.202.460 on Linux, Adobe AIR before 17.0.0.172, Adobe AIR SDK before 17.0.0.172, and Adobe AIR SDK & Compiler before 17.0.0.172 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-3078, CVE-2015-3090, and CVE-2015-3093.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-3089", url: "https://www.suse.com/security/cve/CVE-2015-3089", }, { category: "external", summary: "SUSE Bug 930677 for CVE-2015-3089", url: "https://bugzilla.suse.com/930677", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2015-3089", }, { cve: "CVE-2015-3090", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-3090", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.289 and 14.x through 17.x before 17.0.0.188 on Windows and OS X and before 11.2.202.460 on Linux, Adobe AIR before 17.0.0.172, Adobe AIR SDK before 17.0.0.172, and Adobe AIR SDK & Compiler before 17.0.0.172 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-3078, CVE-2015-3089, and CVE-2015-3093.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-3090", url: "https://www.suse.com/security/cve/CVE-2015-3090", }, { category: "external", summary: "SUSE Bug 930677 for CVE-2015-3090", url: "https://bugzilla.suse.com/930677", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2015-3090", }, { cve: "CVE-2015-3091", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-3091", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.289 and 14.x through 17.x before 17.0.0.188 on Windows and OS X and before 11.2.202.460 on Linux, Adobe AIR before 17.0.0.172, Adobe AIR SDK before 17.0.0.172, and Adobe AIR SDK & Compiler before 17.0.0.172 do not properly restrict discovery of memory addresses, which allows attackers to bypass the ASLR protection mechanism via unspecified vectors, a different vulnerability than CVE-2015-3092.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-3091", url: "https://www.suse.com/security/cve/CVE-2015-3091", }, { category: "external", summary: "SUSE Bug 930677 for CVE-2015-3091", url: "https://bugzilla.suse.com/930677", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2015-3091", }, { cve: "CVE-2015-3092", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-3092", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.289 and 14.x through 17.x before 17.0.0.188 on Windows and OS X and before 11.2.202.460 on Linux, Adobe AIR before 17.0.0.172, Adobe AIR SDK before 17.0.0.172, and Adobe AIR SDK & Compiler before 17.0.0.172 do not properly restrict discovery of memory addresses, which allows attackers to bypass the ASLR protection mechanism via unspecified vectors, a different vulnerability than CVE-2015-3091.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-3092", url: "https://www.suse.com/security/cve/CVE-2015-3092", }, { category: "external", summary: "SUSE Bug 930677 for CVE-2015-3092", url: "https://bugzilla.suse.com/930677", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2015-3092", }, { cve: "CVE-2015-3093", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-3093", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.289 and 14.x through 17.x before 17.0.0.188 on Windows and OS X and before 11.2.202.460 on Linux, Adobe AIR before 17.0.0.172, Adobe AIR SDK before 17.0.0.172, and Adobe AIR SDK & Compiler before 17.0.0.172 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-3078, CVE-2015-3089, and CVE-2015-3090.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-3093", url: "https://www.suse.com/security/cve/CVE-2015-3093", }, { category: "external", summary: "SUSE Bug 930677 for CVE-2015-3093", url: "https://bugzilla.suse.com/930677", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "critical", }, ], title: "CVE-2015-3093", }, { cve: "CVE-2015-3096", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-3096", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.292 and 14.x through 18.x before 18.0.0.160 on Windows and OS X and before 11.2.202.466 on Linux, Adobe AIR before 18.0.0.144 on Windows and before 18.0.0.143 on OS X and Android, Adobe AIR SDK before 18.0.0.144 on Windows and before 18.0.0.143 on OS X, and Adobe AIR SDK & Compiler before 18.0.0.144 on Windows and before 18.0.0.143 on OS X allow remote attackers to bypass a CVE-2014-5333 protection mechanism via unspecified vectors.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-3096", url: "https://www.suse.com/security/cve/CVE-2015-3096", }, { category: "external", summary: "SUSE Bug 934088 for CVE-2015-3096", url: "https://bugzilla.suse.com/934088", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "important", }, ], title: "CVE-2015-3096", }, { cve: "CVE-2015-3098", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-3098", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.292 and 14.x through 18.x before 18.0.0.160 on Windows and OS X and before 11.2.202.466 on Linux, Adobe AIR before 18.0.0.144 on Windows and before 18.0.0.143 on OS X and Android, Adobe AIR SDK before 18.0.0.144 on Windows and before 18.0.0.143 on OS X, and Adobe AIR SDK & Compiler before 18.0.0.144 on Windows and before 18.0.0.143 on OS X allow remote attackers to bypass the Same Origin Policy via unspecified vectors, a different vulnerability than CVE-2015-3099 and CVE-2015-3102.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-3098", url: "https://www.suse.com/security/cve/CVE-2015-3098", }, { category: "external", summary: "SUSE Bug 934088 for CVE-2015-3098", url: "https://bugzilla.suse.com/934088", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "important", }, ], title: "CVE-2015-3098", }, { cve: "CVE-2015-3099", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-3099", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.292 and 14.x through 18.x before 18.0.0.160 on Windows and OS X and before 11.2.202.466 on Linux, Adobe AIR before 18.0.0.144 on Windows and before 18.0.0.143 on OS X and Android, Adobe AIR SDK before 18.0.0.144 on Windows and before 18.0.0.143 on OS X, and Adobe AIR SDK & Compiler before 18.0.0.144 on Windows and before 18.0.0.143 on OS X allow remote attackers to bypass the Same Origin Policy via unspecified vectors, a different vulnerability than CVE-2015-3098 and CVE-2015-3102.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-3099", url: "https://www.suse.com/security/cve/CVE-2015-3099", }, { category: "external", summary: "SUSE Bug 934088 for CVE-2015-3099", url: "https://bugzilla.suse.com/934088", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "important", }, ], title: "CVE-2015-3099", }, { cve: "CVE-2015-3100", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-3100", }, ], notes: [ { category: "general", text: "Stack-based buffer overflow in Adobe Flash Player before 13.0.0.292 and 14.x through 18.x before 18.0.0.160 on Windows and OS X and before 11.2.202.466 on Linux, Adobe AIR before 18.0.0.144 on Windows and before 18.0.0.143 on OS X and Android, Adobe AIR SDK before 18.0.0.144 on Windows and before 18.0.0.143 on OS X, and Adobe AIR SDK & Compiler before 18.0.0.144 on Windows and before 18.0.0.143 on OS X allows attackers to execute arbitrary code via unspecified vectors.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-3100", url: "https://www.suse.com/security/cve/CVE-2015-3100", }, { category: "external", summary: "SUSE Bug 934088 for CVE-2015-3100", url: "https://bugzilla.suse.com/934088", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "important", }, ], title: "CVE-2015-3100", }, { cve: "CVE-2015-3102", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-3102", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.292 and 14.x through 18.x before 18.0.0.160 on Windows and OS X and before 11.2.202.466 on Linux, Adobe AIR before 18.0.0.144 on Windows and before 18.0.0.143 on OS X and Android, Adobe AIR SDK before 18.0.0.144 on Windows and before 18.0.0.143 on OS X, and Adobe AIR SDK & Compiler before 18.0.0.144 on Windows and before 18.0.0.143 on OS X allow remote attackers to bypass the Same Origin Policy via unspecified vectors, a different vulnerability than CVE-2015-3098 and CVE-2015-3099.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-3102", url: "https://www.suse.com/security/cve/CVE-2015-3102", }, { category: "external", summary: "SUSE Bug 934088 for CVE-2015-3102", url: "https://bugzilla.suse.com/934088", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "important", }, ], title: "CVE-2015-3102", }, { cve: "CVE-2015-3103", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-3103", }, ], notes: [ { category: "general", text: "Use-after-free vulnerability in Adobe Flash Player before 13.0.0.292 and 14.x through 18.x before 18.0.0.160 on Windows and OS X and before 11.2.202.466 on Linux, Adobe AIR before 18.0.0.144 on Windows and before 18.0.0.143 on OS X and Android, Adobe AIR SDK before 18.0.0.144 on Windows and before 18.0.0.143 on OS X, and Adobe AIR SDK & Compiler before 18.0.0.144 on Windows and before 18.0.0.143 on OS X allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-3106 and CVE-2015-3107.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-3103", url: "https://www.suse.com/security/cve/CVE-2015-3103", }, { category: "external", summary: "SUSE Bug 934088 for CVE-2015-3103", url: "https://bugzilla.suse.com/934088", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "important", }, ], title: "CVE-2015-3103", }, { cve: "CVE-2015-3106", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-3106", }, ], notes: [ { category: "general", text: "Use-after-free vulnerability in Adobe Flash Player before 13.0.0.292 and 14.x through 18.x before 18.0.0.160 on Windows and OS X and before 11.2.202.466 on Linux, Adobe AIR before 18.0.0.144 on Windows and before 18.0.0.143 on OS X and Android, Adobe AIR SDK before 18.0.0.144 on Windows and before 18.0.0.143 on OS X, and Adobe AIR SDK & Compiler before 18.0.0.144 on Windows and before 18.0.0.143 on OS X allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-3103 and CVE-2015-3107.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-3106", url: "https://www.suse.com/security/cve/CVE-2015-3106", }, { category: "external", summary: "SUSE Bug 934088 for CVE-2015-3106", url: "https://bugzilla.suse.com/934088", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "important", }, ], title: "CVE-2015-3106", }, { cve: "CVE-2015-3107", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-3107", }, ], notes: [ { category: "general", text: "Use-after-free vulnerability in Adobe Flash Player before 13.0.0.292 and 14.x through 18.x before 18.0.0.160 on Windows and OS X and before 11.2.202.466 on Linux, Adobe AIR before 18.0.0.144 on Windows and before 18.0.0.143 on OS X and Android, Adobe AIR SDK before 18.0.0.144 on Windows and before 18.0.0.143 on OS X, and Adobe AIR SDK & Compiler before 18.0.0.144 on Windows and before 18.0.0.143 on OS X allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-3103 and CVE-2015-3106.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-3107", url: "https://www.suse.com/security/cve/CVE-2015-3107", }, { category: "external", summary: "SUSE Bug 934088 for CVE-2015-3107", url: "https://bugzilla.suse.com/934088", }, { category: "external", summary: "SUSE Bug 941239 for CVE-2015-3107", url: "https://bugzilla.suse.com/941239", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "important", }, ], title: "CVE-2015-3107", }, { cve: "CVE-2015-3108", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-3108", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.292 and 14.x through 18.x before 18.0.0.160 on Windows and OS X and before 11.2.202.466 on Linux, Adobe AIR before 18.0.0.144 on Windows and before 18.0.0.143 on OS X and Android, Adobe AIR SDK before 18.0.0.144 on Windows and before 18.0.0.143 on OS X, and Adobe AIR SDK & Compiler before 18.0.0.144 on Windows and before 18.0.0.143 on OS X do not properly restrict discovery of memory addresses, which allows attackers to bypass the ASLR protection mechanism via unspecified vectors.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-3108", url: "https://www.suse.com/security/cve/CVE-2015-3108", }, { category: "external", summary: "SUSE Bug 934088 for CVE-2015-3108", url: "https://bugzilla.suse.com/934088", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "important", }, ], title: "CVE-2015-3108", }, { cve: "CVE-2015-3113", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-3113", }, ], notes: [ { category: "general", text: "Heap-based buffer overflow in Adobe Flash Player before 13.0.0.296 and 14.x through 18.x before 18.0.0.194 on Windows and OS X and before 11.2.202.468 on Linux allows remote attackers to execute arbitrary code via unspecified vectors, as exploited in the wild in June 2015.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-3113", url: "https://www.suse.com/security/cve/CVE-2015-3113", }, { category: "external", summary: "SUSE Bug 935701 for CVE-2015-3113", url: "https://bugzilla.suse.com/935701", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 9.8, baseSeverity: "CRITICAL", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1.x86_64", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.i586", "SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2014-11-14T12:52:02Z", details: "important", }, ], title: "CVE-2015-3113", }, ], }
suse-su-2015:1043-1
Vulnerability from csaf_suse
Notes
{ document: { aggregate_severity: { namespace: "https://www.suse.com/support/security/rating/", text: "important", }, category: "csaf_security_advisory", csaf_version: "2.0", distribution: { text: "Copyright 2024 SUSE LLC. All rights reserved.", tlp: { label: "WHITE", url: "https://www.first.org/tlp/", }, }, lang: "en", notes: [ { category: "summary", text: "Security update for flash-player", title: "Title of the patch", }, { category: "description", text: " The following issues are fixed by this updated:\n * CVE-2015-3096: These updates resolve a vulnerability that could be exploited to bypass the fix for CVE-2014-5333. \n * CVE-2015-3098, CVE-2015-3099, CVE-2015-3102:These updates resolve vulnerabilities that could be exploited to bypass the same-origin-policy and lead to information disclosure. \n * CVE-2015-3100: These updates resolve a stack overflow vulnerability that could lead to code execution.\n * CVE-2015-3103, CVE-2015-3106, CVE-2015-3107: These updates resolve use-after-free vulnerabilities that could lead to code execution.\n * CVE-2015-3104: These updates resolve an integer overflow vulnerability that could lead to code execution.\n * CVE-2015-3105: These updates resolve a memory corruption vulnerability that could lead to code execution.\n * CVE-2015-3108: These updates resolve a memory leak vulnerability that could be used to bypass ASLR (CVE-2015-3108).\n (bsc#934088)", title: "Description of the patch", }, { category: "details", text: "SUSE-SLE-DESKTOP-12-2015-263,SUSE-SLE-WE-12-2015-263", title: "Patchnames", }, { category: "legal_disclaimer", text: "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).", title: "Terms of use", }, ], publisher: { category: "vendor", contact_details: "https://www.suse.com/support/security/contact/", name: "SUSE Product Security Team", namespace: "https://www.suse.com/", }, references: [ { category: "external", summary: "SUSE ratings", url: "https://www.suse.com/support/security/rating/", }, { category: "self", summary: "URL of this CSAF notice", url: "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2015_1043-1.json", }, { category: "self", summary: "URL for SUSE-SU-2015:1043-1", url: "https://www.suse.com/support/update/announcement/2015/suse-su-20151043-1/", }, { category: "self", summary: "E-Mail link for SUSE-SU-2015:1043-1", url: "https://lists.suse.com/pipermail/sle-security-updates/2015-June/001433.html", }, { category: "self", summary: "SUSE Bug 934088", url: "https://bugzilla.suse.com/934088", }, { category: "self", summary: "SUSE CVE CVE-2015-3096 page", url: "https://www.suse.com/security/cve/CVE-2015-3096/", }, { category: "self", summary: "SUSE CVE CVE-2015-3098 page", url: "https://www.suse.com/security/cve/CVE-2015-3098/", }, { category: "self", summary: "SUSE CVE CVE-2015-3099 page", url: "https://www.suse.com/security/cve/CVE-2015-3099/", }, { category: "self", summary: "SUSE CVE CVE-2015-3100 page", url: "https://www.suse.com/security/cve/CVE-2015-3100/", }, { category: "self", summary: "SUSE CVE CVE-2015-3102 page", url: "https://www.suse.com/security/cve/CVE-2015-3102/", }, { category: "self", summary: "SUSE CVE CVE-2015-3103 page", url: "https://www.suse.com/security/cve/CVE-2015-3103/", }, { category: "self", summary: "SUSE CVE CVE-2015-3104 page", url: "https://www.suse.com/security/cve/CVE-2015-3104/", }, { category: "self", summary: "SUSE CVE CVE-2015-3105 page", url: "https://www.suse.com/security/cve/CVE-2015-3105/", }, { category: "self", summary: "SUSE CVE CVE-2015-3106 page", url: "https://www.suse.com/security/cve/CVE-2015-3106/", }, { category: "self", summary: "SUSE CVE CVE-2015-3107 page", url: "https://www.suse.com/security/cve/CVE-2015-3107/", }, { category: "self", summary: "SUSE CVE CVE-2015-3108 page", url: "https://www.suse.com/security/cve/CVE-2015-3108/", }, ], title: "Security update for flash-player", tracking: { current_release_date: "2015-06-11T11:20:08Z", generator: { date: "2015-06-11T11:20:08Z", engine: { name: "cve-database.git:bin/generate-csaf.pl", version: "1", }, }, id: "SUSE-SU-2015:1043-1", initial_release_date: "2015-06-11T11:20:08Z", revision_history: [ { date: "2015-06-11T11:20:08Z", number: "1", summary: "Current version", }, ], status: "final", version: "1", }, }, product_tree: { branches: [ { branches: [ { branches: [ { category: "product_version", name: "flash-player-11.2.202.466-86.1.i586", product: { name: "flash-player-11.2.202.466-86.1.i586", product_id: "flash-player-11.2.202.466-86.1.i586", }, }, { category: "product_version", name: "flash-player-gnome-11.2.202.466-86.1.i586", product: { name: "flash-player-gnome-11.2.202.466-86.1.i586", product_id: "flash-player-gnome-11.2.202.466-86.1.i586", }, }, ], category: "architecture", name: "i586", }, { branches: [ { category: "product_version", name: "flash-player-11.2.202.466-86.1.x86_64", product: { name: "flash-player-11.2.202.466-86.1.x86_64", product_id: "flash-player-11.2.202.466-86.1.x86_64", }, }, { category: "product_version", name: "flash-player-gnome-11.2.202.466-86.1.x86_64", product: { name: "flash-player-gnome-11.2.202.466-86.1.x86_64", product_id: "flash-player-gnome-11.2.202.466-86.1.x86_64", }, }, ], category: "architecture", name: "x86_64", }, { branches: [ { category: "product_name", name: "SUSE Linux Enterprise Desktop 12", product: { name: "SUSE Linux Enterprise Desktop 12", product_id: "SUSE Linux Enterprise Desktop 12", product_identification_helper: { cpe: "cpe:/o:suse:sled:12", }, }, }, { category: "product_name", name: "SUSE Linux Enterprise Workstation Extension 12", product: { name: "SUSE Linux Enterprise Workstation Extension 12", product_id: "SUSE Linux Enterprise Workstation Extension 12", product_identification_helper: { cpe: "cpe:/o:suse:sle-we:12", }, }, }, ], category: "product_family", name: "SUSE Linux Enterprise", }, ], category: "vendor", name: "SUSE", }, ], relationships: [ { category: "default_component_of", full_product_name: { name: "flash-player-11.2.202.466-86.1.i586 as component of SUSE Linux Enterprise Desktop 12", product_id: "SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.466-86.1.i586", }, product_reference: "flash-player-11.2.202.466-86.1.i586", relates_to_product_reference: "SUSE Linux Enterprise Desktop 12", }, { category: "default_component_of", full_product_name: { name: "flash-player-11.2.202.466-86.1.x86_64 as component of SUSE Linux Enterprise Desktop 12", product_id: "SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.466-86.1.x86_64", }, product_reference: "flash-player-11.2.202.466-86.1.x86_64", relates_to_product_reference: "SUSE Linux Enterprise Desktop 12", }, { category: "default_component_of", full_product_name: { name: "flash-player-gnome-11.2.202.466-86.1.i586 as component of SUSE Linux Enterprise Desktop 12", product_id: "SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.466-86.1.i586", }, product_reference: "flash-player-gnome-11.2.202.466-86.1.i586", relates_to_product_reference: "SUSE Linux Enterprise Desktop 12", }, { category: "default_component_of", full_product_name: { name: "flash-player-gnome-11.2.202.466-86.1.x86_64 as component of SUSE Linux Enterprise Desktop 12", product_id: "SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.466-86.1.x86_64", }, product_reference: "flash-player-gnome-11.2.202.466-86.1.x86_64", relates_to_product_reference: "SUSE Linux Enterprise Desktop 12", }, { category: "default_component_of", full_product_name: { name: "flash-player-11.2.202.466-86.1.i586 as component of SUSE Linux Enterprise Workstation Extension 12", product_id: "SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.466-86.1.i586", }, product_reference: "flash-player-11.2.202.466-86.1.i586", relates_to_product_reference: "SUSE Linux Enterprise Workstation Extension 12", }, { category: "default_component_of", full_product_name: { name: "flash-player-11.2.202.466-86.1.x86_64 as component of SUSE Linux Enterprise Workstation Extension 12", product_id: "SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.466-86.1.x86_64", }, product_reference: "flash-player-11.2.202.466-86.1.x86_64", relates_to_product_reference: "SUSE Linux Enterprise Workstation Extension 12", }, { category: "default_component_of", full_product_name: { name: "flash-player-gnome-11.2.202.466-86.1.i586 as component of SUSE Linux Enterprise Workstation Extension 12", product_id: "SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.466-86.1.i586", }, product_reference: "flash-player-gnome-11.2.202.466-86.1.i586", relates_to_product_reference: "SUSE Linux Enterprise Workstation Extension 12", }, { category: "default_component_of", full_product_name: { name: "flash-player-gnome-11.2.202.466-86.1.x86_64 as component of SUSE Linux Enterprise Workstation Extension 12", product_id: "SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.466-86.1.x86_64", }, product_reference: "flash-player-gnome-11.2.202.466-86.1.x86_64", relates_to_product_reference: "SUSE Linux Enterprise Workstation Extension 12", }, ], }, vulnerabilities: [ { cve: "CVE-2015-3096", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-3096", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.292 and 14.x through 18.x before 18.0.0.160 on Windows and OS X and before 11.2.202.466 on Linux, Adobe AIR before 18.0.0.144 on Windows and before 18.0.0.143 on OS X and Android, Adobe AIR SDK before 18.0.0.144 on Windows and before 18.0.0.143 on OS X, and Adobe AIR SDK & Compiler before 18.0.0.144 on Windows and before 18.0.0.143 on OS X allow remote attackers to bypass a CVE-2014-5333 protection mechanism via unspecified vectors.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.466-86.1.i586", "SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.466-86.1.x86_64", "SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.466-86.1.i586", "SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.466-86.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.466-86.1.i586", "SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.466-86.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.466-86.1.i586", "SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.466-86.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-3096", url: "https://www.suse.com/security/cve/CVE-2015-3096", }, { category: "external", summary: "SUSE Bug 934088 for CVE-2015-3096", url: "https://bugzilla.suse.com/934088", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.466-86.1.i586", "SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.466-86.1.x86_64", "SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.466-86.1.i586", "SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.466-86.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.466-86.1.i586", "SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.466-86.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.466-86.1.i586", "SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.466-86.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2015-06-11T11:20:08Z", details: "important", }, ], title: "CVE-2015-3096", }, { cve: "CVE-2015-3098", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-3098", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.292 and 14.x through 18.x before 18.0.0.160 on Windows and OS X and before 11.2.202.466 on Linux, Adobe AIR before 18.0.0.144 on Windows and before 18.0.0.143 on OS X and Android, Adobe AIR SDK before 18.0.0.144 on Windows and before 18.0.0.143 on OS X, and Adobe AIR SDK & Compiler before 18.0.0.144 on Windows and before 18.0.0.143 on OS X allow remote attackers to bypass the Same Origin Policy via unspecified vectors, a different vulnerability than CVE-2015-3099 and CVE-2015-3102.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.466-86.1.i586", "SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.466-86.1.x86_64", "SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.466-86.1.i586", "SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.466-86.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.466-86.1.i586", "SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.466-86.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.466-86.1.i586", "SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.466-86.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-3098", url: "https://www.suse.com/security/cve/CVE-2015-3098", }, { category: "external", summary: "SUSE Bug 934088 for CVE-2015-3098", url: "https://bugzilla.suse.com/934088", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.466-86.1.i586", "SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.466-86.1.x86_64", "SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.466-86.1.i586", "SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.466-86.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.466-86.1.i586", "SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.466-86.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.466-86.1.i586", "SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.466-86.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2015-06-11T11:20:08Z", details: "important", }, ], title: "CVE-2015-3098", }, { cve: "CVE-2015-3099", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-3099", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.292 and 14.x through 18.x before 18.0.0.160 on Windows and OS X and before 11.2.202.466 on Linux, Adobe AIR before 18.0.0.144 on Windows and before 18.0.0.143 on OS X and Android, Adobe AIR SDK before 18.0.0.144 on Windows and before 18.0.0.143 on OS X, and Adobe AIR SDK & Compiler before 18.0.0.144 on Windows and before 18.0.0.143 on OS X allow remote attackers to bypass the Same Origin Policy via unspecified vectors, a different vulnerability than CVE-2015-3098 and CVE-2015-3102.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.466-86.1.i586", "SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.466-86.1.x86_64", "SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.466-86.1.i586", "SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.466-86.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.466-86.1.i586", "SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.466-86.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.466-86.1.i586", "SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.466-86.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-3099", url: "https://www.suse.com/security/cve/CVE-2015-3099", }, { category: "external", summary: "SUSE Bug 934088 for CVE-2015-3099", url: "https://bugzilla.suse.com/934088", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.466-86.1.i586", "SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.466-86.1.x86_64", "SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.466-86.1.i586", "SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.466-86.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.466-86.1.i586", "SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.466-86.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.466-86.1.i586", "SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.466-86.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2015-06-11T11:20:08Z", details: "important", }, ], title: "CVE-2015-3099", }, { cve: "CVE-2015-3100", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-3100", }, ], notes: [ { category: "general", text: "Stack-based buffer overflow in Adobe Flash Player before 13.0.0.292 and 14.x through 18.x before 18.0.0.160 on Windows and OS X and before 11.2.202.466 on Linux, Adobe AIR before 18.0.0.144 on Windows and before 18.0.0.143 on OS X and Android, Adobe AIR SDK before 18.0.0.144 on Windows and before 18.0.0.143 on OS X, and Adobe AIR SDK & Compiler before 18.0.0.144 on Windows and before 18.0.0.143 on OS X allows attackers to execute arbitrary code via unspecified vectors.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.466-86.1.i586", "SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.466-86.1.x86_64", "SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.466-86.1.i586", "SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.466-86.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.466-86.1.i586", "SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.466-86.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.466-86.1.i586", "SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.466-86.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-3100", url: "https://www.suse.com/security/cve/CVE-2015-3100", }, { category: "external", summary: "SUSE Bug 934088 for CVE-2015-3100", url: "https://bugzilla.suse.com/934088", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.466-86.1.i586", "SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.466-86.1.x86_64", "SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.466-86.1.i586", "SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.466-86.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.466-86.1.i586", "SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.466-86.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.466-86.1.i586", "SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.466-86.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2015-06-11T11:20:08Z", details: "important", }, ], title: "CVE-2015-3100", }, { cve: "CVE-2015-3102", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-3102", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.292 and 14.x through 18.x before 18.0.0.160 on Windows and OS X and before 11.2.202.466 on Linux, Adobe AIR before 18.0.0.144 on Windows and before 18.0.0.143 on OS X and Android, Adobe AIR SDK before 18.0.0.144 on Windows and before 18.0.0.143 on OS X, and Adobe AIR SDK & Compiler before 18.0.0.144 on Windows and before 18.0.0.143 on OS X allow remote attackers to bypass the Same Origin Policy via unspecified vectors, a different vulnerability than CVE-2015-3098 and CVE-2015-3099.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.466-86.1.i586", "SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.466-86.1.x86_64", "SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.466-86.1.i586", "SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.466-86.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.466-86.1.i586", "SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.466-86.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.466-86.1.i586", "SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.466-86.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-3102", url: "https://www.suse.com/security/cve/CVE-2015-3102", }, { category: "external", summary: "SUSE Bug 934088 for CVE-2015-3102", url: "https://bugzilla.suse.com/934088", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.466-86.1.i586", "SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.466-86.1.x86_64", "SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.466-86.1.i586", "SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.466-86.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.466-86.1.i586", "SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.466-86.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.466-86.1.i586", "SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.466-86.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2015-06-11T11:20:08Z", details: "important", }, ], title: "CVE-2015-3102", }, { cve: "CVE-2015-3103", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-3103", }, ], notes: [ { category: "general", text: "Use-after-free vulnerability in Adobe Flash Player before 13.0.0.292 and 14.x through 18.x before 18.0.0.160 on Windows and OS X and before 11.2.202.466 on Linux, Adobe AIR before 18.0.0.144 on Windows and before 18.0.0.143 on OS X and Android, Adobe AIR SDK before 18.0.0.144 on Windows and before 18.0.0.143 on OS X, and Adobe AIR SDK & Compiler before 18.0.0.144 on Windows and before 18.0.0.143 on OS X allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-3106 and CVE-2015-3107.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.466-86.1.i586", "SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.466-86.1.x86_64", "SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.466-86.1.i586", "SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.466-86.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.466-86.1.i586", "SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.466-86.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.466-86.1.i586", "SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.466-86.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-3103", url: "https://www.suse.com/security/cve/CVE-2015-3103", }, { category: "external", summary: "SUSE Bug 934088 for CVE-2015-3103", url: "https://bugzilla.suse.com/934088", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.466-86.1.i586", "SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.466-86.1.x86_64", "SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.466-86.1.i586", "SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.466-86.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.466-86.1.i586", "SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.466-86.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.466-86.1.i586", "SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.466-86.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2015-06-11T11:20:08Z", details: "important", }, ], title: "CVE-2015-3103", }, { cve: "CVE-2015-3104", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-3104", }, ], notes: [ { category: "general", text: "Integer overflow in Adobe Flash Player before 13.0.0.292 and 14.x through 18.x before 18.0.0.160 on Windows and OS X and before 11.2.202.466 on Linux, Adobe AIR before 18.0.0.144 on Windows and before 18.0.0.143 on OS X and Android, Adobe AIR SDK before 18.0.0.144 on Windows and before 18.0.0.143 on OS X, and Adobe AIR SDK & Compiler before 18.0.0.144 on Windows and before 18.0.0.143 on OS X allows attackers to execute arbitrary code via unspecified vectors.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.466-86.1.i586", "SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.466-86.1.x86_64", "SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.466-86.1.i586", "SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.466-86.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.466-86.1.i586", "SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.466-86.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.466-86.1.i586", "SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.466-86.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-3104", url: "https://www.suse.com/security/cve/CVE-2015-3104", }, { category: "external", summary: "SUSE Bug 934088 for CVE-2015-3104", url: "https://bugzilla.suse.com/934088", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.466-86.1.i586", "SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.466-86.1.x86_64", "SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.466-86.1.i586", "SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.466-86.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.466-86.1.i586", "SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.466-86.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.466-86.1.i586", "SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.466-86.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2015-06-11T11:20:08Z", details: "important", }, ], title: "CVE-2015-3104", }, { cve: "CVE-2015-3105", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-3105", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.292 and 14.x through 18.x before 18.0.0.160 on Windows and OS X and before 11.2.202.466 on Linux, Adobe AIR before 18.0.0.144 on Windows and before 18.0.0.143 on OS X and Android, Adobe AIR SDK before 18.0.0.144 on Windows and before 18.0.0.143 on OS X, and Adobe AIR SDK & Compiler before 18.0.0.144 on Windows and before 18.0.0.143 on OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.466-86.1.i586", "SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.466-86.1.x86_64", "SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.466-86.1.i586", "SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.466-86.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.466-86.1.i586", "SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.466-86.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.466-86.1.i586", "SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.466-86.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-3105", url: "https://www.suse.com/security/cve/CVE-2015-3105", }, { category: "external", summary: "SUSE Bug 934088 for CVE-2015-3105", url: "https://bugzilla.suse.com/934088", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.466-86.1.i586", "SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.466-86.1.x86_64", "SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.466-86.1.i586", "SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.466-86.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.466-86.1.i586", "SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.466-86.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.466-86.1.i586", "SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.466-86.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2015-06-11T11:20:08Z", details: "important", }, ], title: "CVE-2015-3105", }, { cve: "CVE-2015-3106", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-3106", }, ], notes: [ { category: "general", text: "Use-after-free vulnerability in Adobe Flash Player before 13.0.0.292 and 14.x through 18.x before 18.0.0.160 on Windows and OS X and before 11.2.202.466 on Linux, Adobe AIR before 18.0.0.144 on Windows and before 18.0.0.143 on OS X and Android, Adobe AIR SDK before 18.0.0.144 on Windows and before 18.0.0.143 on OS X, and Adobe AIR SDK & Compiler before 18.0.0.144 on Windows and before 18.0.0.143 on OS X allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-3103 and CVE-2015-3107.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.466-86.1.i586", "SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.466-86.1.x86_64", "SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.466-86.1.i586", "SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.466-86.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.466-86.1.i586", "SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.466-86.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.466-86.1.i586", "SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.466-86.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-3106", url: "https://www.suse.com/security/cve/CVE-2015-3106", }, { category: "external", summary: "SUSE Bug 934088 for CVE-2015-3106", url: "https://bugzilla.suse.com/934088", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.466-86.1.i586", "SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.466-86.1.x86_64", "SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.466-86.1.i586", "SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.466-86.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.466-86.1.i586", "SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.466-86.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.466-86.1.i586", "SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.466-86.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2015-06-11T11:20:08Z", details: "important", }, ], title: "CVE-2015-3106", }, { cve: "CVE-2015-3107", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-3107", }, ], notes: [ { category: "general", text: "Use-after-free vulnerability in Adobe Flash Player before 13.0.0.292 and 14.x through 18.x before 18.0.0.160 on Windows and OS X and before 11.2.202.466 on Linux, Adobe AIR before 18.0.0.144 on Windows and before 18.0.0.143 on OS X and Android, Adobe AIR SDK before 18.0.0.144 on Windows and before 18.0.0.143 on OS X, and Adobe AIR SDK & Compiler before 18.0.0.144 on Windows and before 18.0.0.143 on OS X allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-3103 and CVE-2015-3106.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.466-86.1.i586", "SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.466-86.1.x86_64", "SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.466-86.1.i586", "SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.466-86.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.466-86.1.i586", "SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.466-86.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.466-86.1.i586", "SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.466-86.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-3107", url: "https://www.suse.com/security/cve/CVE-2015-3107", }, { category: "external", summary: "SUSE Bug 934088 for CVE-2015-3107", url: "https://bugzilla.suse.com/934088", }, { category: "external", summary: "SUSE Bug 941239 for CVE-2015-3107", url: "https://bugzilla.suse.com/941239", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.466-86.1.i586", "SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.466-86.1.x86_64", "SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.466-86.1.i586", "SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.466-86.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.466-86.1.i586", "SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.466-86.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.466-86.1.i586", "SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.466-86.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2015-06-11T11:20:08Z", details: "important", }, ], title: "CVE-2015-3107", }, { cve: "CVE-2015-3108", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-3108", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.292 and 14.x through 18.x before 18.0.0.160 on Windows and OS X and before 11.2.202.466 on Linux, Adobe AIR before 18.0.0.144 on Windows and before 18.0.0.143 on OS X and Android, Adobe AIR SDK before 18.0.0.144 on Windows and before 18.0.0.143 on OS X, and Adobe AIR SDK & Compiler before 18.0.0.144 on Windows and before 18.0.0.143 on OS X do not properly restrict discovery of memory addresses, which allows attackers to bypass the ASLR protection mechanism via unspecified vectors.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.466-86.1.i586", "SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.466-86.1.x86_64", "SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.466-86.1.i586", "SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.466-86.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.466-86.1.i586", "SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.466-86.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.466-86.1.i586", "SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.466-86.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-3108", url: "https://www.suse.com/security/cve/CVE-2015-3108", }, { category: "external", summary: "SUSE Bug 934088 for CVE-2015-3108", url: "https://bugzilla.suse.com/934088", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.466-86.1.i586", "SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.466-86.1.x86_64", "SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.466-86.1.i586", "SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.466-86.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.466-86.1.i586", "SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.466-86.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.466-86.1.i586", "SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.466-86.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2015-06-11T11:20:08Z", details: "important", }, ], title: "CVE-2015-3108", }, ], }
suse-su-2015:1374-1
Vulnerability from csaf_suse
Notes
{ document: { aggregate_severity: { namespace: "https://www.suse.com/support/security/rating/", text: "critical", }, category: "csaf_security_advisory", csaf_version: "2.0", distribution: { text: "Copyright 2024 SUSE LLC. All rights reserved.", tlp: { label: "WHITE", url: "https://www.first.org/tlp/", }, }, lang: "en", notes: [ { category: "summary", text: "Security update for flash-player", title: "Title of the patch", }, { category: "description", text: "\nThis security update to 11.2.202.508 (bsc#941239) fixes\nthe following issues:\n\n * APSB15-19: CVE-2015-3107, CVE-2015-5124, CVE-2015-5125,\n CVE-2015-5127, CVE-2015-5128, CVE-2015-5129, CVE-2015-5130,\n CVE-2015-5131, CVE-2015-5132, CVE-2015-5133, CVE-2015-5134,\n CVE-2015-5539, CVE-2015-5540, CVE-2015-5541, CVE-2015-5544,\n CVE-2015-5545, CVE-2015-5546, CVE-2015-5547, CVE-2015-5548,\n CVE-2015-5549, CVE-2015-5550, CVE-2015-5551, CVE-2015-5552,\n CVE-2015-5553, CVE-2015-5554, CVE-2015-5555, CVE-2015-5556,\n CVE-2015-5557, CVE-2015-5558, CVE-2015-5559, CVE-2015-5560,\n CVE-2015-5561, CVE-2015-5562, CVE-2015-5563\n", title: "Description of the patch", }, { category: "details", text: "SUSE-SLE-DESKTOP-12-2015-390,SUSE-SLE-WE-12-2015-390", title: "Patchnames", }, { category: "legal_disclaimer", text: "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).", title: "Terms of use", }, ], publisher: { category: "vendor", contact_details: "https://www.suse.com/support/security/contact/", name: "SUSE Product Security Team", namespace: "https://www.suse.com/", }, references: [ { category: "external", summary: "SUSE ratings", url: "https://www.suse.com/support/security/rating/", }, { category: "self", summary: "URL of this CSAF notice", url: "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2015_1374-1.json", }, { category: "self", summary: "URL for SUSE-SU-2015:1374-1", url: "https://www.suse.com/support/update/announcement/2015/suse-su-20151374-1/", }, { category: "self", summary: "E-Mail link for SUSE-SU-2015:1374-1", url: "https://lists.suse.com/pipermail/sle-security-updates/2015-August/001533.html", }, { category: "self", summary: "SUSE Bug 941239", url: "https://bugzilla.suse.com/941239", }, { category: "self", summary: "SUSE CVE CVE-2015-3107 page", url: "https://www.suse.com/security/cve/CVE-2015-3107/", }, { category: "self", summary: "SUSE CVE CVE-2015-5124 page", url: "https://www.suse.com/security/cve/CVE-2015-5124/", }, { category: "self", summary: "SUSE CVE CVE-2015-5125 page", url: "https://www.suse.com/security/cve/CVE-2015-5125/", }, { category: "self", summary: "SUSE CVE CVE-2015-5127 page", url: "https://www.suse.com/security/cve/CVE-2015-5127/", }, { category: "self", summary: "SUSE CVE CVE-2015-5128 page", url: "https://www.suse.com/security/cve/CVE-2015-5128/", }, { category: "self", summary: "SUSE CVE CVE-2015-5129 page", url: "https://www.suse.com/security/cve/CVE-2015-5129/", }, { category: "self", summary: "SUSE CVE CVE-2015-5130 page", url: "https://www.suse.com/security/cve/CVE-2015-5130/", }, { category: "self", summary: "SUSE CVE CVE-2015-5131 page", url: "https://www.suse.com/security/cve/CVE-2015-5131/", }, { category: "self", summary: "SUSE CVE CVE-2015-5132 page", url: "https://www.suse.com/security/cve/CVE-2015-5132/", }, { category: "self", summary: "SUSE CVE CVE-2015-5133 page", url: "https://www.suse.com/security/cve/CVE-2015-5133/", }, { category: "self", summary: "SUSE CVE CVE-2015-5134 page", url: "https://www.suse.com/security/cve/CVE-2015-5134/", }, { category: "self", summary: "SUSE CVE CVE-2015-5539 page", url: "https://www.suse.com/security/cve/CVE-2015-5539/", }, { category: "self", summary: "SUSE CVE CVE-2015-5540 page", url: "https://www.suse.com/security/cve/CVE-2015-5540/", }, { category: "self", summary: "SUSE CVE CVE-2015-5541 page", url: "https://www.suse.com/security/cve/CVE-2015-5541/", }, { category: "self", summary: "SUSE CVE CVE-2015-5544 page", url: "https://www.suse.com/security/cve/CVE-2015-5544/", }, { category: "self", summary: "SUSE CVE CVE-2015-5545 page", url: "https://www.suse.com/security/cve/CVE-2015-5545/", }, { category: "self", summary: "SUSE CVE CVE-2015-5546 page", url: "https://www.suse.com/security/cve/CVE-2015-5546/", }, { category: "self", summary: "SUSE CVE CVE-2015-5547 page", url: "https://www.suse.com/security/cve/CVE-2015-5547/", }, { category: "self", summary: "SUSE CVE CVE-2015-5548 page", url: "https://www.suse.com/security/cve/CVE-2015-5548/", }, { category: "self", summary: "SUSE CVE CVE-2015-5549 page", url: "https://www.suse.com/security/cve/CVE-2015-5549/", }, { category: "self", summary: "SUSE CVE CVE-2015-5550 page", url: "https://www.suse.com/security/cve/CVE-2015-5550/", }, { category: "self", summary: "SUSE CVE CVE-2015-5551 page", url: "https://www.suse.com/security/cve/CVE-2015-5551/", }, { category: "self", summary: "SUSE CVE CVE-2015-5552 page", url: "https://www.suse.com/security/cve/CVE-2015-5552/", }, { category: "self", summary: "SUSE CVE CVE-2015-5553 page", url: "https://www.suse.com/security/cve/CVE-2015-5553/", }, { category: "self", summary: "SUSE CVE CVE-2015-5554 page", url: "https://www.suse.com/security/cve/CVE-2015-5554/", }, { category: "self", summary: "SUSE CVE CVE-2015-5555 page", url: "https://www.suse.com/security/cve/CVE-2015-5555/", }, { category: "self", summary: "SUSE CVE CVE-2015-5556 page", url: "https://www.suse.com/security/cve/CVE-2015-5556/", }, { category: "self", summary: "SUSE CVE CVE-2015-5557 page", url: "https://www.suse.com/security/cve/CVE-2015-5557/", }, { category: "self", summary: "SUSE CVE CVE-2015-5558 page", url: "https://www.suse.com/security/cve/CVE-2015-5558/", }, { category: "self", summary: "SUSE CVE CVE-2015-5559 page", url: "https://www.suse.com/security/cve/CVE-2015-5559/", }, { category: "self", summary: "SUSE CVE CVE-2015-5560 page", url: "https://www.suse.com/security/cve/CVE-2015-5560/", }, { category: "self", summary: "SUSE CVE CVE-2015-5561 page", url: "https://www.suse.com/security/cve/CVE-2015-5561/", }, { category: "self", summary: "SUSE CVE CVE-2015-5562 page", url: "https://www.suse.com/security/cve/CVE-2015-5562/", }, { category: "self", summary: "SUSE CVE CVE-2015-5563 page", url: "https://www.suse.com/security/cve/CVE-2015-5563/", }, ], title: "Security update for flash-player", tracking: { current_release_date: "2015-08-12T07:50:09Z", generator: { date: "2015-08-12T07:50:09Z", engine: { name: "cve-database.git:bin/generate-csaf.pl", version: "1", }, }, id: "SUSE-SU-2015:1374-1", initial_release_date: "2015-08-12T07:50:09Z", revision_history: [ { date: "2015-08-12T07:50:09Z", number: "1", summary: "Current version", }, ], status: "final", version: "1", }, }, product_tree: { branches: [ { branches: [ { branches: [ { category: "product_version", name: "flash-player-11.2.202.508-99.1.x86_64", product: { name: "flash-player-11.2.202.508-99.1.x86_64", product_id: "flash-player-11.2.202.508-99.1.x86_64", }, }, { category: "product_version", name: "flash-player-gnome-11.2.202.508-99.1.x86_64", product: { name: "flash-player-gnome-11.2.202.508-99.1.x86_64", product_id: "flash-player-gnome-11.2.202.508-99.1.x86_64", }, }, ], category: "architecture", name: "x86_64", }, { branches: [ { category: "product_name", name: "SUSE Linux Enterprise Desktop 12", product: { name: "SUSE Linux Enterprise Desktop 12", product_id: "SUSE Linux Enterprise Desktop 12", product_identification_helper: { cpe: "cpe:/o:suse:sled:12", }, }, }, { category: "product_name", name: "SUSE Linux Enterprise Workstation Extension 12", product: { name: "SUSE Linux Enterprise Workstation Extension 12", product_id: "SUSE Linux Enterprise Workstation Extension 12", product_identification_helper: { cpe: "cpe:/o:suse:sle-we:12", }, }, }, ], category: "product_family", name: "SUSE Linux Enterprise", }, ], category: "vendor", name: "SUSE", }, ], relationships: [ { category: "default_component_of", full_product_name: { name: "flash-player-11.2.202.508-99.1.x86_64 as component of SUSE Linux Enterprise Desktop 12", product_id: "SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.508-99.1.x86_64", }, product_reference: "flash-player-11.2.202.508-99.1.x86_64", relates_to_product_reference: "SUSE Linux Enterprise Desktop 12", }, { category: "default_component_of", full_product_name: { name: "flash-player-gnome-11.2.202.508-99.1.x86_64 as component of SUSE Linux Enterprise Desktop 12", product_id: "SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.508-99.1.x86_64", }, product_reference: "flash-player-gnome-11.2.202.508-99.1.x86_64", relates_to_product_reference: "SUSE Linux Enterprise Desktop 12", }, { category: "default_component_of", full_product_name: { name: "flash-player-11.2.202.508-99.1.x86_64 as component of SUSE Linux Enterprise Workstation Extension 12", product_id: "SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.508-99.1.x86_64", }, product_reference: "flash-player-11.2.202.508-99.1.x86_64", relates_to_product_reference: "SUSE Linux Enterprise Workstation Extension 12", }, { category: "default_component_of", full_product_name: { name: "flash-player-gnome-11.2.202.508-99.1.x86_64 as component of SUSE Linux Enterprise Workstation Extension 12", product_id: "SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.508-99.1.x86_64", }, product_reference: "flash-player-gnome-11.2.202.508-99.1.x86_64", relates_to_product_reference: "SUSE Linux Enterprise Workstation Extension 12", }, ], }, vulnerabilities: [ { cve: "CVE-2015-3107", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-3107", }, ], notes: [ { category: "general", text: "Use-after-free vulnerability in Adobe Flash Player before 13.0.0.292 and 14.x through 18.x before 18.0.0.160 on Windows and OS X and before 11.2.202.466 on Linux, Adobe AIR before 18.0.0.144 on Windows and before 18.0.0.143 on OS X and Android, Adobe AIR SDK before 18.0.0.144 on Windows and before 18.0.0.143 on OS X, and Adobe AIR SDK & Compiler before 18.0.0.144 on Windows and before 18.0.0.143 on OS X allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-3103 and CVE-2015-3106.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.508-99.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-3107", url: "https://www.suse.com/security/cve/CVE-2015-3107", }, { category: "external", summary: "SUSE Bug 934088 for CVE-2015-3107", url: "https://bugzilla.suse.com/934088", }, { category: "external", summary: "SUSE Bug 941239 for CVE-2015-3107", url: "https://bugzilla.suse.com/941239", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.508-99.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2015-08-12T07:50:09Z", details: "important", }, ], title: "CVE-2015-3107", }, { cve: "CVE-2015-5124", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-5124", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.302 and 14.x through 18.x before 18.0.0.203 on Windows and OS X and before 11.2.202.481 on Linux, Adobe AIR before 18.0.0.180, Adobe AIR SDK before 18.0.0.180, and Adobe AIR SDK & Compiler before 18.0.0.180 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-3117, CVE-2015-3123, CVE-2015-3130, CVE-2015-3133, CVE-2015-3134, and CVE-2015-4431.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.508-99.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-5124", url: "https://www.suse.com/security/cve/CVE-2015-5124", }, { category: "external", summary: "SUSE Bug 941239 for CVE-2015-5124", url: "https://bugzilla.suse.com/941239", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.508-99.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2015-08-12T07:50:09Z", details: "critical", }, ], title: "CVE-2015-5124", }, { cve: "CVE-2015-5125", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-5125", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before 18.0.0.199, and Adobe AIR SDK & Compiler before 18.0.0.199 allow attackers to cause a denial of service (vector-length corruption) or possibly have unspecified other impact via unknown vectors.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.508-99.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-5125", url: "https://www.suse.com/security/cve/CVE-2015-5125", }, { category: "external", summary: "SUSE Bug 941239 for CVE-2015-5125", url: "https://bugzilla.suse.com/941239", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.508-99.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2015-08-12T07:50:09Z", details: "critical", }, ], title: "CVE-2015-5125", }, { cve: "CVE-2015-5127", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-5127", }, ], notes: [ { category: "general", text: "Use-after-free vulnerability in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before 18.0.0.199, and Adobe AIR SDK & Compiler before 18.0.0.199 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-5130, CVE-2015-5134, CVE-2015-5539, CVE-2015-5540, CVE-2015-5550, CVE-2015-5551, CVE-2015-5556, CVE-2015-5557, CVE-2015-5559, CVE-2015-5561, CVE-2015-5563, CVE-2015-5564, and CVE-2015-5565.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.508-99.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-5127", url: "https://www.suse.com/security/cve/CVE-2015-5127", }, { category: "external", summary: "SUSE Bug 941239 for CVE-2015-5127", url: "https://bugzilla.suse.com/941239", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.508-99.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2015-08-12T07:50:09Z", details: "critical", }, ], title: "CVE-2015-5127", }, { cve: "CVE-2015-5128", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-5128", }, ], notes: [ { category: "general", text: "** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.508-99.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-5128", url: "https://www.suse.com/security/cve/CVE-2015-5128", }, { category: "external", summary: "SUSE Bug 941239 for CVE-2015-5128", url: "https://bugzilla.suse.com/941239", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.508-99.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2015-08-12T07:50:09Z", details: "low", }, ], title: "CVE-2015-5128", }, { cve: "CVE-2015-5129", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-5129", }, ], notes: [ { category: "general", text: "Heap-based buffer overflow in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before 18.0.0.199, and Adobe AIR SDK & Compiler before 18.0.0.199 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-5541.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.508-99.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-5129", url: "https://www.suse.com/security/cve/CVE-2015-5129", }, { category: "external", summary: "SUSE Bug 941239 for CVE-2015-5129", url: "https://bugzilla.suse.com/941239", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.508-99.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2015-08-12T07:50:09Z", details: "critical", }, ], title: "CVE-2015-5129", }, { cve: "CVE-2015-5130", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-5130", }, ], notes: [ { category: "general", text: "Use-after-free vulnerability in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before 18.0.0.199, and Adobe AIR SDK & Compiler before 18.0.0.199 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-5127, CVE-2015-5134, CVE-2015-5539, CVE-2015-5540, CVE-2015-5550, CVE-2015-5551, CVE-2015-5556, CVE-2015-5557, CVE-2015-5559, CVE-2015-5561, CVE-2015-5563, CVE-2015-5564, and CVE-2015-5565.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.508-99.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-5130", url: "https://www.suse.com/security/cve/CVE-2015-5130", }, { category: "external", summary: "SUSE Bug 941239 for CVE-2015-5130", url: "https://bugzilla.suse.com/941239", }, { category: "external", summary: "SUSE Bug 952254 for CVE-2015-5130", url: "https://bugzilla.suse.com/952254", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.508-99.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2015-08-12T07:50:09Z", details: "critical", }, ], title: "CVE-2015-5130", }, { cve: "CVE-2015-5131", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-5131", }, ], notes: [ { category: "general", text: "Buffer overflow in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before 18.0.0.199, and Adobe AIR SDK & Compiler before 18.0.0.199 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-5132 and CVE-2015-5133.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.508-99.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-5131", url: "https://www.suse.com/security/cve/CVE-2015-5131", }, { category: "external", summary: "SUSE Bug 941239 for CVE-2015-5131", url: "https://bugzilla.suse.com/941239", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.508-99.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2015-08-12T07:50:09Z", details: "critical", }, ], title: "CVE-2015-5131", }, { cve: "CVE-2015-5132", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-5132", }, ], notes: [ { category: "general", text: "Buffer overflow in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before 18.0.0.199, and Adobe AIR SDK & Compiler before 18.0.0.199 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-5131 and CVE-2015-5133.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.508-99.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-5132", url: "https://www.suse.com/security/cve/CVE-2015-5132", }, { category: "external", summary: "SUSE Bug 941239 for CVE-2015-5132", url: "https://bugzilla.suse.com/941239", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.508-99.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2015-08-12T07:50:09Z", details: "critical", }, ], title: "CVE-2015-5132", }, { cve: "CVE-2015-5133", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-5133", }, ], notes: [ { category: "general", text: "Buffer overflow in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before 18.0.0.199, and Adobe AIR SDK & Compiler before 18.0.0.199 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-5131 and CVE-2015-5132.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.508-99.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-5133", url: "https://www.suse.com/security/cve/CVE-2015-5133", }, { category: "external", summary: "SUSE Bug 941239 for CVE-2015-5133", url: "https://bugzilla.suse.com/941239", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.508-99.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2015-08-12T07:50:09Z", details: "critical", }, ], title: "CVE-2015-5133", }, { cve: "CVE-2015-5134", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-5134", }, ], notes: [ { category: "general", text: "Use-after-free vulnerability in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before 18.0.0.199, and Adobe AIR SDK & Compiler before 18.0.0.199 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-5127, CVE-2015-5130, CVE-2015-5539, CVE-2015-5540, CVE-2015-5550, CVE-2015-5551, CVE-2015-5556, CVE-2015-5557, CVE-2015-5559, CVE-2015-5561, CVE-2015-5563, CVE-2015-5564, and CVE-2015-5565.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.508-99.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-5134", url: "https://www.suse.com/security/cve/CVE-2015-5134", }, { category: "external", summary: "SUSE Bug 941239 for CVE-2015-5134", url: "https://bugzilla.suse.com/941239", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.508-99.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2015-08-12T07:50:09Z", details: "critical", }, ], title: "CVE-2015-5134", }, { cve: "CVE-2015-5539", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-5539", }, ], notes: [ { category: "general", text: "Use-after-free vulnerability in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before 18.0.0.199, and Adobe AIR SDK & Compiler before 18.0.0.199 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-5127, CVE-2015-5130, CVE-2015-5134, CVE-2015-5540, CVE-2015-5550, CVE-2015-5551, CVE-2015-5556, CVE-2015-5557, CVE-2015-5559, CVE-2015-5561, CVE-2015-5563, CVE-2015-5564, and CVE-2015-5565.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.508-99.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-5539", url: "https://www.suse.com/security/cve/CVE-2015-5539", }, { category: "external", summary: "SUSE Bug 941239 for CVE-2015-5539", url: "https://bugzilla.suse.com/941239", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.508-99.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2015-08-12T07:50:09Z", details: "critical", }, ], title: "CVE-2015-5539", }, { cve: "CVE-2015-5540", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-5540", }, ], notes: [ { category: "general", text: "Use-after-free vulnerability in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before 18.0.0.199, and Adobe AIR SDK & Compiler before 18.0.0.199 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-5127, CVE-2015-5130, CVE-2015-5134, CVE-2015-5539, CVE-2015-5550, CVE-2015-5551, CVE-2015-5556, CVE-2015-5557, CVE-2015-5559, CVE-2015-5561, CVE-2015-5563, CVE-2015-5564, and CVE-2015-5565.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.508-99.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-5540", url: "https://www.suse.com/security/cve/CVE-2015-5540", }, { category: "external", summary: "SUSE Bug 941239 for CVE-2015-5540", url: "https://bugzilla.suse.com/941239", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.508-99.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2015-08-12T07:50:09Z", details: "critical", }, ], title: "CVE-2015-5540", }, { cve: "CVE-2015-5541", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-5541", }, ], notes: [ { category: "general", text: "Heap-based buffer overflow in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before 18.0.0.199, and Adobe AIR SDK & Compiler before 18.0.0.199 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-5129.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.508-99.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-5541", url: "https://www.suse.com/security/cve/CVE-2015-5541", }, { category: "external", summary: "SUSE Bug 941239 for CVE-2015-5541", url: "https://bugzilla.suse.com/941239", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.508-99.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2015-08-12T07:50:09Z", details: "critical", }, ], title: "CVE-2015-5541", }, { cve: "CVE-2015-5544", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-5544", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before 18.0.0.199, and Adobe AIR SDK & Compiler before 18.0.0.199 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-5545, CVE-2015-5546, CVE-2015-5547, CVE-2015-5548, CVE-2015-5549, CVE-2015-5552, and CVE-2015-5553.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.508-99.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-5544", url: "https://www.suse.com/security/cve/CVE-2015-5544", }, { category: "external", summary: "SUSE Bug 941239 for CVE-2015-5544", url: "https://bugzilla.suse.com/941239", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.508-99.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2015-08-12T07:50:09Z", details: "critical", }, ], title: "CVE-2015-5544", }, { cve: "CVE-2015-5545", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-5545", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before 18.0.0.199, and Adobe AIR SDK & Compiler before 18.0.0.199 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-5544, CVE-2015-5546, CVE-2015-5547, CVE-2015-5548, CVE-2015-5549, CVE-2015-5552, and CVE-2015-5553.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.508-99.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-5545", url: "https://www.suse.com/security/cve/CVE-2015-5545", }, { category: "external", summary: "SUSE Bug 941239 for CVE-2015-5545", url: "https://bugzilla.suse.com/941239", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.508-99.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2015-08-12T07:50:09Z", details: "critical", }, ], title: "CVE-2015-5545", }, { cve: "CVE-2015-5546", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-5546", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before 18.0.0.199, and Adobe AIR SDK & Compiler before 18.0.0.199 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-5544, CVE-2015-5545, CVE-2015-5547, CVE-2015-5548, CVE-2015-5549, CVE-2015-5552, and CVE-2015-5553.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.508-99.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-5546", url: "https://www.suse.com/security/cve/CVE-2015-5546", }, { category: "external", summary: "SUSE Bug 941239 for CVE-2015-5546", url: "https://bugzilla.suse.com/941239", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.508-99.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2015-08-12T07:50:09Z", details: "critical", }, ], title: "CVE-2015-5546", }, { cve: "CVE-2015-5547", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-5547", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before 18.0.0.199, and Adobe AIR SDK & Compiler before 18.0.0.199 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-5544, CVE-2015-5545, CVE-2015-5546, CVE-2015-5548, CVE-2015-5549, CVE-2015-5552, and CVE-2015-5553.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.508-99.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-5547", url: "https://www.suse.com/security/cve/CVE-2015-5547", }, { category: "external", summary: "SUSE Bug 941239 for CVE-2015-5547", url: "https://bugzilla.suse.com/941239", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.508-99.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2015-08-12T07:50:09Z", details: "critical", }, ], title: "CVE-2015-5547", }, { cve: "CVE-2015-5548", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-5548", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before 18.0.0.199, and Adobe AIR SDK & Compiler before 18.0.0.199 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-5544, CVE-2015-5545, CVE-2015-5546, CVE-2015-5547, CVE-2015-5549, CVE-2015-5552, and CVE-2015-5553.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.508-99.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-5548", url: "https://www.suse.com/security/cve/CVE-2015-5548", }, { category: "external", summary: "SUSE Bug 941239 for CVE-2015-5548", url: "https://bugzilla.suse.com/941239", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.508-99.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2015-08-12T07:50:09Z", details: "critical", }, ], title: "CVE-2015-5548", }, { cve: "CVE-2015-5549", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-5549", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before 18.0.0.199, and Adobe AIR SDK & Compiler before 18.0.0.199 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-5544, CVE-2015-5545, CVE-2015-5546, CVE-2015-5547, CVE-2015-5548, CVE-2015-5552, and CVE-2015-5553.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.508-99.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-5549", url: "https://www.suse.com/security/cve/CVE-2015-5549", }, { category: "external", summary: "SUSE Bug 941239 for CVE-2015-5549", url: "https://bugzilla.suse.com/941239", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.508-99.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2015-08-12T07:50:09Z", details: "critical", }, ], title: "CVE-2015-5549", }, { cve: "CVE-2015-5550", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-5550", }, ], notes: [ { category: "general", text: "Use-after-free vulnerability in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before 18.0.0.199, and Adobe AIR SDK & Compiler before 18.0.0.199 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-5127, CVE-2015-5130, CVE-2015-5134, CVE-2015-5539, CVE-2015-5540, CVE-2015-5551, CVE-2015-5556, CVE-2015-5557, CVE-2015-5559, CVE-2015-5561, CVE-2015-5563, CVE-2015-5564, and CVE-2015-5565.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.508-99.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-5550", url: "https://www.suse.com/security/cve/CVE-2015-5550", }, { category: "external", summary: "SUSE Bug 941239 for CVE-2015-5550", url: "https://bugzilla.suse.com/941239", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.508-99.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2015-08-12T07:50:09Z", details: "critical", }, ], title: "CVE-2015-5550", }, { cve: "CVE-2015-5551", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-5551", }, ], notes: [ { category: "general", text: "Use-after-free vulnerability in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before 18.0.0.199, and Adobe AIR SDK & Compiler before 18.0.0.199 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-5127, CVE-2015-5130, CVE-2015-5134, CVE-2015-5539, CVE-2015-5540, CVE-2015-5550, CVE-2015-5556, CVE-2015-5557, CVE-2015-5559, CVE-2015-5561, CVE-2015-5563, CVE-2015-5564, and CVE-2015-5565.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.508-99.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-5551", url: "https://www.suse.com/security/cve/CVE-2015-5551", }, { category: "external", summary: "SUSE Bug 941239 for CVE-2015-5551", url: "https://bugzilla.suse.com/941239", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.508-99.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2015-08-12T07:50:09Z", details: "critical", }, ], title: "CVE-2015-5551", }, { cve: "CVE-2015-5552", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-5552", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before 18.0.0.199, and Adobe AIR SDK & Compiler before 18.0.0.199 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-5544, CVE-2015-5545, CVE-2015-5546, CVE-2015-5547, CVE-2015-5548, CVE-2015-5549, and CVE-2015-5553.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.508-99.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-5552", url: "https://www.suse.com/security/cve/CVE-2015-5552", }, { category: "external", summary: "SUSE Bug 941239 for CVE-2015-5552", url: "https://bugzilla.suse.com/941239", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.508-99.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2015-08-12T07:50:09Z", details: "critical", }, ], title: "CVE-2015-5552", }, { cve: "CVE-2015-5553", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-5553", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before 18.0.0.199, and Adobe AIR SDK & Compiler before 18.0.0.199 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-5544, CVE-2015-5545, CVE-2015-5546, CVE-2015-5547, CVE-2015-5548, CVE-2015-5549, and CVE-2015-5552.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.508-99.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-5553", url: "https://www.suse.com/security/cve/CVE-2015-5553", }, { category: "external", summary: "SUSE Bug 941239 for CVE-2015-5553", url: "https://bugzilla.suse.com/941239", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.508-99.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2015-08-12T07:50:09Z", details: "critical", }, ], title: "CVE-2015-5553", }, { cve: "CVE-2015-5554", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-5554", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before 18.0.0.199, and Adobe AIR SDK & Compiler before 18.0.0.199 allow attackers to execute arbitrary code by leveraging an unspecified \"type confusion,\" a different vulnerability than CVE-2015-5555, CVE-2015-5558, and CVE-2015-5562.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.508-99.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-5554", url: "https://www.suse.com/security/cve/CVE-2015-5554", }, { category: "external", summary: "SUSE Bug 941239 for CVE-2015-5554", url: "https://bugzilla.suse.com/941239", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.508-99.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2015-08-12T07:50:09Z", details: "critical", }, ], title: "CVE-2015-5554", }, { cve: "CVE-2015-5555", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-5555", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before 18.0.0.199, and Adobe AIR SDK & Compiler before 18.0.0.199 allow attackers to execute arbitrary code by leveraging an unspecified \"type confusion,\" a different vulnerability than CVE-2015-5554, CVE-2015-5558, and CVE-2015-5562.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.508-99.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-5555", url: "https://www.suse.com/security/cve/CVE-2015-5555", }, { category: "external", summary: "SUSE Bug 941239 for CVE-2015-5555", url: "https://bugzilla.suse.com/941239", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.508-99.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2015-08-12T07:50:09Z", details: "critical", }, ], title: "CVE-2015-5555", }, { cve: "CVE-2015-5556", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-5556", }, ], notes: [ { category: "general", text: "Use-after-free vulnerability in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before 18.0.0.199, and Adobe AIR SDK & Compiler before 18.0.0.199 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-5127, CVE-2015-5130, CVE-2015-5134, CVE-2015-5539, CVE-2015-5540, CVE-2015-5550, CVE-2015-5551, CVE-2015-5557, CVE-2015-5559, CVE-2015-5561, CVE-2015-5563, CVE-2015-5564, and CVE-2015-5565.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.508-99.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-5556", url: "https://www.suse.com/security/cve/CVE-2015-5556", }, { category: "external", summary: "SUSE Bug 941239 for CVE-2015-5556", url: "https://bugzilla.suse.com/941239", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.508-99.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2015-08-12T07:50:09Z", details: "critical", }, ], title: "CVE-2015-5556", }, { cve: "CVE-2015-5557", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-5557", }, ], notes: [ { category: "general", text: "Use-after-free vulnerability in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before 18.0.0.199, and Adobe AIR SDK & Compiler before 18.0.0.199 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-5127, CVE-2015-5130, CVE-2015-5134, CVE-2015-5539, CVE-2015-5540, CVE-2015-5550, CVE-2015-5551, CVE-2015-5556, CVE-2015-5559, CVE-2015-5561, CVE-2015-5563, CVE-2015-5564, and CVE-2015-5565.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.508-99.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-5557", url: "https://www.suse.com/security/cve/CVE-2015-5557", }, { category: "external", summary: "SUSE Bug 941239 for CVE-2015-5557", url: "https://bugzilla.suse.com/941239", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.508-99.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2015-08-12T07:50:09Z", details: "critical", }, ], title: "CVE-2015-5557", }, { cve: "CVE-2015-5558", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-5558", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before 18.0.0.199, and Adobe AIR SDK & Compiler before 18.0.0.199 allow attackers to execute arbitrary code by leveraging an unspecified \"type confusion,\" a different vulnerability than CVE-2015-5554, CVE-2015-5555, and CVE-2015-5562.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.508-99.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-5558", url: "https://www.suse.com/security/cve/CVE-2015-5558", }, { category: "external", summary: "SUSE Bug 941239 for CVE-2015-5558", url: "https://bugzilla.suse.com/941239", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.508-99.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2015-08-12T07:50:09Z", details: "critical", }, ], title: "CVE-2015-5558", }, { cve: "CVE-2015-5559", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-5559", }, ], notes: [ { category: "general", text: "Use-after-free vulnerability in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before 18.0.0.199, and Adobe AIR SDK & Compiler before 18.0.0.199 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-5127, CVE-2015-5130, CVE-2015-5134, CVE-2015-5539, CVE-2015-5540, CVE-2015-5550, CVE-2015-5551, CVE-2015-5556, CVE-2015-5557, CVE-2015-5561, CVE-2015-5563, CVE-2015-5564, and CVE-2015-5565.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.508-99.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-5559", url: "https://www.suse.com/security/cve/CVE-2015-5559", }, { category: "external", summary: "SUSE Bug 941239 for CVE-2015-5559", url: "https://bugzilla.suse.com/941239", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.508-99.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2015-08-12T07:50:09Z", details: "critical", }, ], title: "CVE-2015-5559", }, { cve: "CVE-2015-5560", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-5560", }, ], notes: [ { category: "general", text: "Integer overflow in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before 18.0.0.199, and Adobe AIR SDK & Compiler before 18.0.0.199 allows attackers to execute arbitrary code via unspecified vectors.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.508-99.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-5560", url: "https://www.suse.com/security/cve/CVE-2015-5560", }, { category: "external", summary: "SUSE Bug 941239 for CVE-2015-5560", url: "https://bugzilla.suse.com/941239", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.508-99.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2015-08-12T07:50:09Z", details: "critical", }, ], title: "CVE-2015-5560", }, { cve: "CVE-2015-5561", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-5561", }, ], notes: [ { category: "general", text: "Use-after-free vulnerability in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before 18.0.0.199, and Adobe AIR SDK & Compiler before 18.0.0.199 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-5127, CVE-2015-5130, CVE-2015-5134, CVE-2015-5539, CVE-2015-5540, CVE-2015-5550, CVE-2015-5551, CVE-2015-5556, CVE-2015-5557, CVE-2015-5559, CVE-2015-5563, CVE-2015-5564, and CVE-2015-5565.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.508-99.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-5561", url: "https://www.suse.com/security/cve/CVE-2015-5561", }, { category: "external", summary: "SUSE Bug 941239 for CVE-2015-5561", url: "https://bugzilla.suse.com/941239", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.508-99.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2015-08-12T07:50:09Z", details: "critical", }, ], title: "CVE-2015-5561", }, { cve: "CVE-2015-5562", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-5562", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before 18.0.0.199, and Adobe AIR SDK & Compiler before 18.0.0.199 allow attackers to execute arbitrary code by leveraging an unspecified \"type confusion,\" a different vulnerability than CVE-2015-5554, CVE-2015-5555, and CVE-2015-5558.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.508-99.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-5562", url: "https://www.suse.com/security/cve/CVE-2015-5562", }, { category: "external", summary: "SUSE Bug 941239 for CVE-2015-5562", url: "https://bugzilla.suse.com/941239", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.508-99.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2015-08-12T07:50:09Z", details: "critical", }, ], title: "CVE-2015-5562", }, { cve: "CVE-2015-5563", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-5563", }, ], notes: [ { category: "general", text: "Use-after-free vulnerability in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before 18.0.0.199, and Adobe AIR SDK & Compiler before 18.0.0.199 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-5127, CVE-2015-5130, CVE-2015-5134, CVE-2015-5539, CVE-2015-5540, CVE-2015-5550, CVE-2015-5551, CVE-2015-5556, CVE-2015-5557, CVE-2015-5559, CVE-2015-5561, CVE-2015-5564, and CVE-2015-5565.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.508-99.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-5563", url: "https://www.suse.com/security/cve/CVE-2015-5563", }, { category: "external", summary: "SUSE Bug 941239 for CVE-2015-5563", url: "https://bugzilla.suse.com/941239", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.508-99.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2015-08-12T07:50:09Z", details: "critical", }, ], title: "CVE-2015-5563", }, ], }
rhsa-2015:1086
Vulnerability from csaf_redhat
Notes
{ document: { aggregate_severity: { namespace: "https://access.redhat.com/security/updates/classification/", text: "Critical", }, category: "csaf_security_advisory", csaf_version: "2.0", distribution: { text: "Copyright © Red Hat, Inc. All rights reserved.", tlp: { label: "WHITE", url: "https://www.first.org/tlp/", }, }, lang: "en", notes: [ { category: "summary", text: "An updated Adobe Flash Player package that fixes multiple security issues\nis now available for Red Hat Enterprise Linux 5 and 6 Supplementary.\n\nRed Hat Product Security has rated this update as having Critical security\nimpact. Common Vulnerability Scoring System (CVSS) base scores, which give\ndetailed severity ratings, are available for each vulnerability from the\nCVE links in the References section.", title: "Topic", }, { category: "general", text: "The flash-plugin package contains a Mozilla Firefox compatible Adobe Flash\nPlayer web browser plug-in.\n\nThis update fixes multiple vulnerabilities in Adobe Flash Player. These\nvulnerabilities are detailed in the Adobe Security Bulletin APSB15-11\nlisted in the References section.\n\nMultiple flaws were found in the way flash-plugin displayed certain SWF\ncontent. An attacker could use these flaws to create a specially crafted\nSWF file that would cause flash-plugin to crash or, potentially, execute\narbitrary code when the victim loaded a page containing the malicious SWF\ncontent. (CVE-2015-3100, CVE-2015-3103, CVE-2015-3104, CVE-2015-3105,\nCVE-2015-3106, CVE-2015-3107)\n\nMultiple security bypass flaws were found in flash-plugin that could lead\nto the disclosure of sensitive information. (CVE-2015-3096, CVE-2015-3098,\nCVE-2015-3099, CVE-2015-3102)\n\nA memory information leak flaw was found in flash-plugin that could\nallow an attacker to potentially bypass ASLR (Address Space Layout\nRandomization) protection, and make it easier to exploit other flaws.\n(CVE-2015-3108)\n\nAll users of Adobe Flash Player should install this updated package, which\nupgrades Flash Player to version 11.2.202.466.", title: "Details", }, { category: "legal_disclaimer", text: "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", title: "Terms of Use", }, ], publisher: { category: "vendor", contact_details: "https://access.redhat.com/security/team/contact/", issuing_authority: "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", name: "Red Hat Product Security", namespace: "https://www.redhat.com", }, references: [ { category: "self", summary: "https://access.redhat.com/errata/RHSA-2015:1086", url: "https://access.redhat.com/errata/RHSA-2015:1086", }, { category: "external", summary: "https://access.redhat.com/security/updates/classification/#critical", url: "https://access.redhat.com/security/updates/classification/#critical", }, { category: "external", summary: "https://helpx.adobe.com/security/products/flash-player/apsb15-11.html", url: "https://helpx.adobe.com/security/products/flash-player/apsb15-11.html", }, { category: "external", summary: "1229879", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1229879", }, { category: "external", summary: "1230185", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1230185", }, { category: "external", summary: "1230189", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1230189", }, { category: "external", summary: "1230201", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1230201", }, { category: "self", summary: "Canonical URL", url: "https://security.access.redhat.com/data/csaf/v2/advisories/2015/rhsa-2015_1086.json", }, ], title: "Red Hat Security Advisory: flash-plugin security update", tracking: { current_release_date: "2024-11-14T18:09:46+00:00", generator: { date: "2024-11-14T18:09:46+00:00", engine: { name: "Red Hat SDEngine", version: "4.2.0", }, }, id: "RHSA-2015:1086", initial_release_date: "2015-06-10T14:34:51+00:00", revision_history: [ { date: "2015-06-10T14:34:51+00:00", number: "1", summary: "Initial version", }, { date: "2015-06-10T14:34:51+00:00", number: "2", summary: "Last updated version", }, { date: "2024-11-14T18:09:46+00:00", number: "3", summary: "Last generated version", }, ], status: "final", version: "3", }, }, product_tree: { branches: [ { branches: [ { branches: [ { category: "product_name", name: "Red Hat Enterprise Linux Desktop Supplementary (v. 5)", product: { name: "Red Hat Enterprise Linux Desktop Supplementary (v. 5)", product_id: "5Client-Supplementary-5.11.Z", product_identification_helper: { cpe: "cpe:/a:redhat:rhel_extras:5::client", }, }, }, { category: "product_name", name: "Red Hat Enterprise Linux Server Supplementary (v. 5)", product: { name: "Red Hat Enterprise Linux Server Supplementary (v. 5)", product_id: "5Server-Supplementary-5.11.Z", product_identification_helper: { cpe: "cpe:/a:redhat:rhel_extras:5::server", }, }, }, { category: "product_name", name: "Red Hat Enterprise Linux Desktop Supplementary (v. 6)", product: { name: "Red Hat Enterprise Linux Desktop Supplementary (v. 6)", product_id: "6Client-Supplementary-6.6.z", product_identification_helper: { cpe: "cpe:/a:redhat:rhel_extras:6", }, }, }, { category: "product_name", name: "Red Hat Enterprise Linux Server Supplementary (v. 6)", product: { name: "Red Hat Enterprise Linux Server Supplementary (v. 6)", product_id: "6Server-Supplementary-6.6.z", product_identification_helper: { cpe: "cpe:/a:redhat:rhel_extras:6", }, }, }, { category: "product_name", name: "Red Hat Enterprise Linux Workstation Supplementary (v. 6)", product: { name: "Red Hat Enterprise Linux Workstation Supplementary (v. 6)", product_id: "6Workstation-Supplementary-6.6.z", product_identification_helper: { cpe: "cpe:/a:redhat:rhel_extras:6", }, }, }, ], category: "product_family", name: "Red Hat Enterprise Linux Supplementary", }, { branches: [ { category: "product_version", name: "flash-plugin-0:11.2.202.466-1.el5.i386", product: { name: "flash-plugin-0:11.2.202.466-1.el5.i386", product_id: "flash-plugin-0:11.2.202.466-1.el5.i386", product_identification_helper: { purl: "pkg:rpm/redhat/flash-plugin@11.2.202.466-1.el5?arch=i386", }, }, }, ], category: "architecture", name: "i386", }, { branches: [ { category: "product_version", name: "flash-plugin-0:11.2.202.466-1.el6_6.i686", product: { name: "flash-plugin-0:11.2.202.466-1.el6_6.i686", product_id: "flash-plugin-0:11.2.202.466-1.el6_6.i686", product_identification_helper: { purl: "pkg:rpm/redhat/flash-plugin@11.2.202.466-1.el6_6?arch=i686", }, }, }, ], category: "architecture", name: "i686", }, ], category: "vendor", name: "Red Hat", }, ], relationships: [ { category: "default_component_of", full_product_name: { name: "flash-plugin-0:11.2.202.466-1.el5.i386 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 5)", product_id: "5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.466-1.el5.i386", }, product_reference: "flash-plugin-0:11.2.202.466-1.el5.i386", relates_to_product_reference: "5Client-Supplementary-5.11.Z", }, { category: "default_component_of", full_product_name: { name: "flash-plugin-0:11.2.202.466-1.el5.i386 as a component of Red Hat Enterprise Linux Server Supplementary (v. 5)", product_id: "5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.466-1.el5.i386", }, product_reference: "flash-plugin-0:11.2.202.466-1.el5.i386", relates_to_product_reference: "5Server-Supplementary-5.11.Z", }, { category: "default_component_of", full_product_name: { name: "flash-plugin-0:11.2.202.466-1.el6_6.i686 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)", product_id: "6Client-Supplementary-6.6.z:flash-plugin-0:11.2.202.466-1.el6_6.i686", }, product_reference: "flash-plugin-0:11.2.202.466-1.el6_6.i686", relates_to_product_reference: "6Client-Supplementary-6.6.z", }, { category: "default_component_of", full_product_name: { name: "flash-plugin-0:11.2.202.466-1.el6_6.i686 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)", product_id: "6Server-Supplementary-6.6.z:flash-plugin-0:11.2.202.466-1.el6_6.i686", }, product_reference: "flash-plugin-0:11.2.202.466-1.el6_6.i686", relates_to_product_reference: "6Server-Supplementary-6.6.z", }, { category: "default_component_of", full_product_name: { name: "flash-plugin-0:11.2.202.466-1.el6_6.i686 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)", product_id: "6Workstation-Supplementary-6.6.z:flash-plugin-0:11.2.202.466-1.el6_6.i686", }, product_reference: "flash-plugin-0:11.2.202.466-1.el6_6.i686", relates_to_product_reference: "6Workstation-Supplementary-6.6.z", }, ], }, vulnerabilities: [ { cve: "CVE-2015-3096", cwe: { id: "CWE-352", name: "Cross-Site Request Forgery (CSRF)", }, discovery_date: "2015-06-10T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1230185", }, ], notes: [ { category: "description", text: "Adobe Flash Player before 13.0.0.292 and 14.x through 18.x before 18.0.0.160 on Windows and OS X and before 11.2.202.466 on Linux, Adobe AIR before 18.0.0.144 on Windows and before 18.0.0.143 on OS X and Android, Adobe AIR SDK before 18.0.0.144 on Windows and before 18.0.0.143 on OS X, and Adobe AIR SDK & Compiler before 18.0.0.144 on Windows and before 18.0.0.143 on OS X allow remote attackers to bypass a CVE-2014-5333 protection mechanism via unspecified vectors.", title: "Vulnerability description", }, { category: "summary", text: "flash-plugin: cross-site request forgery against JSONP endpoints fixed in APSB15-11 (incomplete fix for CVE-2014-5333)", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.466-1.el5.i386", "5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.466-1.el5.i386", "6Client-Supplementary-6.6.z:flash-plugin-0:11.2.202.466-1.el6_6.i686", "6Server-Supplementary-6.6.z:flash-plugin-0:11.2.202.466-1.el6_6.i686", "6Workstation-Supplementary-6.6.z:flash-plugin-0:11.2.202.466-1.el6_6.i686", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2015-3096", }, { category: "external", summary: "RHBZ#1230185", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1230185", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2015-3096", url: "https://www.cve.org/CVERecord?id=CVE-2015-3096", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2015-3096", url: "https://nvd.nist.gov/vuln/detail/CVE-2015-3096", }, { category: "external", summary: "https://helpx.adobe.com/security/products/flash-player/apsb15-11.html", url: "https://helpx.adobe.com/security/products/flash-player/apsb15-11.html", }, ], release_date: "2015-06-09T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2015-06-10T14:34:51+00:00", details: "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.466-1.el5.i386", "5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.466-1.el5.i386", "6Client-Supplementary-6.6.z:flash-plugin-0:11.2.202.466-1.el6_6.i686", "6Server-Supplementary-6.6.z:flash-plugin-0:11.2.202.466-1.el6_6.i686", "6Workstation-Supplementary-6.6.z:flash-plugin-0:11.2.202.466-1.el6_6.i686", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2015:1086", }, ], scores: [ { cvss_v2: { accessComplexity: "MEDIUM", accessVector: "NETWORK", authentication: "NONE", availabilityImpact: "NONE", baseScore: 4.3, confidentialityImpact: "NONE", integrityImpact: "PARTIAL", vectorString: "AV:N/AC:M/Au:N/C:N/I:P/A:N", version: "2.0", }, products: [ "5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.466-1.el5.i386", "5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.466-1.el5.i386", "6Client-Supplementary-6.6.z:flash-plugin-0:11.2.202.466-1.el6_6.i686", "6Server-Supplementary-6.6.z:flash-plugin-0:11.2.202.466-1.el6_6.i686", "6Workstation-Supplementary-6.6.z:flash-plugin-0:11.2.202.466-1.el6_6.i686", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "flash-plugin: cross-site request forgery against JSONP endpoints fixed in APSB15-11 (incomplete fix for CVE-2014-5333)", }, { cve: "CVE-2015-3098", discovery_date: "2015-06-10T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1230189", }, ], notes: [ { category: "description", text: "Adobe Flash Player before 13.0.0.292 and 14.x through 18.x before 18.0.0.160 on Windows and OS X and before 11.2.202.466 on Linux, Adobe AIR before 18.0.0.144 on Windows and before 18.0.0.143 on OS X and Android, Adobe AIR SDK before 18.0.0.144 on Windows and before 18.0.0.143 on OS X, and Adobe AIR SDK & Compiler before 18.0.0.144 on Windows and before 18.0.0.143 on OS X allow remote attackers to bypass the Same Origin Policy via unspecified vectors, a different vulnerability than CVE-2015-3099 and CVE-2015-3102.", title: "Vulnerability description", }, { category: "summary", text: "flash-plugin: same-origin-policy bypass fixed in APSB15-11", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.466-1.el5.i386", "5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.466-1.el5.i386", "6Client-Supplementary-6.6.z:flash-plugin-0:11.2.202.466-1.el6_6.i686", "6Server-Supplementary-6.6.z:flash-plugin-0:11.2.202.466-1.el6_6.i686", "6Workstation-Supplementary-6.6.z:flash-plugin-0:11.2.202.466-1.el6_6.i686", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2015-3098", }, { category: "external", summary: "RHBZ#1230189", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1230189", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2015-3098", url: "https://www.cve.org/CVERecord?id=CVE-2015-3098", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2015-3098", url: "https://nvd.nist.gov/vuln/detail/CVE-2015-3098", }, { category: "external", summary: "https://helpx.adobe.com/security/products/flash-player/apsb15-11.html", url: "https://helpx.adobe.com/security/products/flash-player/apsb15-11.html", }, ], release_date: "2015-06-09T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2015-06-10T14:34:51+00:00", details: "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.466-1.el5.i386", "5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.466-1.el5.i386", "6Client-Supplementary-6.6.z:flash-plugin-0:11.2.202.466-1.el6_6.i686", "6Server-Supplementary-6.6.z:flash-plugin-0:11.2.202.466-1.el6_6.i686", "6Workstation-Supplementary-6.6.z:flash-plugin-0:11.2.202.466-1.el6_6.i686", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2015:1086", }, ], scores: [ { cvss_v2: { accessComplexity: "MEDIUM", accessVector: "NETWORK", authentication: "NONE", availabilityImpact: "NONE", baseScore: 4.3, confidentialityImpact: "PARTIAL", integrityImpact: "NONE", vectorString: "AV:N/AC:M/Au:N/C:P/I:N/A:N", version: "2.0", }, products: [ "5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.466-1.el5.i386", "5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.466-1.el5.i386", "6Client-Supplementary-6.6.z:flash-plugin-0:11.2.202.466-1.el6_6.i686", "6Server-Supplementary-6.6.z:flash-plugin-0:11.2.202.466-1.el6_6.i686", "6Workstation-Supplementary-6.6.z:flash-plugin-0:11.2.202.466-1.el6_6.i686", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "flash-plugin: same-origin-policy bypass fixed in APSB15-11", }, { cve: "CVE-2015-3099", discovery_date: "2015-06-10T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1230189", }, ], notes: [ { category: "description", text: "Adobe Flash Player before 13.0.0.292 and 14.x through 18.x before 18.0.0.160 on Windows and OS X and before 11.2.202.466 on Linux, Adobe AIR before 18.0.0.144 on Windows and before 18.0.0.143 on OS X and Android, Adobe AIR SDK before 18.0.0.144 on Windows and before 18.0.0.143 on OS X, and Adobe AIR SDK & Compiler before 18.0.0.144 on Windows and before 18.0.0.143 on OS X allow remote attackers to bypass the Same Origin Policy via unspecified vectors, a different vulnerability than CVE-2015-3098 and CVE-2015-3102.", title: "Vulnerability description", }, { category: "summary", text: "flash-plugin: same-origin-policy bypass fixed in APSB15-11", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.466-1.el5.i386", "5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.466-1.el5.i386", "6Client-Supplementary-6.6.z:flash-plugin-0:11.2.202.466-1.el6_6.i686", "6Server-Supplementary-6.6.z:flash-plugin-0:11.2.202.466-1.el6_6.i686", "6Workstation-Supplementary-6.6.z:flash-plugin-0:11.2.202.466-1.el6_6.i686", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2015-3099", }, { category: "external", summary: "RHBZ#1230189", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1230189", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2015-3099", url: "https://www.cve.org/CVERecord?id=CVE-2015-3099", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2015-3099", url: "https://nvd.nist.gov/vuln/detail/CVE-2015-3099", }, { category: "external", summary: "https://helpx.adobe.com/security/products/flash-player/apsb15-11.html", url: "https://helpx.adobe.com/security/products/flash-player/apsb15-11.html", }, ], release_date: "2015-06-09T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2015-06-10T14:34:51+00:00", details: "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.466-1.el5.i386", "5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.466-1.el5.i386", "6Client-Supplementary-6.6.z:flash-plugin-0:11.2.202.466-1.el6_6.i686", "6Server-Supplementary-6.6.z:flash-plugin-0:11.2.202.466-1.el6_6.i686", "6Workstation-Supplementary-6.6.z:flash-plugin-0:11.2.202.466-1.el6_6.i686", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2015:1086", }, ], scores: [ { cvss_v2: { accessComplexity: "MEDIUM", accessVector: "NETWORK", authentication: "NONE", availabilityImpact: "NONE", baseScore: 4.3, confidentialityImpact: "PARTIAL", integrityImpact: "NONE", vectorString: "AV:N/AC:M/Au:N/C:P/I:N/A:N", version: "2.0", }, products: [ "5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.466-1.el5.i386", "5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.466-1.el5.i386", "6Client-Supplementary-6.6.z:flash-plugin-0:11.2.202.466-1.el6_6.i686", "6Server-Supplementary-6.6.z:flash-plugin-0:11.2.202.466-1.el6_6.i686", "6Workstation-Supplementary-6.6.z:flash-plugin-0:11.2.202.466-1.el6_6.i686", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "flash-plugin: same-origin-policy bypass fixed in APSB15-11", }, { cve: "CVE-2015-3100", discovery_date: "2015-06-09T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1229879", }, ], notes: [ { category: "description", text: "Stack-based buffer overflow in Adobe Flash Player before 13.0.0.292 and 14.x through 18.x before 18.0.0.160 on Windows and OS X and before 11.2.202.466 on Linux, Adobe AIR before 18.0.0.144 on Windows and before 18.0.0.143 on OS X and Android, Adobe AIR SDK before 18.0.0.144 on Windows and before 18.0.0.143 on OS X, and Adobe AIR SDK & Compiler before 18.0.0.144 on Windows and before 18.0.0.143 on OS X allows attackers to execute arbitrary code via unspecified vectors.", title: "Vulnerability description", }, { category: "summary", text: "flash-plugin: multiple code execution issues fixed in APSB15-11", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.466-1.el5.i386", "5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.466-1.el5.i386", "6Client-Supplementary-6.6.z:flash-plugin-0:11.2.202.466-1.el6_6.i686", "6Server-Supplementary-6.6.z:flash-plugin-0:11.2.202.466-1.el6_6.i686", "6Workstation-Supplementary-6.6.z:flash-plugin-0:11.2.202.466-1.el6_6.i686", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2015-3100", }, { category: "external", summary: "RHBZ#1229879", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1229879", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2015-3100", url: "https://www.cve.org/CVERecord?id=CVE-2015-3100", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2015-3100", url: "https://nvd.nist.gov/vuln/detail/CVE-2015-3100", }, { category: "external", summary: "https://helpx.adobe.com/security/products/flash-player/apsb15-11.html", url: "https://helpx.adobe.com/security/products/flash-player/apsb15-11.html", }, ], release_date: "2015-06-09T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2015-06-10T14:34:51+00:00", details: "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.466-1.el5.i386", "5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.466-1.el5.i386", "6Client-Supplementary-6.6.z:flash-plugin-0:11.2.202.466-1.el6_6.i686", "6Server-Supplementary-6.6.z:flash-plugin-0:11.2.202.466-1.el6_6.i686", "6Workstation-Supplementary-6.6.z:flash-plugin-0:11.2.202.466-1.el6_6.i686", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2015:1086", }, ], scores: [ { cvss_v2: { accessComplexity: "MEDIUM", accessVector: "NETWORK", authentication: "NONE", availabilityImpact: "PARTIAL", baseScore: 6.8, confidentialityImpact: "PARTIAL", integrityImpact: "PARTIAL", vectorString: "AV:N/AC:M/Au:N/C:P/I:P/A:P", version: "2.0", }, products: [ "5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.466-1.el5.i386", "5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.466-1.el5.i386", "6Client-Supplementary-6.6.z:flash-plugin-0:11.2.202.466-1.el6_6.i686", "6Server-Supplementary-6.6.z:flash-plugin-0:11.2.202.466-1.el6_6.i686", "6Workstation-Supplementary-6.6.z:flash-plugin-0:11.2.202.466-1.el6_6.i686", ], }, ], threats: [ { category: "impact", details: "Critical", }, ], title: "flash-plugin: multiple code execution issues fixed in APSB15-11", }, { cve: "CVE-2015-3102", discovery_date: "2015-06-10T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1230189", }, ], notes: [ { category: "description", text: "Adobe Flash Player before 13.0.0.292 and 14.x through 18.x before 18.0.0.160 on Windows and OS X and before 11.2.202.466 on Linux, Adobe AIR before 18.0.0.144 on Windows and before 18.0.0.143 on OS X and Android, Adobe AIR SDK before 18.0.0.144 on Windows and before 18.0.0.143 on OS X, and Adobe AIR SDK & Compiler before 18.0.0.144 on Windows and before 18.0.0.143 on OS X allow remote attackers to bypass the Same Origin Policy via unspecified vectors, a different vulnerability than CVE-2015-3098 and CVE-2015-3099.", title: "Vulnerability description", }, { category: "summary", text: "flash-plugin: same-origin-policy bypass fixed in APSB15-11", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.466-1.el5.i386", "5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.466-1.el5.i386", "6Client-Supplementary-6.6.z:flash-plugin-0:11.2.202.466-1.el6_6.i686", "6Server-Supplementary-6.6.z:flash-plugin-0:11.2.202.466-1.el6_6.i686", "6Workstation-Supplementary-6.6.z:flash-plugin-0:11.2.202.466-1.el6_6.i686", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2015-3102", }, { category: "external", summary: "RHBZ#1230189", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1230189", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2015-3102", url: "https://www.cve.org/CVERecord?id=CVE-2015-3102", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2015-3102", url: "https://nvd.nist.gov/vuln/detail/CVE-2015-3102", }, { category: "external", summary: "https://helpx.adobe.com/security/products/flash-player/apsb15-11.html", url: "https://helpx.adobe.com/security/products/flash-player/apsb15-11.html", }, ], release_date: "2015-06-09T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2015-06-10T14:34:51+00:00", details: "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.466-1.el5.i386", "5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.466-1.el5.i386", "6Client-Supplementary-6.6.z:flash-plugin-0:11.2.202.466-1.el6_6.i686", "6Server-Supplementary-6.6.z:flash-plugin-0:11.2.202.466-1.el6_6.i686", "6Workstation-Supplementary-6.6.z:flash-plugin-0:11.2.202.466-1.el6_6.i686", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2015:1086", }, ], scores: [ { cvss_v2: { accessComplexity: "MEDIUM", accessVector: "NETWORK", authentication: "NONE", availabilityImpact: "NONE", baseScore: 4.3, confidentialityImpact: "PARTIAL", integrityImpact: "NONE", vectorString: "AV:N/AC:M/Au:N/C:P/I:N/A:N", version: "2.0", }, products: [ "5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.466-1.el5.i386", "5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.466-1.el5.i386", "6Client-Supplementary-6.6.z:flash-plugin-0:11.2.202.466-1.el6_6.i686", "6Server-Supplementary-6.6.z:flash-plugin-0:11.2.202.466-1.el6_6.i686", "6Workstation-Supplementary-6.6.z:flash-plugin-0:11.2.202.466-1.el6_6.i686", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "flash-plugin: same-origin-policy bypass fixed in APSB15-11", }, { cve: "CVE-2015-3103", discovery_date: "2015-06-09T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1229879", }, ], notes: [ { category: "description", text: "Use-after-free vulnerability in Adobe Flash Player before 13.0.0.292 and 14.x through 18.x before 18.0.0.160 on Windows and OS X and before 11.2.202.466 on Linux, Adobe AIR before 18.0.0.144 on Windows and before 18.0.0.143 on OS X and Android, Adobe AIR SDK before 18.0.0.144 on Windows and before 18.0.0.143 on OS X, and Adobe AIR SDK & Compiler before 18.0.0.144 on Windows and before 18.0.0.143 on OS X allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-3106 and CVE-2015-3107.", title: "Vulnerability description", }, { category: "summary", text: "flash-plugin: multiple code execution issues fixed in APSB15-11", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.466-1.el5.i386", "5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.466-1.el5.i386", "6Client-Supplementary-6.6.z:flash-plugin-0:11.2.202.466-1.el6_6.i686", "6Server-Supplementary-6.6.z:flash-plugin-0:11.2.202.466-1.el6_6.i686", "6Workstation-Supplementary-6.6.z:flash-plugin-0:11.2.202.466-1.el6_6.i686", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2015-3103", }, { category: "external", summary: "RHBZ#1229879", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1229879", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2015-3103", url: "https://www.cve.org/CVERecord?id=CVE-2015-3103", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2015-3103", url: "https://nvd.nist.gov/vuln/detail/CVE-2015-3103", }, { category: "external", summary: "https://helpx.adobe.com/security/products/flash-player/apsb15-11.html", url: "https://helpx.adobe.com/security/products/flash-player/apsb15-11.html", }, ], release_date: "2015-06-09T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2015-06-10T14:34:51+00:00", details: "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.466-1.el5.i386", "5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.466-1.el5.i386", "6Client-Supplementary-6.6.z:flash-plugin-0:11.2.202.466-1.el6_6.i686", "6Server-Supplementary-6.6.z:flash-plugin-0:11.2.202.466-1.el6_6.i686", "6Workstation-Supplementary-6.6.z:flash-plugin-0:11.2.202.466-1.el6_6.i686", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2015:1086", }, ], scores: [ { cvss_v2: { accessComplexity: "MEDIUM", accessVector: "NETWORK", authentication: "NONE", availabilityImpact: "PARTIAL", baseScore: 6.8, confidentialityImpact: "PARTIAL", integrityImpact: "PARTIAL", vectorString: "AV:N/AC:M/Au:N/C:P/I:P/A:P", version: "2.0", }, products: [ "5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.466-1.el5.i386", "5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.466-1.el5.i386", "6Client-Supplementary-6.6.z:flash-plugin-0:11.2.202.466-1.el6_6.i686", "6Server-Supplementary-6.6.z:flash-plugin-0:11.2.202.466-1.el6_6.i686", "6Workstation-Supplementary-6.6.z:flash-plugin-0:11.2.202.466-1.el6_6.i686", ], }, ], threats: [ { category: "impact", details: "Critical", }, ], title: "flash-plugin: multiple code execution issues fixed in APSB15-11", }, { cve: "CVE-2015-3104", discovery_date: "2015-06-09T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1229879", }, ], notes: [ { category: "description", text: "Integer overflow in Adobe Flash Player before 13.0.0.292 and 14.x through 18.x before 18.0.0.160 on Windows and OS X and before 11.2.202.466 on Linux, Adobe AIR before 18.0.0.144 on Windows and before 18.0.0.143 on OS X and Android, Adobe AIR SDK before 18.0.0.144 on Windows and before 18.0.0.143 on OS X, and Adobe AIR SDK & Compiler before 18.0.0.144 on Windows and before 18.0.0.143 on OS X allows attackers to execute arbitrary code via unspecified vectors.", title: "Vulnerability description", }, { category: "summary", text: "flash-plugin: multiple code execution issues fixed in APSB15-11", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.466-1.el5.i386", "5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.466-1.el5.i386", "6Client-Supplementary-6.6.z:flash-plugin-0:11.2.202.466-1.el6_6.i686", "6Server-Supplementary-6.6.z:flash-plugin-0:11.2.202.466-1.el6_6.i686", "6Workstation-Supplementary-6.6.z:flash-plugin-0:11.2.202.466-1.el6_6.i686", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2015-3104", }, { category: "external", summary: "RHBZ#1229879", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1229879", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2015-3104", url: "https://www.cve.org/CVERecord?id=CVE-2015-3104", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2015-3104", url: "https://nvd.nist.gov/vuln/detail/CVE-2015-3104", }, { category: "external", summary: "https://helpx.adobe.com/security/products/flash-player/apsb15-11.html", url: "https://helpx.adobe.com/security/products/flash-player/apsb15-11.html", }, ], release_date: "2015-06-09T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2015-06-10T14:34:51+00:00", details: "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.466-1.el5.i386", "5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.466-1.el5.i386", "6Client-Supplementary-6.6.z:flash-plugin-0:11.2.202.466-1.el6_6.i686", "6Server-Supplementary-6.6.z:flash-plugin-0:11.2.202.466-1.el6_6.i686", "6Workstation-Supplementary-6.6.z:flash-plugin-0:11.2.202.466-1.el6_6.i686", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2015:1086", }, ], scores: [ { cvss_v2: { accessComplexity: "MEDIUM", accessVector: "NETWORK", authentication: "NONE", availabilityImpact: "PARTIAL", baseScore: 6.8, confidentialityImpact: "PARTIAL", integrityImpact: "PARTIAL", vectorString: "AV:N/AC:M/Au:N/C:P/I:P/A:P", version: "2.0", }, products: [ "5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.466-1.el5.i386", "5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.466-1.el5.i386", "6Client-Supplementary-6.6.z:flash-plugin-0:11.2.202.466-1.el6_6.i686", "6Server-Supplementary-6.6.z:flash-plugin-0:11.2.202.466-1.el6_6.i686", "6Workstation-Supplementary-6.6.z:flash-plugin-0:11.2.202.466-1.el6_6.i686", ], }, ], threats: [ { category: "impact", details: "Critical", }, ], title: "flash-plugin: multiple code execution issues fixed in APSB15-11", }, { cve: "CVE-2015-3105", discovery_date: "2015-06-09T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1229879", }, ], notes: [ { category: "description", text: "Adobe Flash Player before 13.0.0.292 and 14.x through 18.x before 18.0.0.160 on Windows and OS X and before 11.2.202.466 on Linux, Adobe AIR before 18.0.0.144 on Windows and before 18.0.0.143 on OS X and Android, Adobe AIR SDK before 18.0.0.144 on Windows and before 18.0.0.143 on OS X, and Adobe AIR SDK & Compiler before 18.0.0.144 on Windows and before 18.0.0.143 on OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.", title: "Vulnerability description", }, { category: "summary", text: "flash-plugin: multiple code execution issues fixed in APSB15-11", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.466-1.el5.i386", "5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.466-1.el5.i386", "6Client-Supplementary-6.6.z:flash-plugin-0:11.2.202.466-1.el6_6.i686", "6Server-Supplementary-6.6.z:flash-plugin-0:11.2.202.466-1.el6_6.i686", "6Workstation-Supplementary-6.6.z:flash-plugin-0:11.2.202.466-1.el6_6.i686", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2015-3105", }, { category: "external", summary: "RHBZ#1229879", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1229879", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2015-3105", url: "https://www.cve.org/CVERecord?id=CVE-2015-3105", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2015-3105", url: "https://nvd.nist.gov/vuln/detail/CVE-2015-3105", }, { category: "external", summary: "https://helpx.adobe.com/security/products/flash-player/apsb15-11.html", url: "https://helpx.adobe.com/security/products/flash-player/apsb15-11.html", }, ], release_date: "2015-06-09T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2015-06-10T14:34:51+00:00", details: "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.466-1.el5.i386", "5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.466-1.el5.i386", "6Client-Supplementary-6.6.z:flash-plugin-0:11.2.202.466-1.el6_6.i686", "6Server-Supplementary-6.6.z:flash-plugin-0:11.2.202.466-1.el6_6.i686", "6Workstation-Supplementary-6.6.z:flash-plugin-0:11.2.202.466-1.el6_6.i686", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2015:1086", }, ], scores: [ { cvss_v2: { accessComplexity: "MEDIUM", accessVector: "NETWORK", authentication: "NONE", availabilityImpact: "PARTIAL", baseScore: 6.8, confidentialityImpact: "PARTIAL", integrityImpact: "PARTIAL", vectorString: "AV:N/AC:M/Au:N/C:P/I:P/A:P", version: "2.0", }, products: [ "5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.466-1.el5.i386", "5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.466-1.el5.i386", "6Client-Supplementary-6.6.z:flash-plugin-0:11.2.202.466-1.el6_6.i686", "6Server-Supplementary-6.6.z:flash-plugin-0:11.2.202.466-1.el6_6.i686", "6Workstation-Supplementary-6.6.z:flash-plugin-0:11.2.202.466-1.el6_6.i686", ], }, ], threats: [ { category: "impact", details: "Critical", }, ], title: "flash-plugin: multiple code execution issues fixed in APSB15-11", }, { cve: "CVE-2015-3106", discovery_date: "2015-06-09T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1229879", }, ], notes: [ { category: "description", text: "Use-after-free vulnerability in Adobe Flash Player before 13.0.0.292 and 14.x through 18.x before 18.0.0.160 on Windows and OS X and before 11.2.202.466 on Linux, Adobe AIR before 18.0.0.144 on Windows and before 18.0.0.143 on OS X and Android, Adobe AIR SDK before 18.0.0.144 on Windows and before 18.0.0.143 on OS X, and Adobe AIR SDK & Compiler before 18.0.0.144 on Windows and before 18.0.0.143 on OS X allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-3103 and CVE-2015-3107.", title: "Vulnerability description", }, { category: "summary", text: "flash-plugin: multiple code execution issues fixed in APSB15-11", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.466-1.el5.i386", "5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.466-1.el5.i386", "6Client-Supplementary-6.6.z:flash-plugin-0:11.2.202.466-1.el6_6.i686", "6Server-Supplementary-6.6.z:flash-plugin-0:11.2.202.466-1.el6_6.i686", "6Workstation-Supplementary-6.6.z:flash-plugin-0:11.2.202.466-1.el6_6.i686", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2015-3106", }, { category: "external", summary: "RHBZ#1229879", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1229879", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2015-3106", url: "https://www.cve.org/CVERecord?id=CVE-2015-3106", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2015-3106", url: "https://nvd.nist.gov/vuln/detail/CVE-2015-3106", }, { category: "external", summary: "https://helpx.adobe.com/security/products/flash-player/apsb15-11.html", url: "https://helpx.adobe.com/security/products/flash-player/apsb15-11.html", }, ], release_date: "2015-06-09T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2015-06-10T14:34:51+00:00", details: "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.466-1.el5.i386", "5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.466-1.el5.i386", "6Client-Supplementary-6.6.z:flash-plugin-0:11.2.202.466-1.el6_6.i686", "6Server-Supplementary-6.6.z:flash-plugin-0:11.2.202.466-1.el6_6.i686", "6Workstation-Supplementary-6.6.z:flash-plugin-0:11.2.202.466-1.el6_6.i686", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2015:1086", }, ], scores: [ { cvss_v2: { accessComplexity: "MEDIUM", accessVector: "NETWORK", authentication: "NONE", availabilityImpact: "PARTIAL", baseScore: 6.8, confidentialityImpact: "PARTIAL", integrityImpact: "PARTIAL", vectorString: "AV:N/AC:M/Au:N/C:P/I:P/A:P", version: "2.0", }, products: [ "5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.466-1.el5.i386", "5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.466-1.el5.i386", "6Client-Supplementary-6.6.z:flash-plugin-0:11.2.202.466-1.el6_6.i686", "6Server-Supplementary-6.6.z:flash-plugin-0:11.2.202.466-1.el6_6.i686", "6Workstation-Supplementary-6.6.z:flash-plugin-0:11.2.202.466-1.el6_6.i686", ], }, ], threats: [ { category: "impact", details: "Critical", }, ], title: "flash-plugin: multiple code execution issues fixed in APSB15-11", }, { cve: "CVE-2015-3107", discovery_date: "2015-06-09T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1229879", }, ], notes: [ { category: "description", text: "Use-after-free vulnerability in Adobe Flash Player before 13.0.0.292 and 14.x through 18.x before 18.0.0.160 on Windows and OS X and before 11.2.202.466 on Linux, Adobe AIR before 18.0.0.144 on Windows and before 18.0.0.143 on OS X and Android, Adobe AIR SDK before 18.0.0.144 on Windows and before 18.0.0.143 on OS X, and Adobe AIR SDK & Compiler before 18.0.0.144 on Windows and before 18.0.0.143 on OS X allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-3103 and CVE-2015-3106.", title: "Vulnerability description", }, { category: "summary", text: "flash-plugin: multiple code execution issues fixed in APSB15-11", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.466-1.el5.i386", "5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.466-1.el5.i386", "6Client-Supplementary-6.6.z:flash-plugin-0:11.2.202.466-1.el6_6.i686", "6Server-Supplementary-6.6.z:flash-plugin-0:11.2.202.466-1.el6_6.i686", "6Workstation-Supplementary-6.6.z:flash-plugin-0:11.2.202.466-1.el6_6.i686", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2015-3107", }, { category: "external", summary: "RHBZ#1229879", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1229879", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2015-3107", url: "https://www.cve.org/CVERecord?id=CVE-2015-3107", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2015-3107", url: "https://nvd.nist.gov/vuln/detail/CVE-2015-3107", }, { category: "external", summary: "https://helpx.adobe.com/security/products/flash-player/apsb15-11.html", url: "https://helpx.adobe.com/security/products/flash-player/apsb15-11.html", }, ], release_date: "2015-06-09T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2015-06-10T14:34:51+00:00", details: "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.466-1.el5.i386", "5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.466-1.el5.i386", "6Client-Supplementary-6.6.z:flash-plugin-0:11.2.202.466-1.el6_6.i686", "6Server-Supplementary-6.6.z:flash-plugin-0:11.2.202.466-1.el6_6.i686", "6Workstation-Supplementary-6.6.z:flash-plugin-0:11.2.202.466-1.el6_6.i686", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2015:1086", }, ], scores: [ { cvss_v2: { accessComplexity: "MEDIUM", accessVector: "NETWORK", authentication: "NONE", availabilityImpact: "PARTIAL", baseScore: 6.8, confidentialityImpact: "PARTIAL", integrityImpact: "PARTIAL", vectorString: "AV:N/AC:M/Au:N/C:P/I:P/A:P", version: "2.0", }, products: [ "5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.466-1.el5.i386", "5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.466-1.el5.i386", "6Client-Supplementary-6.6.z:flash-plugin-0:11.2.202.466-1.el6_6.i686", "6Server-Supplementary-6.6.z:flash-plugin-0:11.2.202.466-1.el6_6.i686", "6Workstation-Supplementary-6.6.z:flash-plugin-0:11.2.202.466-1.el6_6.i686", ], }, ], threats: [ { category: "impact", details: "Critical", }, ], title: "flash-plugin: multiple code execution issues fixed in APSB15-11", }, { cve: "CVE-2015-3108", discovery_date: "2015-06-10T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1230201", }, ], notes: [ { category: "description", text: "Adobe Flash Player before 13.0.0.292 and 14.x through 18.x before 18.0.0.160 on Windows and OS X and before 11.2.202.466 on Linux, Adobe AIR before 18.0.0.144 on Windows and before 18.0.0.143 on OS X and Android, Adobe AIR SDK before 18.0.0.144 on Windows and before 18.0.0.143 on OS X, and Adobe AIR SDK & Compiler before 18.0.0.144 on Windows and before 18.0.0.143 on OS X do not properly restrict discovery of memory addresses, which allows attackers to bypass the ASLR protection mechanism via unspecified vectors.", title: "Vulnerability description", }, { category: "summary", text: "flash-plugin: information leak leading to ASLR bypass (APSB15-11)", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.466-1.el5.i386", "5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.466-1.el5.i386", "6Client-Supplementary-6.6.z:flash-plugin-0:11.2.202.466-1.el6_6.i686", "6Server-Supplementary-6.6.z:flash-plugin-0:11.2.202.466-1.el6_6.i686", "6Workstation-Supplementary-6.6.z:flash-plugin-0:11.2.202.466-1.el6_6.i686", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2015-3108", }, { category: "external", summary: "RHBZ#1230201", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1230201", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2015-3108", url: "https://www.cve.org/CVERecord?id=CVE-2015-3108", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2015-3108", url: "https://nvd.nist.gov/vuln/detail/CVE-2015-3108", }, { category: "external", summary: "https://helpx.adobe.com/security/products/flash-player/apsb15-11.html", url: "https://helpx.adobe.com/security/products/flash-player/apsb15-11.html", }, ], release_date: "2015-06-09T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2015-06-10T14:34:51+00:00", details: "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.466-1.el5.i386", "5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.466-1.el5.i386", "6Client-Supplementary-6.6.z:flash-plugin-0:11.2.202.466-1.el6_6.i686", "6Server-Supplementary-6.6.z:flash-plugin-0:11.2.202.466-1.el6_6.i686", "6Workstation-Supplementary-6.6.z:flash-plugin-0:11.2.202.466-1.el6_6.i686", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2015:1086", }, ], scores: [ { cvss_v2: { accessComplexity: "MEDIUM", accessVector: "NETWORK", authentication: "NONE", availabilityImpact: "NONE", baseScore: 4.3, confidentialityImpact: "PARTIAL", integrityImpact: "NONE", vectorString: "AV:N/AC:M/Au:N/C:P/I:N/A:N", version: "2.0", }, products: [ "5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.466-1.el5.i386", "5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.466-1.el5.i386", "6Client-Supplementary-6.6.z:flash-plugin-0:11.2.202.466-1.el6_6.i686", "6Server-Supplementary-6.6.z:flash-plugin-0:11.2.202.466-1.el6_6.i686", "6Workstation-Supplementary-6.6.z:flash-plugin-0:11.2.202.466-1.el6_6.i686", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "flash-plugin: information leak leading to ASLR bypass (APSB15-11)", }, ], }
RHSA-2015:1086
Vulnerability from csaf_redhat
Notes
{ document: { aggregate_severity: { namespace: "https://access.redhat.com/security/updates/classification/", text: "Critical", }, category: "csaf_security_advisory", csaf_version: "2.0", distribution: { text: "Copyright © Red Hat, Inc. All rights reserved.", tlp: { label: "WHITE", url: "https://www.first.org/tlp/", }, }, lang: "en", notes: [ { category: "summary", text: "An updated Adobe Flash Player package that fixes multiple security issues\nis now available for Red Hat Enterprise Linux 5 and 6 Supplementary.\n\nRed Hat Product Security has rated this update as having Critical security\nimpact. Common Vulnerability Scoring System (CVSS) base scores, which give\ndetailed severity ratings, are available for each vulnerability from the\nCVE links in the References section.", title: "Topic", }, { category: "general", text: "The flash-plugin package contains a Mozilla Firefox compatible Adobe Flash\nPlayer web browser plug-in.\n\nThis update fixes multiple vulnerabilities in Adobe Flash Player. These\nvulnerabilities are detailed in the Adobe Security Bulletin APSB15-11\nlisted in the References section.\n\nMultiple flaws were found in the way flash-plugin displayed certain SWF\ncontent. An attacker could use these flaws to create a specially crafted\nSWF file that would cause flash-plugin to crash or, potentially, execute\narbitrary code when the victim loaded a page containing the malicious SWF\ncontent. (CVE-2015-3100, CVE-2015-3103, CVE-2015-3104, CVE-2015-3105,\nCVE-2015-3106, CVE-2015-3107)\n\nMultiple security bypass flaws were found in flash-plugin that could lead\nto the disclosure of sensitive information. (CVE-2015-3096, CVE-2015-3098,\nCVE-2015-3099, CVE-2015-3102)\n\nA memory information leak flaw was found in flash-plugin that could\nallow an attacker to potentially bypass ASLR (Address Space Layout\nRandomization) protection, and make it easier to exploit other flaws.\n(CVE-2015-3108)\n\nAll users of Adobe Flash Player should install this updated package, which\nupgrades Flash Player to version 11.2.202.466.", title: "Details", }, { category: "legal_disclaimer", text: "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", title: "Terms of Use", }, ], publisher: { category: "vendor", contact_details: "https://access.redhat.com/security/team/contact/", issuing_authority: "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", name: "Red Hat Product Security", namespace: "https://www.redhat.com", }, references: [ { category: "self", summary: "https://access.redhat.com/errata/RHSA-2015:1086", url: "https://access.redhat.com/errata/RHSA-2015:1086", }, { category: "external", summary: "https://access.redhat.com/security/updates/classification/#critical", url: "https://access.redhat.com/security/updates/classification/#critical", }, { category: "external", summary: "https://helpx.adobe.com/security/products/flash-player/apsb15-11.html", url: "https://helpx.adobe.com/security/products/flash-player/apsb15-11.html", }, { category: "external", summary: "1229879", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1229879", }, { category: "external", summary: "1230185", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1230185", }, { category: "external", summary: "1230189", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1230189", }, { category: "external", summary: "1230201", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1230201", }, { category: "self", summary: "Canonical URL", url: "https://security.access.redhat.com/data/csaf/v2/advisories/2015/rhsa-2015_1086.json", }, ], title: "Red Hat Security Advisory: flash-plugin security update", tracking: { current_release_date: "2024-11-14T18:09:46+00:00", generator: { date: "2024-11-14T18:09:46+00:00", engine: { name: "Red Hat SDEngine", version: "4.2.0", }, }, id: "RHSA-2015:1086", initial_release_date: "2015-06-10T14:34:51+00:00", revision_history: [ { date: "2015-06-10T14:34:51+00:00", number: "1", summary: "Initial version", }, { date: "2015-06-10T14:34:51+00:00", number: "2", summary: "Last updated version", }, { date: "2024-11-14T18:09:46+00:00", number: "3", summary: "Last generated version", }, ], status: "final", version: "3", }, }, product_tree: { branches: [ { branches: [ { branches: [ { category: "product_name", name: "Red Hat Enterprise Linux Desktop Supplementary (v. 5)", product: { name: "Red Hat Enterprise Linux Desktop Supplementary (v. 5)", product_id: "5Client-Supplementary-5.11.Z", product_identification_helper: { cpe: "cpe:/a:redhat:rhel_extras:5::client", }, }, }, { category: "product_name", name: "Red Hat Enterprise Linux Server Supplementary (v. 5)", product: { name: "Red Hat Enterprise Linux Server Supplementary (v. 5)", product_id: "5Server-Supplementary-5.11.Z", product_identification_helper: { cpe: "cpe:/a:redhat:rhel_extras:5::server", }, }, }, { category: "product_name", name: "Red Hat Enterprise Linux Desktop Supplementary (v. 6)", product: { name: "Red Hat Enterprise Linux Desktop Supplementary (v. 6)", product_id: "6Client-Supplementary-6.6.z", product_identification_helper: { cpe: "cpe:/a:redhat:rhel_extras:6", }, }, }, { category: "product_name", name: "Red Hat Enterprise Linux Server Supplementary (v. 6)", product: { name: "Red Hat Enterprise Linux Server Supplementary (v. 6)", product_id: "6Server-Supplementary-6.6.z", product_identification_helper: { cpe: "cpe:/a:redhat:rhel_extras:6", }, }, }, { category: "product_name", name: "Red Hat Enterprise Linux Workstation Supplementary (v. 6)", product: { name: "Red Hat Enterprise Linux Workstation Supplementary (v. 6)", product_id: "6Workstation-Supplementary-6.6.z", product_identification_helper: { cpe: "cpe:/a:redhat:rhel_extras:6", }, }, }, ], category: "product_family", name: "Red Hat Enterprise Linux Supplementary", }, { branches: [ { category: "product_version", name: "flash-plugin-0:11.2.202.466-1.el5.i386", product: { name: "flash-plugin-0:11.2.202.466-1.el5.i386", product_id: "flash-plugin-0:11.2.202.466-1.el5.i386", product_identification_helper: { purl: "pkg:rpm/redhat/flash-plugin@11.2.202.466-1.el5?arch=i386", }, }, }, ], category: "architecture", name: "i386", }, { branches: [ { category: "product_version", name: "flash-plugin-0:11.2.202.466-1.el6_6.i686", product: { name: "flash-plugin-0:11.2.202.466-1.el6_6.i686", product_id: "flash-plugin-0:11.2.202.466-1.el6_6.i686", product_identification_helper: { purl: "pkg:rpm/redhat/flash-plugin@11.2.202.466-1.el6_6?arch=i686", }, }, }, ], category: "architecture", name: "i686", }, ], category: "vendor", name: "Red Hat", }, ], relationships: [ { category: "default_component_of", full_product_name: { name: "flash-plugin-0:11.2.202.466-1.el5.i386 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 5)", product_id: "5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.466-1.el5.i386", }, product_reference: "flash-plugin-0:11.2.202.466-1.el5.i386", relates_to_product_reference: "5Client-Supplementary-5.11.Z", }, { category: "default_component_of", full_product_name: { name: "flash-plugin-0:11.2.202.466-1.el5.i386 as a component of Red Hat Enterprise Linux Server Supplementary (v. 5)", product_id: "5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.466-1.el5.i386", }, product_reference: "flash-plugin-0:11.2.202.466-1.el5.i386", relates_to_product_reference: "5Server-Supplementary-5.11.Z", }, { category: "default_component_of", full_product_name: { name: "flash-plugin-0:11.2.202.466-1.el6_6.i686 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)", product_id: "6Client-Supplementary-6.6.z:flash-plugin-0:11.2.202.466-1.el6_6.i686", }, product_reference: "flash-plugin-0:11.2.202.466-1.el6_6.i686", relates_to_product_reference: "6Client-Supplementary-6.6.z", }, { category: "default_component_of", full_product_name: { name: "flash-plugin-0:11.2.202.466-1.el6_6.i686 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)", product_id: "6Server-Supplementary-6.6.z:flash-plugin-0:11.2.202.466-1.el6_6.i686", }, product_reference: "flash-plugin-0:11.2.202.466-1.el6_6.i686", relates_to_product_reference: "6Server-Supplementary-6.6.z", }, { category: "default_component_of", full_product_name: { name: "flash-plugin-0:11.2.202.466-1.el6_6.i686 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)", product_id: "6Workstation-Supplementary-6.6.z:flash-plugin-0:11.2.202.466-1.el6_6.i686", }, product_reference: "flash-plugin-0:11.2.202.466-1.el6_6.i686", relates_to_product_reference: "6Workstation-Supplementary-6.6.z", }, ], }, vulnerabilities: [ { cve: "CVE-2015-3096", cwe: { id: "CWE-352", name: "Cross-Site Request Forgery (CSRF)", }, discovery_date: "2015-06-10T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1230185", }, ], notes: [ { category: "description", text: "Adobe Flash Player before 13.0.0.292 and 14.x through 18.x before 18.0.0.160 on Windows and OS X and before 11.2.202.466 on Linux, Adobe AIR before 18.0.0.144 on Windows and before 18.0.0.143 on OS X and Android, Adobe AIR SDK before 18.0.0.144 on Windows and before 18.0.0.143 on OS X, and Adobe AIR SDK & Compiler before 18.0.0.144 on Windows and before 18.0.0.143 on OS X allow remote attackers to bypass a CVE-2014-5333 protection mechanism via unspecified vectors.", title: "Vulnerability description", }, { category: "summary", text: "flash-plugin: cross-site request forgery against JSONP endpoints fixed in APSB15-11 (incomplete fix for CVE-2014-5333)", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.466-1.el5.i386", "5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.466-1.el5.i386", "6Client-Supplementary-6.6.z:flash-plugin-0:11.2.202.466-1.el6_6.i686", "6Server-Supplementary-6.6.z:flash-plugin-0:11.2.202.466-1.el6_6.i686", "6Workstation-Supplementary-6.6.z:flash-plugin-0:11.2.202.466-1.el6_6.i686", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2015-3096", }, { category: "external", summary: "RHBZ#1230185", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1230185", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2015-3096", url: "https://www.cve.org/CVERecord?id=CVE-2015-3096", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2015-3096", url: "https://nvd.nist.gov/vuln/detail/CVE-2015-3096", }, { category: "external", summary: "https://helpx.adobe.com/security/products/flash-player/apsb15-11.html", url: "https://helpx.adobe.com/security/products/flash-player/apsb15-11.html", }, ], release_date: "2015-06-09T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2015-06-10T14:34:51+00:00", details: "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.466-1.el5.i386", "5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.466-1.el5.i386", "6Client-Supplementary-6.6.z:flash-plugin-0:11.2.202.466-1.el6_6.i686", "6Server-Supplementary-6.6.z:flash-plugin-0:11.2.202.466-1.el6_6.i686", "6Workstation-Supplementary-6.6.z:flash-plugin-0:11.2.202.466-1.el6_6.i686", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2015:1086", }, ], scores: [ { cvss_v2: { accessComplexity: "MEDIUM", accessVector: "NETWORK", authentication: "NONE", availabilityImpact: "NONE", baseScore: 4.3, confidentialityImpact: "NONE", integrityImpact: "PARTIAL", vectorString: "AV:N/AC:M/Au:N/C:N/I:P/A:N", version: "2.0", }, products: [ "5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.466-1.el5.i386", "5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.466-1.el5.i386", "6Client-Supplementary-6.6.z:flash-plugin-0:11.2.202.466-1.el6_6.i686", "6Server-Supplementary-6.6.z:flash-plugin-0:11.2.202.466-1.el6_6.i686", "6Workstation-Supplementary-6.6.z:flash-plugin-0:11.2.202.466-1.el6_6.i686", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "flash-plugin: cross-site request forgery against JSONP endpoints fixed in APSB15-11 (incomplete fix for CVE-2014-5333)", }, { cve: "CVE-2015-3098", discovery_date: "2015-06-10T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1230189", }, ], notes: [ { category: "description", text: "Adobe Flash Player before 13.0.0.292 and 14.x through 18.x before 18.0.0.160 on Windows and OS X and before 11.2.202.466 on Linux, Adobe AIR before 18.0.0.144 on Windows and before 18.0.0.143 on OS X and Android, Adobe AIR SDK before 18.0.0.144 on Windows and before 18.0.0.143 on OS X, and Adobe AIR SDK & Compiler before 18.0.0.144 on Windows and before 18.0.0.143 on OS X allow remote attackers to bypass the Same Origin Policy via unspecified vectors, a different vulnerability than CVE-2015-3099 and CVE-2015-3102.", title: "Vulnerability description", }, { category: "summary", text: "flash-plugin: same-origin-policy bypass fixed in APSB15-11", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.466-1.el5.i386", "5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.466-1.el5.i386", "6Client-Supplementary-6.6.z:flash-plugin-0:11.2.202.466-1.el6_6.i686", "6Server-Supplementary-6.6.z:flash-plugin-0:11.2.202.466-1.el6_6.i686", "6Workstation-Supplementary-6.6.z:flash-plugin-0:11.2.202.466-1.el6_6.i686", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2015-3098", }, { category: "external", summary: "RHBZ#1230189", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1230189", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2015-3098", url: "https://www.cve.org/CVERecord?id=CVE-2015-3098", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2015-3098", url: "https://nvd.nist.gov/vuln/detail/CVE-2015-3098", }, { category: "external", summary: "https://helpx.adobe.com/security/products/flash-player/apsb15-11.html", url: "https://helpx.adobe.com/security/products/flash-player/apsb15-11.html", }, ], release_date: "2015-06-09T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2015-06-10T14:34:51+00:00", details: "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.466-1.el5.i386", "5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.466-1.el5.i386", "6Client-Supplementary-6.6.z:flash-plugin-0:11.2.202.466-1.el6_6.i686", "6Server-Supplementary-6.6.z:flash-plugin-0:11.2.202.466-1.el6_6.i686", "6Workstation-Supplementary-6.6.z:flash-plugin-0:11.2.202.466-1.el6_6.i686", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2015:1086", }, ], scores: [ { cvss_v2: { accessComplexity: "MEDIUM", accessVector: "NETWORK", authentication: "NONE", availabilityImpact: "NONE", baseScore: 4.3, confidentialityImpact: "PARTIAL", integrityImpact: "NONE", vectorString: "AV:N/AC:M/Au:N/C:P/I:N/A:N", version: "2.0", }, products: [ "5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.466-1.el5.i386", "5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.466-1.el5.i386", "6Client-Supplementary-6.6.z:flash-plugin-0:11.2.202.466-1.el6_6.i686", "6Server-Supplementary-6.6.z:flash-plugin-0:11.2.202.466-1.el6_6.i686", "6Workstation-Supplementary-6.6.z:flash-plugin-0:11.2.202.466-1.el6_6.i686", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "flash-plugin: same-origin-policy bypass fixed in APSB15-11", }, { cve: "CVE-2015-3099", discovery_date: "2015-06-10T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1230189", }, ], notes: [ { category: "description", text: "Adobe Flash Player before 13.0.0.292 and 14.x through 18.x before 18.0.0.160 on Windows and OS X and before 11.2.202.466 on Linux, Adobe AIR before 18.0.0.144 on Windows and before 18.0.0.143 on OS X and Android, Adobe AIR SDK before 18.0.0.144 on Windows and before 18.0.0.143 on OS X, and Adobe AIR SDK & Compiler before 18.0.0.144 on Windows and before 18.0.0.143 on OS X allow remote attackers to bypass the Same Origin Policy via unspecified vectors, a different vulnerability than CVE-2015-3098 and CVE-2015-3102.", title: "Vulnerability description", }, { category: "summary", text: "flash-plugin: same-origin-policy bypass fixed in APSB15-11", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.466-1.el5.i386", "5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.466-1.el5.i386", "6Client-Supplementary-6.6.z:flash-plugin-0:11.2.202.466-1.el6_6.i686", "6Server-Supplementary-6.6.z:flash-plugin-0:11.2.202.466-1.el6_6.i686", "6Workstation-Supplementary-6.6.z:flash-plugin-0:11.2.202.466-1.el6_6.i686", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2015-3099", }, { category: "external", summary: "RHBZ#1230189", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1230189", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2015-3099", url: "https://www.cve.org/CVERecord?id=CVE-2015-3099", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2015-3099", url: "https://nvd.nist.gov/vuln/detail/CVE-2015-3099", }, { category: "external", summary: "https://helpx.adobe.com/security/products/flash-player/apsb15-11.html", url: "https://helpx.adobe.com/security/products/flash-player/apsb15-11.html", }, ], release_date: "2015-06-09T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2015-06-10T14:34:51+00:00", details: "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.466-1.el5.i386", "5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.466-1.el5.i386", "6Client-Supplementary-6.6.z:flash-plugin-0:11.2.202.466-1.el6_6.i686", "6Server-Supplementary-6.6.z:flash-plugin-0:11.2.202.466-1.el6_6.i686", "6Workstation-Supplementary-6.6.z:flash-plugin-0:11.2.202.466-1.el6_6.i686", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2015:1086", }, ], scores: [ { cvss_v2: { accessComplexity: "MEDIUM", accessVector: "NETWORK", authentication: "NONE", availabilityImpact: "NONE", baseScore: 4.3, confidentialityImpact: "PARTIAL", integrityImpact: "NONE", vectorString: "AV:N/AC:M/Au:N/C:P/I:N/A:N", version: "2.0", }, products: [ "5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.466-1.el5.i386", "5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.466-1.el5.i386", "6Client-Supplementary-6.6.z:flash-plugin-0:11.2.202.466-1.el6_6.i686", "6Server-Supplementary-6.6.z:flash-plugin-0:11.2.202.466-1.el6_6.i686", "6Workstation-Supplementary-6.6.z:flash-plugin-0:11.2.202.466-1.el6_6.i686", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "flash-plugin: same-origin-policy bypass fixed in APSB15-11", }, { cve: "CVE-2015-3100", discovery_date: "2015-06-09T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1229879", }, ], notes: [ { category: "description", text: "Stack-based buffer overflow in Adobe Flash Player before 13.0.0.292 and 14.x through 18.x before 18.0.0.160 on Windows and OS X and before 11.2.202.466 on Linux, Adobe AIR before 18.0.0.144 on Windows and before 18.0.0.143 on OS X and Android, Adobe AIR SDK before 18.0.0.144 on Windows and before 18.0.0.143 on OS X, and Adobe AIR SDK & Compiler before 18.0.0.144 on Windows and before 18.0.0.143 on OS X allows attackers to execute arbitrary code via unspecified vectors.", title: "Vulnerability description", }, { category: "summary", text: "flash-plugin: multiple code execution issues fixed in APSB15-11", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.466-1.el5.i386", "5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.466-1.el5.i386", "6Client-Supplementary-6.6.z:flash-plugin-0:11.2.202.466-1.el6_6.i686", "6Server-Supplementary-6.6.z:flash-plugin-0:11.2.202.466-1.el6_6.i686", "6Workstation-Supplementary-6.6.z:flash-plugin-0:11.2.202.466-1.el6_6.i686", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2015-3100", }, { category: "external", summary: "RHBZ#1229879", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1229879", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2015-3100", url: "https://www.cve.org/CVERecord?id=CVE-2015-3100", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2015-3100", url: "https://nvd.nist.gov/vuln/detail/CVE-2015-3100", }, { category: "external", summary: "https://helpx.adobe.com/security/products/flash-player/apsb15-11.html", url: "https://helpx.adobe.com/security/products/flash-player/apsb15-11.html", }, ], release_date: "2015-06-09T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2015-06-10T14:34:51+00:00", details: "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.466-1.el5.i386", "5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.466-1.el5.i386", "6Client-Supplementary-6.6.z:flash-plugin-0:11.2.202.466-1.el6_6.i686", "6Server-Supplementary-6.6.z:flash-plugin-0:11.2.202.466-1.el6_6.i686", "6Workstation-Supplementary-6.6.z:flash-plugin-0:11.2.202.466-1.el6_6.i686", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2015:1086", }, ], scores: [ { cvss_v2: { accessComplexity: "MEDIUM", accessVector: "NETWORK", authentication: "NONE", availabilityImpact: "PARTIAL", baseScore: 6.8, confidentialityImpact: "PARTIAL", integrityImpact: "PARTIAL", vectorString: "AV:N/AC:M/Au:N/C:P/I:P/A:P", version: "2.0", }, products: [ "5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.466-1.el5.i386", "5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.466-1.el5.i386", "6Client-Supplementary-6.6.z:flash-plugin-0:11.2.202.466-1.el6_6.i686", "6Server-Supplementary-6.6.z:flash-plugin-0:11.2.202.466-1.el6_6.i686", "6Workstation-Supplementary-6.6.z:flash-plugin-0:11.2.202.466-1.el6_6.i686", ], }, ], threats: [ { category: "impact", details: "Critical", }, ], title: "flash-plugin: multiple code execution issues fixed in APSB15-11", }, { cve: "CVE-2015-3102", discovery_date: "2015-06-10T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1230189", }, ], notes: [ { category: "description", text: "Adobe Flash Player before 13.0.0.292 and 14.x through 18.x before 18.0.0.160 on Windows and OS X and before 11.2.202.466 on Linux, Adobe AIR before 18.0.0.144 on Windows and before 18.0.0.143 on OS X and Android, Adobe AIR SDK before 18.0.0.144 on Windows and before 18.0.0.143 on OS X, and Adobe AIR SDK & Compiler before 18.0.0.144 on Windows and before 18.0.0.143 on OS X allow remote attackers to bypass the Same Origin Policy via unspecified vectors, a different vulnerability than CVE-2015-3098 and CVE-2015-3099.", title: "Vulnerability description", }, { category: "summary", text: "flash-plugin: same-origin-policy bypass fixed in APSB15-11", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.466-1.el5.i386", "5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.466-1.el5.i386", "6Client-Supplementary-6.6.z:flash-plugin-0:11.2.202.466-1.el6_6.i686", "6Server-Supplementary-6.6.z:flash-plugin-0:11.2.202.466-1.el6_6.i686", "6Workstation-Supplementary-6.6.z:flash-plugin-0:11.2.202.466-1.el6_6.i686", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2015-3102", }, { category: "external", summary: "RHBZ#1230189", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1230189", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2015-3102", url: "https://www.cve.org/CVERecord?id=CVE-2015-3102", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2015-3102", url: "https://nvd.nist.gov/vuln/detail/CVE-2015-3102", }, { category: "external", summary: "https://helpx.adobe.com/security/products/flash-player/apsb15-11.html", url: "https://helpx.adobe.com/security/products/flash-player/apsb15-11.html", }, ], release_date: "2015-06-09T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2015-06-10T14:34:51+00:00", details: "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.466-1.el5.i386", "5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.466-1.el5.i386", "6Client-Supplementary-6.6.z:flash-plugin-0:11.2.202.466-1.el6_6.i686", "6Server-Supplementary-6.6.z:flash-plugin-0:11.2.202.466-1.el6_6.i686", "6Workstation-Supplementary-6.6.z:flash-plugin-0:11.2.202.466-1.el6_6.i686", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2015:1086", }, ], scores: [ { cvss_v2: { accessComplexity: "MEDIUM", accessVector: "NETWORK", authentication: "NONE", availabilityImpact: "NONE", baseScore: 4.3, confidentialityImpact: "PARTIAL", integrityImpact: "NONE", vectorString: "AV:N/AC:M/Au:N/C:P/I:N/A:N", version: "2.0", }, products: [ "5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.466-1.el5.i386", "5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.466-1.el5.i386", "6Client-Supplementary-6.6.z:flash-plugin-0:11.2.202.466-1.el6_6.i686", "6Server-Supplementary-6.6.z:flash-plugin-0:11.2.202.466-1.el6_6.i686", "6Workstation-Supplementary-6.6.z:flash-plugin-0:11.2.202.466-1.el6_6.i686", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "flash-plugin: same-origin-policy bypass fixed in APSB15-11", }, { cve: "CVE-2015-3103", discovery_date: "2015-06-09T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1229879", }, ], notes: [ { category: "description", text: "Use-after-free vulnerability in Adobe Flash Player before 13.0.0.292 and 14.x through 18.x before 18.0.0.160 on Windows and OS X and before 11.2.202.466 on Linux, Adobe AIR before 18.0.0.144 on Windows and before 18.0.0.143 on OS X and Android, Adobe AIR SDK before 18.0.0.144 on Windows and before 18.0.0.143 on OS X, and Adobe AIR SDK & Compiler before 18.0.0.144 on Windows and before 18.0.0.143 on OS X allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-3106 and CVE-2015-3107.", title: "Vulnerability description", }, { category: "summary", text: "flash-plugin: multiple code execution issues fixed in APSB15-11", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.466-1.el5.i386", "5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.466-1.el5.i386", "6Client-Supplementary-6.6.z:flash-plugin-0:11.2.202.466-1.el6_6.i686", "6Server-Supplementary-6.6.z:flash-plugin-0:11.2.202.466-1.el6_6.i686", "6Workstation-Supplementary-6.6.z:flash-plugin-0:11.2.202.466-1.el6_6.i686", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2015-3103", }, { category: "external", summary: "RHBZ#1229879", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1229879", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2015-3103", url: "https://www.cve.org/CVERecord?id=CVE-2015-3103", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2015-3103", url: "https://nvd.nist.gov/vuln/detail/CVE-2015-3103", }, { category: "external", summary: "https://helpx.adobe.com/security/products/flash-player/apsb15-11.html", url: "https://helpx.adobe.com/security/products/flash-player/apsb15-11.html", }, ], release_date: "2015-06-09T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2015-06-10T14:34:51+00:00", details: "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.466-1.el5.i386", "5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.466-1.el5.i386", "6Client-Supplementary-6.6.z:flash-plugin-0:11.2.202.466-1.el6_6.i686", "6Server-Supplementary-6.6.z:flash-plugin-0:11.2.202.466-1.el6_6.i686", "6Workstation-Supplementary-6.6.z:flash-plugin-0:11.2.202.466-1.el6_6.i686", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2015:1086", }, ], scores: [ { cvss_v2: { accessComplexity: "MEDIUM", accessVector: "NETWORK", authentication: "NONE", availabilityImpact: "PARTIAL", baseScore: 6.8, confidentialityImpact: "PARTIAL", integrityImpact: "PARTIAL", vectorString: "AV:N/AC:M/Au:N/C:P/I:P/A:P", version: "2.0", }, products: [ "5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.466-1.el5.i386", "5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.466-1.el5.i386", "6Client-Supplementary-6.6.z:flash-plugin-0:11.2.202.466-1.el6_6.i686", "6Server-Supplementary-6.6.z:flash-plugin-0:11.2.202.466-1.el6_6.i686", "6Workstation-Supplementary-6.6.z:flash-plugin-0:11.2.202.466-1.el6_6.i686", ], }, ], threats: [ { category: "impact", details: "Critical", }, ], title: "flash-plugin: multiple code execution issues fixed in APSB15-11", }, { cve: "CVE-2015-3104", discovery_date: "2015-06-09T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1229879", }, ], notes: [ { category: "description", text: "Integer overflow in Adobe Flash Player before 13.0.0.292 and 14.x through 18.x before 18.0.0.160 on Windows and OS X and before 11.2.202.466 on Linux, Adobe AIR before 18.0.0.144 on Windows and before 18.0.0.143 on OS X and Android, Adobe AIR SDK before 18.0.0.144 on Windows and before 18.0.0.143 on OS X, and Adobe AIR SDK & Compiler before 18.0.0.144 on Windows and before 18.0.0.143 on OS X allows attackers to execute arbitrary code via unspecified vectors.", title: "Vulnerability description", }, { category: "summary", text: "flash-plugin: multiple code execution issues fixed in APSB15-11", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.466-1.el5.i386", "5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.466-1.el5.i386", "6Client-Supplementary-6.6.z:flash-plugin-0:11.2.202.466-1.el6_6.i686", "6Server-Supplementary-6.6.z:flash-plugin-0:11.2.202.466-1.el6_6.i686", "6Workstation-Supplementary-6.6.z:flash-plugin-0:11.2.202.466-1.el6_6.i686", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2015-3104", }, { category: "external", summary: "RHBZ#1229879", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1229879", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2015-3104", url: "https://www.cve.org/CVERecord?id=CVE-2015-3104", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2015-3104", url: "https://nvd.nist.gov/vuln/detail/CVE-2015-3104", }, { category: "external", summary: "https://helpx.adobe.com/security/products/flash-player/apsb15-11.html", url: "https://helpx.adobe.com/security/products/flash-player/apsb15-11.html", }, ], release_date: "2015-06-09T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2015-06-10T14:34:51+00:00", details: "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.466-1.el5.i386", "5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.466-1.el5.i386", "6Client-Supplementary-6.6.z:flash-plugin-0:11.2.202.466-1.el6_6.i686", "6Server-Supplementary-6.6.z:flash-plugin-0:11.2.202.466-1.el6_6.i686", "6Workstation-Supplementary-6.6.z:flash-plugin-0:11.2.202.466-1.el6_6.i686", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2015:1086", }, ], scores: [ { cvss_v2: { accessComplexity: "MEDIUM", accessVector: "NETWORK", authentication: "NONE", availabilityImpact: "PARTIAL", baseScore: 6.8, confidentialityImpact: "PARTIAL", integrityImpact: "PARTIAL", vectorString: "AV:N/AC:M/Au:N/C:P/I:P/A:P", version: "2.0", }, products: [ "5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.466-1.el5.i386", "5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.466-1.el5.i386", "6Client-Supplementary-6.6.z:flash-plugin-0:11.2.202.466-1.el6_6.i686", "6Server-Supplementary-6.6.z:flash-plugin-0:11.2.202.466-1.el6_6.i686", "6Workstation-Supplementary-6.6.z:flash-plugin-0:11.2.202.466-1.el6_6.i686", ], }, ], threats: [ { category: "impact", details: "Critical", }, ], title: "flash-plugin: multiple code execution issues fixed in APSB15-11", }, { cve: "CVE-2015-3105", discovery_date: "2015-06-09T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1229879", }, ], notes: [ { category: "description", text: "Adobe Flash Player before 13.0.0.292 and 14.x through 18.x before 18.0.0.160 on Windows and OS X and before 11.2.202.466 on Linux, Adobe AIR before 18.0.0.144 on Windows and before 18.0.0.143 on OS X and Android, Adobe AIR SDK before 18.0.0.144 on Windows and before 18.0.0.143 on OS X, and Adobe AIR SDK & Compiler before 18.0.0.144 on Windows and before 18.0.0.143 on OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.", title: "Vulnerability description", }, { category: "summary", text: "flash-plugin: multiple code execution issues fixed in APSB15-11", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.466-1.el5.i386", "5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.466-1.el5.i386", "6Client-Supplementary-6.6.z:flash-plugin-0:11.2.202.466-1.el6_6.i686", "6Server-Supplementary-6.6.z:flash-plugin-0:11.2.202.466-1.el6_6.i686", "6Workstation-Supplementary-6.6.z:flash-plugin-0:11.2.202.466-1.el6_6.i686", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2015-3105", }, { category: "external", summary: "RHBZ#1229879", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1229879", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2015-3105", url: "https://www.cve.org/CVERecord?id=CVE-2015-3105", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2015-3105", url: "https://nvd.nist.gov/vuln/detail/CVE-2015-3105", }, { category: "external", summary: "https://helpx.adobe.com/security/products/flash-player/apsb15-11.html", url: "https://helpx.adobe.com/security/products/flash-player/apsb15-11.html", }, ], release_date: "2015-06-09T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2015-06-10T14:34:51+00:00", details: "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.466-1.el5.i386", "5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.466-1.el5.i386", "6Client-Supplementary-6.6.z:flash-plugin-0:11.2.202.466-1.el6_6.i686", "6Server-Supplementary-6.6.z:flash-plugin-0:11.2.202.466-1.el6_6.i686", "6Workstation-Supplementary-6.6.z:flash-plugin-0:11.2.202.466-1.el6_6.i686", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2015:1086", }, ], scores: [ { cvss_v2: { accessComplexity: "MEDIUM", accessVector: "NETWORK", authentication: "NONE", availabilityImpact: "PARTIAL", baseScore: 6.8, confidentialityImpact: "PARTIAL", integrityImpact: "PARTIAL", vectorString: "AV:N/AC:M/Au:N/C:P/I:P/A:P", version: "2.0", }, products: [ "5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.466-1.el5.i386", "5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.466-1.el5.i386", "6Client-Supplementary-6.6.z:flash-plugin-0:11.2.202.466-1.el6_6.i686", "6Server-Supplementary-6.6.z:flash-plugin-0:11.2.202.466-1.el6_6.i686", "6Workstation-Supplementary-6.6.z:flash-plugin-0:11.2.202.466-1.el6_6.i686", ], }, ], threats: [ { category: "impact", details: "Critical", }, ], title: "flash-plugin: multiple code execution issues fixed in APSB15-11", }, { cve: "CVE-2015-3106", discovery_date: "2015-06-09T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1229879", }, ], notes: [ { category: "description", text: "Use-after-free vulnerability in Adobe Flash Player before 13.0.0.292 and 14.x through 18.x before 18.0.0.160 on Windows and OS X and before 11.2.202.466 on Linux, Adobe AIR before 18.0.0.144 on Windows and before 18.0.0.143 on OS X and Android, Adobe AIR SDK before 18.0.0.144 on Windows and before 18.0.0.143 on OS X, and Adobe AIR SDK & Compiler before 18.0.0.144 on Windows and before 18.0.0.143 on OS X allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-3103 and CVE-2015-3107.", title: "Vulnerability description", }, { category: "summary", text: "flash-plugin: multiple code execution issues fixed in APSB15-11", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.466-1.el5.i386", "5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.466-1.el5.i386", "6Client-Supplementary-6.6.z:flash-plugin-0:11.2.202.466-1.el6_6.i686", "6Server-Supplementary-6.6.z:flash-plugin-0:11.2.202.466-1.el6_6.i686", "6Workstation-Supplementary-6.6.z:flash-plugin-0:11.2.202.466-1.el6_6.i686", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2015-3106", }, { category: "external", summary: "RHBZ#1229879", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1229879", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2015-3106", url: "https://www.cve.org/CVERecord?id=CVE-2015-3106", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2015-3106", url: "https://nvd.nist.gov/vuln/detail/CVE-2015-3106", }, { category: "external", summary: "https://helpx.adobe.com/security/products/flash-player/apsb15-11.html", url: "https://helpx.adobe.com/security/products/flash-player/apsb15-11.html", }, ], release_date: "2015-06-09T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2015-06-10T14:34:51+00:00", details: "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.466-1.el5.i386", "5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.466-1.el5.i386", "6Client-Supplementary-6.6.z:flash-plugin-0:11.2.202.466-1.el6_6.i686", "6Server-Supplementary-6.6.z:flash-plugin-0:11.2.202.466-1.el6_6.i686", "6Workstation-Supplementary-6.6.z:flash-plugin-0:11.2.202.466-1.el6_6.i686", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2015:1086", }, ], scores: [ { cvss_v2: { accessComplexity: "MEDIUM", accessVector: "NETWORK", authentication: "NONE", availabilityImpact: "PARTIAL", baseScore: 6.8, confidentialityImpact: "PARTIAL", integrityImpact: "PARTIAL", vectorString: "AV:N/AC:M/Au:N/C:P/I:P/A:P", version: "2.0", }, products: [ "5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.466-1.el5.i386", "5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.466-1.el5.i386", "6Client-Supplementary-6.6.z:flash-plugin-0:11.2.202.466-1.el6_6.i686", "6Server-Supplementary-6.6.z:flash-plugin-0:11.2.202.466-1.el6_6.i686", "6Workstation-Supplementary-6.6.z:flash-plugin-0:11.2.202.466-1.el6_6.i686", ], }, ], threats: [ { category: "impact", details: "Critical", }, ], title: "flash-plugin: multiple code execution issues fixed in APSB15-11", }, { cve: "CVE-2015-3107", discovery_date: "2015-06-09T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1229879", }, ], notes: [ { category: "description", text: "Use-after-free vulnerability in Adobe Flash Player before 13.0.0.292 and 14.x through 18.x before 18.0.0.160 on Windows and OS X and before 11.2.202.466 on Linux, Adobe AIR before 18.0.0.144 on Windows and before 18.0.0.143 on OS X and Android, Adobe AIR SDK before 18.0.0.144 on Windows and before 18.0.0.143 on OS X, and Adobe AIR SDK & Compiler before 18.0.0.144 on Windows and before 18.0.0.143 on OS X allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-3103 and CVE-2015-3106.", title: "Vulnerability description", }, { category: "summary", text: "flash-plugin: multiple code execution issues fixed in APSB15-11", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.466-1.el5.i386", "5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.466-1.el5.i386", "6Client-Supplementary-6.6.z:flash-plugin-0:11.2.202.466-1.el6_6.i686", "6Server-Supplementary-6.6.z:flash-plugin-0:11.2.202.466-1.el6_6.i686", "6Workstation-Supplementary-6.6.z:flash-plugin-0:11.2.202.466-1.el6_6.i686", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2015-3107", }, { category: "external", summary: "RHBZ#1229879", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1229879", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2015-3107", url: "https://www.cve.org/CVERecord?id=CVE-2015-3107", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2015-3107", url: "https://nvd.nist.gov/vuln/detail/CVE-2015-3107", }, { category: "external", summary: "https://helpx.adobe.com/security/products/flash-player/apsb15-11.html", url: "https://helpx.adobe.com/security/products/flash-player/apsb15-11.html", }, ], release_date: "2015-06-09T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2015-06-10T14:34:51+00:00", details: "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.466-1.el5.i386", "5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.466-1.el5.i386", "6Client-Supplementary-6.6.z:flash-plugin-0:11.2.202.466-1.el6_6.i686", "6Server-Supplementary-6.6.z:flash-plugin-0:11.2.202.466-1.el6_6.i686", "6Workstation-Supplementary-6.6.z:flash-plugin-0:11.2.202.466-1.el6_6.i686", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2015:1086", }, ], scores: [ { cvss_v2: { accessComplexity: "MEDIUM", accessVector: "NETWORK", authentication: "NONE", availabilityImpact: "PARTIAL", baseScore: 6.8, confidentialityImpact: "PARTIAL", integrityImpact: "PARTIAL", vectorString: "AV:N/AC:M/Au:N/C:P/I:P/A:P", version: "2.0", }, products: [ "5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.466-1.el5.i386", "5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.466-1.el5.i386", "6Client-Supplementary-6.6.z:flash-plugin-0:11.2.202.466-1.el6_6.i686", "6Server-Supplementary-6.6.z:flash-plugin-0:11.2.202.466-1.el6_6.i686", "6Workstation-Supplementary-6.6.z:flash-plugin-0:11.2.202.466-1.el6_6.i686", ], }, ], threats: [ { category: "impact", details: "Critical", }, ], title: "flash-plugin: multiple code execution issues fixed in APSB15-11", }, { cve: "CVE-2015-3108", discovery_date: "2015-06-10T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1230201", }, ], notes: [ { category: "description", text: "Adobe Flash Player before 13.0.0.292 and 14.x through 18.x before 18.0.0.160 on Windows and OS X and before 11.2.202.466 on Linux, Adobe AIR before 18.0.0.144 on Windows and before 18.0.0.143 on OS X and Android, Adobe AIR SDK before 18.0.0.144 on Windows and before 18.0.0.143 on OS X, and Adobe AIR SDK & Compiler before 18.0.0.144 on Windows and before 18.0.0.143 on OS X do not properly restrict discovery of memory addresses, which allows attackers to bypass the ASLR protection mechanism via unspecified vectors.", title: "Vulnerability description", }, { category: "summary", text: "flash-plugin: information leak leading to ASLR bypass (APSB15-11)", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.466-1.el5.i386", "5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.466-1.el5.i386", "6Client-Supplementary-6.6.z:flash-plugin-0:11.2.202.466-1.el6_6.i686", "6Server-Supplementary-6.6.z:flash-plugin-0:11.2.202.466-1.el6_6.i686", "6Workstation-Supplementary-6.6.z:flash-plugin-0:11.2.202.466-1.el6_6.i686", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2015-3108", }, { category: "external", summary: "RHBZ#1230201", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1230201", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2015-3108", url: "https://www.cve.org/CVERecord?id=CVE-2015-3108", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2015-3108", url: "https://nvd.nist.gov/vuln/detail/CVE-2015-3108", }, { category: "external", summary: "https://helpx.adobe.com/security/products/flash-player/apsb15-11.html", url: "https://helpx.adobe.com/security/products/flash-player/apsb15-11.html", }, ], release_date: "2015-06-09T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2015-06-10T14:34:51+00:00", details: "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.466-1.el5.i386", "5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.466-1.el5.i386", "6Client-Supplementary-6.6.z:flash-plugin-0:11.2.202.466-1.el6_6.i686", "6Server-Supplementary-6.6.z:flash-plugin-0:11.2.202.466-1.el6_6.i686", "6Workstation-Supplementary-6.6.z:flash-plugin-0:11.2.202.466-1.el6_6.i686", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2015:1086", }, ], scores: [ { cvss_v2: { accessComplexity: "MEDIUM", accessVector: "NETWORK", authentication: "NONE", availabilityImpact: "NONE", baseScore: 4.3, confidentialityImpact: "PARTIAL", integrityImpact: "NONE", vectorString: "AV:N/AC:M/Au:N/C:P/I:N/A:N", version: "2.0", }, products: [ "5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.466-1.el5.i386", "5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.466-1.el5.i386", "6Client-Supplementary-6.6.z:flash-plugin-0:11.2.202.466-1.el6_6.i686", "6Server-Supplementary-6.6.z:flash-plugin-0:11.2.202.466-1.el6_6.i686", "6Workstation-Supplementary-6.6.z:flash-plugin-0:11.2.202.466-1.el6_6.i686", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "flash-plugin: information leak leading to ASLR bypass (APSB15-11)", }, ], }
rhsa-2015_1086
Vulnerability from csaf_redhat
Notes
{ document: { aggregate_severity: { namespace: "https://access.redhat.com/security/updates/classification/", text: "Critical", }, category: "csaf_security_advisory", csaf_version: "2.0", distribution: { text: "Copyright © Red Hat, Inc. All rights reserved.", tlp: { label: "WHITE", url: "https://www.first.org/tlp/", }, }, lang: "en", notes: [ { category: "summary", text: "An updated Adobe Flash Player package that fixes multiple security issues\nis now available for Red Hat Enterprise Linux 5 and 6 Supplementary.\n\nRed Hat Product Security has rated this update as having Critical security\nimpact. Common Vulnerability Scoring System (CVSS) base scores, which give\ndetailed severity ratings, are available for each vulnerability from the\nCVE links in the References section.", title: "Topic", }, { category: "general", text: "The flash-plugin package contains a Mozilla Firefox compatible Adobe Flash\nPlayer web browser plug-in.\n\nThis update fixes multiple vulnerabilities in Adobe Flash Player. These\nvulnerabilities are detailed in the Adobe Security Bulletin APSB15-11\nlisted in the References section.\n\nMultiple flaws were found in the way flash-plugin displayed certain SWF\ncontent. An attacker could use these flaws to create a specially crafted\nSWF file that would cause flash-plugin to crash or, potentially, execute\narbitrary code when the victim loaded a page containing the malicious SWF\ncontent. (CVE-2015-3100, CVE-2015-3103, CVE-2015-3104, CVE-2015-3105,\nCVE-2015-3106, CVE-2015-3107)\n\nMultiple security bypass flaws were found in flash-plugin that could lead\nto the disclosure of sensitive information. (CVE-2015-3096, CVE-2015-3098,\nCVE-2015-3099, CVE-2015-3102)\n\nA memory information leak flaw was found in flash-plugin that could\nallow an attacker to potentially bypass ASLR (Address Space Layout\nRandomization) protection, and make it easier to exploit other flaws.\n(CVE-2015-3108)\n\nAll users of Adobe Flash Player should install this updated package, which\nupgrades Flash Player to version 11.2.202.466.", title: "Details", }, { category: "legal_disclaimer", text: "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", title: "Terms of Use", }, ], publisher: { category: "vendor", contact_details: "https://access.redhat.com/security/team/contact/", issuing_authority: "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", name: "Red Hat Product Security", namespace: "https://www.redhat.com", }, references: [ { category: "self", summary: "https://access.redhat.com/errata/RHSA-2015:1086", url: "https://access.redhat.com/errata/RHSA-2015:1086", }, { category: "external", summary: "https://access.redhat.com/security/updates/classification/#critical", url: "https://access.redhat.com/security/updates/classification/#critical", }, { category: "external", summary: "https://helpx.adobe.com/security/products/flash-player/apsb15-11.html", url: "https://helpx.adobe.com/security/products/flash-player/apsb15-11.html", }, { category: "external", summary: "1229879", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1229879", }, { category: "external", summary: "1230185", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1230185", }, { category: "external", summary: "1230189", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1230189", }, { category: "external", summary: "1230201", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1230201", }, { category: "self", summary: "Canonical URL", url: "https://security.access.redhat.com/data/csaf/v2/advisories/2015/rhsa-2015_1086.json", }, ], title: "Red Hat Security Advisory: flash-plugin security update", tracking: { current_release_date: "2024-11-14T18:09:46+00:00", generator: { date: "2024-11-14T18:09:46+00:00", engine: { name: "Red Hat SDEngine", version: "4.2.0", }, }, id: "RHSA-2015:1086", initial_release_date: "2015-06-10T14:34:51+00:00", revision_history: [ { date: "2015-06-10T14:34:51+00:00", number: "1", summary: "Initial version", }, { date: "2015-06-10T14:34:51+00:00", number: "2", summary: "Last updated version", }, { date: "2024-11-14T18:09:46+00:00", number: "3", summary: "Last generated version", }, ], status: "final", version: "3", }, }, product_tree: { branches: [ { branches: [ { branches: [ { category: "product_name", name: "Red Hat Enterprise Linux Desktop Supplementary (v. 5)", product: { name: "Red Hat Enterprise Linux Desktop Supplementary (v. 5)", product_id: "5Client-Supplementary-5.11.Z", product_identification_helper: { cpe: "cpe:/a:redhat:rhel_extras:5::client", }, }, }, { category: "product_name", name: "Red Hat Enterprise Linux Server Supplementary (v. 5)", product: { name: "Red Hat Enterprise Linux Server Supplementary (v. 5)", product_id: "5Server-Supplementary-5.11.Z", product_identification_helper: { cpe: "cpe:/a:redhat:rhel_extras:5::server", }, }, }, { category: "product_name", name: "Red Hat Enterprise Linux Desktop Supplementary (v. 6)", product: { name: "Red Hat Enterprise Linux Desktop Supplementary (v. 6)", product_id: "6Client-Supplementary-6.6.z", product_identification_helper: { cpe: "cpe:/a:redhat:rhel_extras:6", }, }, }, { category: "product_name", name: "Red Hat Enterprise Linux Server Supplementary (v. 6)", product: { name: "Red Hat Enterprise Linux Server Supplementary (v. 6)", product_id: "6Server-Supplementary-6.6.z", product_identification_helper: { cpe: "cpe:/a:redhat:rhel_extras:6", }, }, }, { category: "product_name", name: "Red Hat Enterprise Linux Workstation Supplementary (v. 6)", product: { name: "Red Hat Enterprise Linux Workstation Supplementary (v. 6)", product_id: "6Workstation-Supplementary-6.6.z", product_identification_helper: { cpe: "cpe:/a:redhat:rhel_extras:6", }, }, }, ], category: "product_family", name: "Red Hat Enterprise Linux Supplementary", }, { branches: [ { category: "product_version", name: "flash-plugin-0:11.2.202.466-1.el5.i386", product: { name: "flash-plugin-0:11.2.202.466-1.el5.i386", product_id: "flash-plugin-0:11.2.202.466-1.el5.i386", product_identification_helper: { purl: "pkg:rpm/redhat/flash-plugin@11.2.202.466-1.el5?arch=i386", }, }, }, ], category: "architecture", name: "i386", }, { branches: [ { category: "product_version", name: "flash-plugin-0:11.2.202.466-1.el6_6.i686", product: { name: "flash-plugin-0:11.2.202.466-1.el6_6.i686", product_id: "flash-plugin-0:11.2.202.466-1.el6_6.i686", product_identification_helper: { purl: "pkg:rpm/redhat/flash-plugin@11.2.202.466-1.el6_6?arch=i686", }, }, }, ], category: "architecture", name: "i686", }, ], category: "vendor", name: "Red Hat", }, ], relationships: [ { category: "default_component_of", full_product_name: { name: "flash-plugin-0:11.2.202.466-1.el5.i386 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 5)", product_id: "5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.466-1.el5.i386", }, product_reference: "flash-plugin-0:11.2.202.466-1.el5.i386", relates_to_product_reference: "5Client-Supplementary-5.11.Z", }, { category: "default_component_of", full_product_name: { name: "flash-plugin-0:11.2.202.466-1.el5.i386 as a component of Red Hat Enterprise Linux Server Supplementary (v. 5)", product_id: "5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.466-1.el5.i386", }, product_reference: "flash-plugin-0:11.2.202.466-1.el5.i386", relates_to_product_reference: "5Server-Supplementary-5.11.Z", }, { category: "default_component_of", full_product_name: { name: "flash-plugin-0:11.2.202.466-1.el6_6.i686 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)", product_id: "6Client-Supplementary-6.6.z:flash-plugin-0:11.2.202.466-1.el6_6.i686", }, product_reference: "flash-plugin-0:11.2.202.466-1.el6_6.i686", relates_to_product_reference: "6Client-Supplementary-6.6.z", }, { category: "default_component_of", full_product_name: { name: "flash-plugin-0:11.2.202.466-1.el6_6.i686 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)", product_id: "6Server-Supplementary-6.6.z:flash-plugin-0:11.2.202.466-1.el6_6.i686", }, product_reference: "flash-plugin-0:11.2.202.466-1.el6_6.i686", relates_to_product_reference: "6Server-Supplementary-6.6.z", }, { category: "default_component_of", full_product_name: { name: "flash-plugin-0:11.2.202.466-1.el6_6.i686 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)", product_id: "6Workstation-Supplementary-6.6.z:flash-plugin-0:11.2.202.466-1.el6_6.i686", }, product_reference: "flash-plugin-0:11.2.202.466-1.el6_6.i686", relates_to_product_reference: "6Workstation-Supplementary-6.6.z", }, ], }, vulnerabilities: [ { cve: "CVE-2015-3096", cwe: { id: "CWE-352", name: "Cross-Site Request Forgery (CSRF)", }, discovery_date: "2015-06-10T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1230185", }, ], notes: [ { category: "description", text: "Adobe Flash Player before 13.0.0.292 and 14.x through 18.x before 18.0.0.160 on Windows and OS X and before 11.2.202.466 on Linux, Adobe AIR before 18.0.0.144 on Windows and before 18.0.0.143 on OS X and Android, Adobe AIR SDK before 18.0.0.144 on Windows and before 18.0.0.143 on OS X, and Adobe AIR SDK & Compiler before 18.0.0.144 on Windows and before 18.0.0.143 on OS X allow remote attackers to bypass a CVE-2014-5333 protection mechanism via unspecified vectors.", title: "Vulnerability description", }, { category: "summary", text: "flash-plugin: cross-site request forgery against JSONP endpoints fixed in APSB15-11 (incomplete fix for CVE-2014-5333)", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.466-1.el5.i386", "5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.466-1.el5.i386", "6Client-Supplementary-6.6.z:flash-plugin-0:11.2.202.466-1.el6_6.i686", "6Server-Supplementary-6.6.z:flash-plugin-0:11.2.202.466-1.el6_6.i686", "6Workstation-Supplementary-6.6.z:flash-plugin-0:11.2.202.466-1.el6_6.i686", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2015-3096", }, { category: "external", summary: "RHBZ#1230185", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1230185", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2015-3096", url: "https://www.cve.org/CVERecord?id=CVE-2015-3096", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2015-3096", url: "https://nvd.nist.gov/vuln/detail/CVE-2015-3096", }, { category: "external", summary: "https://helpx.adobe.com/security/products/flash-player/apsb15-11.html", url: "https://helpx.adobe.com/security/products/flash-player/apsb15-11.html", }, ], release_date: "2015-06-09T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2015-06-10T14:34:51+00:00", details: "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.466-1.el5.i386", "5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.466-1.el5.i386", "6Client-Supplementary-6.6.z:flash-plugin-0:11.2.202.466-1.el6_6.i686", "6Server-Supplementary-6.6.z:flash-plugin-0:11.2.202.466-1.el6_6.i686", "6Workstation-Supplementary-6.6.z:flash-plugin-0:11.2.202.466-1.el6_6.i686", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2015:1086", }, ], scores: [ { cvss_v2: { accessComplexity: "MEDIUM", accessVector: "NETWORK", authentication: "NONE", availabilityImpact: "NONE", baseScore: 4.3, confidentialityImpact: "NONE", integrityImpact: "PARTIAL", vectorString: "AV:N/AC:M/Au:N/C:N/I:P/A:N", version: "2.0", }, products: [ "5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.466-1.el5.i386", "5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.466-1.el5.i386", "6Client-Supplementary-6.6.z:flash-plugin-0:11.2.202.466-1.el6_6.i686", "6Server-Supplementary-6.6.z:flash-plugin-0:11.2.202.466-1.el6_6.i686", "6Workstation-Supplementary-6.6.z:flash-plugin-0:11.2.202.466-1.el6_6.i686", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "flash-plugin: cross-site request forgery against JSONP endpoints fixed in APSB15-11 (incomplete fix for CVE-2014-5333)", }, { cve: "CVE-2015-3098", discovery_date: "2015-06-10T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1230189", }, ], notes: [ { category: "description", text: "Adobe Flash Player before 13.0.0.292 and 14.x through 18.x before 18.0.0.160 on Windows and OS X and before 11.2.202.466 on Linux, Adobe AIR before 18.0.0.144 on Windows and before 18.0.0.143 on OS X and Android, Adobe AIR SDK before 18.0.0.144 on Windows and before 18.0.0.143 on OS X, and Adobe AIR SDK & Compiler before 18.0.0.144 on Windows and before 18.0.0.143 on OS X allow remote attackers to bypass the Same Origin Policy via unspecified vectors, a different vulnerability than CVE-2015-3099 and CVE-2015-3102.", title: "Vulnerability description", }, { category: "summary", text: "flash-plugin: same-origin-policy bypass fixed in APSB15-11", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.466-1.el5.i386", "5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.466-1.el5.i386", "6Client-Supplementary-6.6.z:flash-plugin-0:11.2.202.466-1.el6_6.i686", "6Server-Supplementary-6.6.z:flash-plugin-0:11.2.202.466-1.el6_6.i686", "6Workstation-Supplementary-6.6.z:flash-plugin-0:11.2.202.466-1.el6_6.i686", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2015-3098", }, { category: "external", summary: "RHBZ#1230189", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1230189", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2015-3098", url: "https://www.cve.org/CVERecord?id=CVE-2015-3098", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2015-3098", url: "https://nvd.nist.gov/vuln/detail/CVE-2015-3098", }, { category: "external", summary: "https://helpx.adobe.com/security/products/flash-player/apsb15-11.html", url: "https://helpx.adobe.com/security/products/flash-player/apsb15-11.html", }, ], release_date: "2015-06-09T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2015-06-10T14:34:51+00:00", details: "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.466-1.el5.i386", "5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.466-1.el5.i386", "6Client-Supplementary-6.6.z:flash-plugin-0:11.2.202.466-1.el6_6.i686", "6Server-Supplementary-6.6.z:flash-plugin-0:11.2.202.466-1.el6_6.i686", "6Workstation-Supplementary-6.6.z:flash-plugin-0:11.2.202.466-1.el6_6.i686", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2015:1086", }, ], scores: [ { cvss_v2: { accessComplexity: "MEDIUM", accessVector: "NETWORK", authentication: "NONE", availabilityImpact: "NONE", baseScore: 4.3, confidentialityImpact: "PARTIAL", integrityImpact: "NONE", vectorString: "AV:N/AC:M/Au:N/C:P/I:N/A:N", version: "2.0", }, products: [ "5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.466-1.el5.i386", "5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.466-1.el5.i386", "6Client-Supplementary-6.6.z:flash-plugin-0:11.2.202.466-1.el6_6.i686", "6Server-Supplementary-6.6.z:flash-plugin-0:11.2.202.466-1.el6_6.i686", "6Workstation-Supplementary-6.6.z:flash-plugin-0:11.2.202.466-1.el6_6.i686", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "flash-plugin: same-origin-policy bypass fixed in APSB15-11", }, { cve: "CVE-2015-3099", discovery_date: "2015-06-10T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1230189", }, ], notes: [ { category: "description", text: "Adobe Flash Player before 13.0.0.292 and 14.x through 18.x before 18.0.0.160 on Windows and OS X and before 11.2.202.466 on Linux, Adobe AIR before 18.0.0.144 on Windows and before 18.0.0.143 on OS X and Android, Adobe AIR SDK before 18.0.0.144 on Windows and before 18.0.0.143 on OS X, and Adobe AIR SDK & Compiler before 18.0.0.144 on Windows and before 18.0.0.143 on OS X allow remote attackers to bypass the Same Origin Policy via unspecified vectors, a different vulnerability than CVE-2015-3098 and CVE-2015-3102.", title: "Vulnerability description", }, { category: "summary", text: "flash-plugin: same-origin-policy bypass fixed in APSB15-11", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.466-1.el5.i386", "5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.466-1.el5.i386", "6Client-Supplementary-6.6.z:flash-plugin-0:11.2.202.466-1.el6_6.i686", "6Server-Supplementary-6.6.z:flash-plugin-0:11.2.202.466-1.el6_6.i686", "6Workstation-Supplementary-6.6.z:flash-plugin-0:11.2.202.466-1.el6_6.i686", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2015-3099", }, { category: "external", summary: "RHBZ#1230189", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1230189", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2015-3099", url: "https://www.cve.org/CVERecord?id=CVE-2015-3099", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2015-3099", url: "https://nvd.nist.gov/vuln/detail/CVE-2015-3099", }, { category: "external", summary: "https://helpx.adobe.com/security/products/flash-player/apsb15-11.html", url: "https://helpx.adobe.com/security/products/flash-player/apsb15-11.html", }, ], release_date: "2015-06-09T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2015-06-10T14:34:51+00:00", details: "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.466-1.el5.i386", "5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.466-1.el5.i386", "6Client-Supplementary-6.6.z:flash-plugin-0:11.2.202.466-1.el6_6.i686", "6Server-Supplementary-6.6.z:flash-plugin-0:11.2.202.466-1.el6_6.i686", "6Workstation-Supplementary-6.6.z:flash-plugin-0:11.2.202.466-1.el6_6.i686", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2015:1086", }, ], scores: [ { cvss_v2: { accessComplexity: "MEDIUM", accessVector: "NETWORK", authentication: "NONE", availabilityImpact: "NONE", baseScore: 4.3, confidentialityImpact: "PARTIAL", integrityImpact: "NONE", vectorString: "AV:N/AC:M/Au:N/C:P/I:N/A:N", version: "2.0", }, products: [ "5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.466-1.el5.i386", "5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.466-1.el5.i386", "6Client-Supplementary-6.6.z:flash-plugin-0:11.2.202.466-1.el6_6.i686", "6Server-Supplementary-6.6.z:flash-plugin-0:11.2.202.466-1.el6_6.i686", "6Workstation-Supplementary-6.6.z:flash-plugin-0:11.2.202.466-1.el6_6.i686", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "flash-plugin: same-origin-policy bypass fixed in APSB15-11", }, { cve: "CVE-2015-3100", discovery_date: "2015-06-09T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1229879", }, ], notes: [ { category: "description", text: "Stack-based buffer overflow in Adobe Flash Player before 13.0.0.292 and 14.x through 18.x before 18.0.0.160 on Windows and OS X and before 11.2.202.466 on Linux, Adobe AIR before 18.0.0.144 on Windows and before 18.0.0.143 on OS X and Android, Adobe AIR SDK before 18.0.0.144 on Windows and before 18.0.0.143 on OS X, and Adobe AIR SDK & Compiler before 18.0.0.144 on Windows and before 18.0.0.143 on OS X allows attackers to execute arbitrary code via unspecified vectors.", title: "Vulnerability description", }, { category: "summary", text: "flash-plugin: multiple code execution issues fixed in APSB15-11", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.466-1.el5.i386", "5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.466-1.el5.i386", "6Client-Supplementary-6.6.z:flash-plugin-0:11.2.202.466-1.el6_6.i686", "6Server-Supplementary-6.6.z:flash-plugin-0:11.2.202.466-1.el6_6.i686", "6Workstation-Supplementary-6.6.z:flash-plugin-0:11.2.202.466-1.el6_6.i686", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2015-3100", }, { category: "external", summary: "RHBZ#1229879", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1229879", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2015-3100", url: "https://www.cve.org/CVERecord?id=CVE-2015-3100", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2015-3100", url: "https://nvd.nist.gov/vuln/detail/CVE-2015-3100", }, { category: "external", summary: "https://helpx.adobe.com/security/products/flash-player/apsb15-11.html", url: "https://helpx.adobe.com/security/products/flash-player/apsb15-11.html", }, ], release_date: "2015-06-09T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2015-06-10T14:34:51+00:00", details: "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.466-1.el5.i386", "5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.466-1.el5.i386", "6Client-Supplementary-6.6.z:flash-plugin-0:11.2.202.466-1.el6_6.i686", "6Server-Supplementary-6.6.z:flash-plugin-0:11.2.202.466-1.el6_6.i686", "6Workstation-Supplementary-6.6.z:flash-plugin-0:11.2.202.466-1.el6_6.i686", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2015:1086", }, ], scores: [ { cvss_v2: { accessComplexity: "MEDIUM", accessVector: "NETWORK", authentication: "NONE", availabilityImpact: "PARTIAL", baseScore: 6.8, confidentialityImpact: "PARTIAL", integrityImpact: "PARTIAL", vectorString: "AV:N/AC:M/Au:N/C:P/I:P/A:P", version: "2.0", }, products: [ "5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.466-1.el5.i386", "5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.466-1.el5.i386", "6Client-Supplementary-6.6.z:flash-plugin-0:11.2.202.466-1.el6_6.i686", "6Server-Supplementary-6.6.z:flash-plugin-0:11.2.202.466-1.el6_6.i686", "6Workstation-Supplementary-6.6.z:flash-plugin-0:11.2.202.466-1.el6_6.i686", ], }, ], threats: [ { category: "impact", details: "Critical", }, ], title: "flash-plugin: multiple code execution issues fixed in APSB15-11", }, { cve: "CVE-2015-3102", discovery_date: "2015-06-10T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1230189", }, ], notes: [ { category: "description", text: "Adobe Flash Player before 13.0.0.292 and 14.x through 18.x before 18.0.0.160 on Windows and OS X and before 11.2.202.466 on Linux, Adobe AIR before 18.0.0.144 on Windows and before 18.0.0.143 on OS X and Android, Adobe AIR SDK before 18.0.0.144 on Windows and before 18.0.0.143 on OS X, and Adobe AIR SDK & Compiler before 18.0.0.144 on Windows and before 18.0.0.143 on OS X allow remote attackers to bypass the Same Origin Policy via unspecified vectors, a different vulnerability than CVE-2015-3098 and CVE-2015-3099.", title: "Vulnerability description", }, { category: "summary", text: "flash-plugin: same-origin-policy bypass fixed in APSB15-11", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.466-1.el5.i386", "5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.466-1.el5.i386", "6Client-Supplementary-6.6.z:flash-plugin-0:11.2.202.466-1.el6_6.i686", "6Server-Supplementary-6.6.z:flash-plugin-0:11.2.202.466-1.el6_6.i686", "6Workstation-Supplementary-6.6.z:flash-plugin-0:11.2.202.466-1.el6_6.i686", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2015-3102", }, { category: "external", summary: "RHBZ#1230189", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1230189", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2015-3102", url: "https://www.cve.org/CVERecord?id=CVE-2015-3102", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2015-3102", url: "https://nvd.nist.gov/vuln/detail/CVE-2015-3102", }, { category: "external", summary: "https://helpx.adobe.com/security/products/flash-player/apsb15-11.html", url: "https://helpx.adobe.com/security/products/flash-player/apsb15-11.html", }, ], release_date: "2015-06-09T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2015-06-10T14:34:51+00:00", details: "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.466-1.el5.i386", "5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.466-1.el5.i386", "6Client-Supplementary-6.6.z:flash-plugin-0:11.2.202.466-1.el6_6.i686", "6Server-Supplementary-6.6.z:flash-plugin-0:11.2.202.466-1.el6_6.i686", "6Workstation-Supplementary-6.6.z:flash-plugin-0:11.2.202.466-1.el6_6.i686", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2015:1086", }, ], scores: [ { cvss_v2: { accessComplexity: "MEDIUM", accessVector: "NETWORK", authentication: "NONE", availabilityImpact: "NONE", baseScore: 4.3, confidentialityImpact: "PARTIAL", integrityImpact: "NONE", vectorString: "AV:N/AC:M/Au:N/C:P/I:N/A:N", version: "2.0", }, products: [ "5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.466-1.el5.i386", "5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.466-1.el5.i386", "6Client-Supplementary-6.6.z:flash-plugin-0:11.2.202.466-1.el6_6.i686", "6Server-Supplementary-6.6.z:flash-plugin-0:11.2.202.466-1.el6_6.i686", "6Workstation-Supplementary-6.6.z:flash-plugin-0:11.2.202.466-1.el6_6.i686", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "flash-plugin: same-origin-policy bypass fixed in APSB15-11", }, { cve: "CVE-2015-3103", discovery_date: "2015-06-09T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1229879", }, ], notes: [ { category: "description", text: "Use-after-free vulnerability in Adobe Flash Player before 13.0.0.292 and 14.x through 18.x before 18.0.0.160 on Windows and OS X and before 11.2.202.466 on Linux, Adobe AIR before 18.0.0.144 on Windows and before 18.0.0.143 on OS X and Android, Adobe AIR SDK before 18.0.0.144 on Windows and before 18.0.0.143 on OS X, and Adobe AIR SDK & Compiler before 18.0.0.144 on Windows and before 18.0.0.143 on OS X allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-3106 and CVE-2015-3107.", title: "Vulnerability description", }, { category: "summary", text: "flash-plugin: multiple code execution issues fixed in APSB15-11", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.466-1.el5.i386", "5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.466-1.el5.i386", "6Client-Supplementary-6.6.z:flash-plugin-0:11.2.202.466-1.el6_6.i686", "6Server-Supplementary-6.6.z:flash-plugin-0:11.2.202.466-1.el6_6.i686", "6Workstation-Supplementary-6.6.z:flash-plugin-0:11.2.202.466-1.el6_6.i686", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2015-3103", }, { category: "external", summary: "RHBZ#1229879", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1229879", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2015-3103", url: "https://www.cve.org/CVERecord?id=CVE-2015-3103", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2015-3103", url: "https://nvd.nist.gov/vuln/detail/CVE-2015-3103", }, { category: "external", summary: "https://helpx.adobe.com/security/products/flash-player/apsb15-11.html", url: "https://helpx.adobe.com/security/products/flash-player/apsb15-11.html", }, ], release_date: "2015-06-09T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2015-06-10T14:34:51+00:00", details: "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.466-1.el5.i386", "5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.466-1.el5.i386", "6Client-Supplementary-6.6.z:flash-plugin-0:11.2.202.466-1.el6_6.i686", "6Server-Supplementary-6.6.z:flash-plugin-0:11.2.202.466-1.el6_6.i686", "6Workstation-Supplementary-6.6.z:flash-plugin-0:11.2.202.466-1.el6_6.i686", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2015:1086", }, ], scores: [ { cvss_v2: { accessComplexity: "MEDIUM", accessVector: "NETWORK", authentication: "NONE", availabilityImpact: "PARTIAL", baseScore: 6.8, confidentialityImpact: "PARTIAL", integrityImpact: "PARTIAL", vectorString: "AV:N/AC:M/Au:N/C:P/I:P/A:P", version: "2.0", }, products: [ "5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.466-1.el5.i386", "5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.466-1.el5.i386", "6Client-Supplementary-6.6.z:flash-plugin-0:11.2.202.466-1.el6_6.i686", "6Server-Supplementary-6.6.z:flash-plugin-0:11.2.202.466-1.el6_6.i686", "6Workstation-Supplementary-6.6.z:flash-plugin-0:11.2.202.466-1.el6_6.i686", ], }, ], threats: [ { category: "impact", details: "Critical", }, ], title: "flash-plugin: multiple code execution issues fixed in APSB15-11", }, { cve: "CVE-2015-3104", discovery_date: "2015-06-09T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1229879", }, ], notes: [ { category: "description", text: "Integer overflow in Adobe Flash Player before 13.0.0.292 and 14.x through 18.x before 18.0.0.160 on Windows and OS X and before 11.2.202.466 on Linux, Adobe AIR before 18.0.0.144 on Windows and before 18.0.0.143 on OS X and Android, Adobe AIR SDK before 18.0.0.144 on Windows and before 18.0.0.143 on OS X, and Adobe AIR SDK & Compiler before 18.0.0.144 on Windows and before 18.0.0.143 on OS X allows attackers to execute arbitrary code via unspecified vectors.", title: "Vulnerability description", }, { category: "summary", text: "flash-plugin: multiple code execution issues fixed in APSB15-11", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.466-1.el5.i386", "5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.466-1.el5.i386", "6Client-Supplementary-6.6.z:flash-plugin-0:11.2.202.466-1.el6_6.i686", "6Server-Supplementary-6.6.z:flash-plugin-0:11.2.202.466-1.el6_6.i686", "6Workstation-Supplementary-6.6.z:flash-plugin-0:11.2.202.466-1.el6_6.i686", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2015-3104", }, { category: "external", summary: "RHBZ#1229879", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1229879", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2015-3104", url: "https://www.cve.org/CVERecord?id=CVE-2015-3104", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2015-3104", url: "https://nvd.nist.gov/vuln/detail/CVE-2015-3104", }, { category: "external", summary: "https://helpx.adobe.com/security/products/flash-player/apsb15-11.html", url: "https://helpx.adobe.com/security/products/flash-player/apsb15-11.html", }, ], release_date: "2015-06-09T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2015-06-10T14:34:51+00:00", details: "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.466-1.el5.i386", "5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.466-1.el5.i386", "6Client-Supplementary-6.6.z:flash-plugin-0:11.2.202.466-1.el6_6.i686", "6Server-Supplementary-6.6.z:flash-plugin-0:11.2.202.466-1.el6_6.i686", "6Workstation-Supplementary-6.6.z:flash-plugin-0:11.2.202.466-1.el6_6.i686", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2015:1086", }, ], scores: [ { cvss_v2: { accessComplexity: "MEDIUM", accessVector: "NETWORK", authentication: "NONE", availabilityImpact: "PARTIAL", baseScore: 6.8, confidentialityImpact: "PARTIAL", integrityImpact: "PARTIAL", vectorString: "AV:N/AC:M/Au:N/C:P/I:P/A:P", version: "2.0", }, products: [ "5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.466-1.el5.i386", "5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.466-1.el5.i386", "6Client-Supplementary-6.6.z:flash-plugin-0:11.2.202.466-1.el6_6.i686", "6Server-Supplementary-6.6.z:flash-plugin-0:11.2.202.466-1.el6_6.i686", "6Workstation-Supplementary-6.6.z:flash-plugin-0:11.2.202.466-1.el6_6.i686", ], }, ], threats: [ { category: "impact", details: "Critical", }, ], title: "flash-plugin: multiple code execution issues fixed in APSB15-11", }, { cve: "CVE-2015-3105", discovery_date: "2015-06-09T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1229879", }, ], notes: [ { category: "description", text: "Adobe Flash Player before 13.0.0.292 and 14.x through 18.x before 18.0.0.160 on Windows and OS X and before 11.2.202.466 on Linux, Adobe AIR before 18.0.0.144 on Windows and before 18.0.0.143 on OS X and Android, Adobe AIR SDK before 18.0.0.144 on Windows and before 18.0.0.143 on OS X, and Adobe AIR SDK & Compiler before 18.0.0.144 on Windows and before 18.0.0.143 on OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.", title: "Vulnerability description", }, { category: "summary", text: "flash-plugin: multiple code execution issues fixed in APSB15-11", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.466-1.el5.i386", "5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.466-1.el5.i386", "6Client-Supplementary-6.6.z:flash-plugin-0:11.2.202.466-1.el6_6.i686", "6Server-Supplementary-6.6.z:flash-plugin-0:11.2.202.466-1.el6_6.i686", "6Workstation-Supplementary-6.6.z:flash-plugin-0:11.2.202.466-1.el6_6.i686", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2015-3105", }, { category: "external", summary: "RHBZ#1229879", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1229879", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2015-3105", url: "https://www.cve.org/CVERecord?id=CVE-2015-3105", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2015-3105", url: "https://nvd.nist.gov/vuln/detail/CVE-2015-3105", }, { category: "external", summary: "https://helpx.adobe.com/security/products/flash-player/apsb15-11.html", url: "https://helpx.adobe.com/security/products/flash-player/apsb15-11.html", }, ], release_date: "2015-06-09T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2015-06-10T14:34:51+00:00", details: "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.466-1.el5.i386", "5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.466-1.el5.i386", "6Client-Supplementary-6.6.z:flash-plugin-0:11.2.202.466-1.el6_6.i686", "6Server-Supplementary-6.6.z:flash-plugin-0:11.2.202.466-1.el6_6.i686", "6Workstation-Supplementary-6.6.z:flash-plugin-0:11.2.202.466-1.el6_6.i686", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2015:1086", }, ], scores: [ { cvss_v2: { accessComplexity: "MEDIUM", accessVector: "NETWORK", authentication: "NONE", availabilityImpact: "PARTIAL", baseScore: 6.8, confidentialityImpact: "PARTIAL", integrityImpact: "PARTIAL", vectorString: "AV:N/AC:M/Au:N/C:P/I:P/A:P", version: "2.0", }, products: [ "5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.466-1.el5.i386", "5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.466-1.el5.i386", "6Client-Supplementary-6.6.z:flash-plugin-0:11.2.202.466-1.el6_6.i686", "6Server-Supplementary-6.6.z:flash-plugin-0:11.2.202.466-1.el6_6.i686", "6Workstation-Supplementary-6.6.z:flash-plugin-0:11.2.202.466-1.el6_6.i686", ], }, ], threats: [ { category: "impact", details: "Critical", }, ], title: "flash-plugin: multiple code execution issues fixed in APSB15-11", }, { cve: "CVE-2015-3106", discovery_date: "2015-06-09T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1229879", }, ], notes: [ { category: "description", text: "Use-after-free vulnerability in Adobe Flash Player before 13.0.0.292 and 14.x through 18.x before 18.0.0.160 on Windows and OS X and before 11.2.202.466 on Linux, Adobe AIR before 18.0.0.144 on Windows and before 18.0.0.143 on OS X and Android, Adobe AIR SDK before 18.0.0.144 on Windows and before 18.0.0.143 on OS X, and Adobe AIR SDK & Compiler before 18.0.0.144 on Windows and before 18.0.0.143 on OS X allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-3103 and CVE-2015-3107.", title: "Vulnerability description", }, { category: "summary", text: "flash-plugin: multiple code execution issues fixed in APSB15-11", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.466-1.el5.i386", "5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.466-1.el5.i386", "6Client-Supplementary-6.6.z:flash-plugin-0:11.2.202.466-1.el6_6.i686", "6Server-Supplementary-6.6.z:flash-plugin-0:11.2.202.466-1.el6_6.i686", "6Workstation-Supplementary-6.6.z:flash-plugin-0:11.2.202.466-1.el6_6.i686", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2015-3106", }, { category: "external", summary: "RHBZ#1229879", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1229879", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2015-3106", url: "https://www.cve.org/CVERecord?id=CVE-2015-3106", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2015-3106", url: "https://nvd.nist.gov/vuln/detail/CVE-2015-3106", }, { category: "external", summary: "https://helpx.adobe.com/security/products/flash-player/apsb15-11.html", url: "https://helpx.adobe.com/security/products/flash-player/apsb15-11.html", }, ], release_date: "2015-06-09T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2015-06-10T14:34:51+00:00", details: "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.466-1.el5.i386", "5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.466-1.el5.i386", "6Client-Supplementary-6.6.z:flash-plugin-0:11.2.202.466-1.el6_6.i686", "6Server-Supplementary-6.6.z:flash-plugin-0:11.2.202.466-1.el6_6.i686", "6Workstation-Supplementary-6.6.z:flash-plugin-0:11.2.202.466-1.el6_6.i686", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2015:1086", }, ], scores: [ { cvss_v2: { accessComplexity: "MEDIUM", accessVector: "NETWORK", authentication: "NONE", availabilityImpact: "PARTIAL", baseScore: 6.8, confidentialityImpact: "PARTIAL", integrityImpact: "PARTIAL", vectorString: "AV:N/AC:M/Au:N/C:P/I:P/A:P", version: "2.0", }, products: [ "5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.466-1.el5.i386", "5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.466-1.el5.i386", "6Client-Supplementary-6.6.z:flash-plugin-0:11.2.202.466-1.el6_6.i686", "6Server-Supplementary-6.6.z:flash-plugin-0:11.2.202.466-1.el6_6.i686", "6Workstation-Supplementary-6.6.z:flash-plugin-0:11.2.202.466-1.el6_6.i686", ], }, ], threats: [ { category: "impact", details: "Critical", }, ], title: "flash-plugin: multiple code execution issues fixed in APSB15-11", }, { cve: "CVE-2015-3107", discovery_date: "2015-06-09T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1229879", }, ], notes: [ { category: "description", text: "Use-after-free vulnerability in Adobe Flash Player before 13.0.0.292 and 14.x through 18.x before 18.0.0.160 on Windows and OS X and before 11.2.202.466 on Linux, Adobe AIR before 18.0.0.144 on Windows and before 18.0.0.143 on OS X and Android, Adobe AIR SDK before 18.0.0.144 on Windows and before 18.0.0.143 on OS X, and Adobe AIR SDK & Compiler before 18.0.0.144 on Windows and before 18.0.0.143 on OS X allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-3103 and CVE-2015-3106.", title: "Vulnerability description", }, { category: "summary", text: "flash-plugin: multiple code execution issues fixed in APSB15-11", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.466-1.el5.i386", "5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.466-1.el5.i386", "6Client-Supplementary-6.6.z:flash-plugin-0:11.2.202.466-1.el6_6.i686", "6Server-Supplementary-6.6.z:flash-plugin-0:11.2.202.466-1.el6_6.i686", "6Workstation-Supplementary-6.6.z:flash-plugin-0:11.2.202.466-1.el6_6.i686", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2015-3107", }, { category: "external", summary: "RHBZ#1229879", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1229879", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2015-3107", url: "https://www.cve.org/CVERecord?id=CVE-2015-3107", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2015-3107", url: "https://nvd.nist.gov/vuln/detail/CVE-2015-3107", }, { category: "external", summary: "https://helpx.adobe.com/security/products/flash-player/apsb15-11.html", url: "https://helpx.adobe.com/security/products/flash-player/apsb15-11.html", }, ], release_date: "2015-06-09T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2015-06-10T14:34:51+00:00", details: "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.466-1.el5.i386", "5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.466-1.el5.i386", "6Client-Supplementary-6.6.z:flash-plugin-0:11.2.202.466-1.el6_6.i686", "6Server-Supplementary-6.6.z:flash-plugin-0:11.2.202.466-1.el6_6.i686", "6Workstation-Supplementary-6.6.z:flash-plugin-0:11.2.202.466-1.el6_6.i686", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2015:1086", }, ], scores: [ { cvss_v2: { accessComplexity: "MEDIUM", accessVector: "NETWORK", authentication: "NONE", availabilityImpact: "PARTIAL", baseScore: 6.8, confidentialityImpact: "PARTIAL", integrityImpact: "PARTIAL", vectorString: "AV:N/AC:M/Au:N/C:P/I:P/A:P", version: "2.0", }, products: [ "5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.466-1.el5.i386", "5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.466-1.el5.i386", "6Client-Supplementary-6.6.z:flash-plugin-0:11.2.202.466-1.el6_6.i686", "6Server-Supplementary-6.6.z:flash-plugin-0:11.2.202.466-1.el6_6.i686", "6Workstation-Supplementary-6.6.z:flash-plugin-0:11.2.202.466-1.el6_6.i686", ], }, ], threats: [ { category: "impact", details: "Critical", }, ], title: "flash-plugin: multiple code execution issues fixed in APSB15-11", }, { cve: "CVE-2015-3108", discovery_date: "2015-06-10T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1230201", }, ], notes: [ { category: "description", text: "Adobe Flash Player before 13.0.0.292 and 14.x through 18.x before 18.0.0.160 on Windows and OS X and before 11.2.202.466 on Linux, Adobe AIR before 18.0.0.144 on Windows and before 18.0.0.143 on OS X and Android, Adobe AIR SDK before 18.0.0.144 on Windows and before 18.0.0.143 on OS X, and Adobe AIR SDK & Compiler before 18.0.0.144 on Windows and before 18.0.0.143 on OS X do not properly restrict discovery of memory addresses, which allows attackers to bypass the ASLR protection mechanism via unspecified vectors.", title: "Vulnerability description", }, { category: "summary", text: "flash-plugin: information leak leading to ASLR bypass (APSB15-11)", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.466-1.el5.i386", "5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.466-1.el5.i386", "6Client-Supplementary-6.6.z:flash-plugin-0:11.2.202.466-1.el6_6.i686", "6Server-Supplementary-6.6.z:flash-plugin-0:11.2.202.466-1.el6_6.i686", "6Workstation-Supplementary-6.6.z:flash-plugin-0:11.2.202.466-1.el6_6.i686", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2015-3108", }, { category: "external", summary: "RHBZ#1230201", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1230201", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2015-3108", url: "https://www.cve.org/CVERecord?id=CVE-2015-3108", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2015-3108", url: "https://nvd.nist.gov/vuln/detail/CVE-2015-3108", }, { category: "external", summary: "https://helpx.adobe.com/security/products/flash-player/apsb15-11.html", url: "https://helpx.adobe.com/security/products/flash-player/apsb15-11.html", }, ], release_date: "2015-06-09T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2015-06-10T14:34:51+00:00", details: "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.466-1.el5.i386", "5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.466-1.el5.i386", "6Client-Supplementary-6.6.z:flash-plugin-0:11.2.202.466-1.el6_6.i686", "6Server-Supplementary-6.6.z:flash-plugin-0:11.2.202.466-1.el6_6.i686", "6Workstation-Supplementary-6.6.z:flash-plugin-0:11.2.202.466-1.el6_6.i686", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2015:1086", }, ], scores: [ { cvss_v2: { accessComplexity: "MEDIUM", accessVector: "NETWORK", authentication: "NONE", availabilityImpact: "NONE", baseScore: 4.3, confidentialityImpact: "PARTIAL", integrityImpact: "NONE", vectorString: "AV:N/AC:M/Au:N/C:P/I:N/A:N", version: "2.0", }, products: [ "5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.466-1.el5.i386", "5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.466-1.el5.i386", "6Client-Supplementary-6.6.z:flash-plugin-0:11.2.202.466-1.el6_6.i686", "6Server-Supplementary-6.6.z:flash-plugin-0:11.2.202.466-1.el6_6.i686", "6Workstation-Supplementary-6.6.z:flash-plugin-0:11.2.202.466-1.el6_6.i686", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "flash-plugin: information leak leading to ASLR bypass (APSB15-11)", }, ], }
fkie_cve-2015-3107
Vulnerability from fkie_nvd
Vendor | Product | Version | |
---|---|---|---|
adobe | air | * | |
android | * | ||
opensuse | evergreen | 11.4 | |
adobe | flash_player | * | |
adobe | flash_player | 14.0.0.125 | |
adobe | flash_player | 14.0.0.145 | |
adobe | flash_player | 14.0.0.176 | |
adobe | flash_player | 14.0.0.179 | |
adobe | flash_player | 15.0.0.152 | |
adobe | flash_player | 15.0.0.167 | |
adobe | flash_player | 15.0.0.189 | |
adobe | flash_player | 15.0.0.223 | |
adobe | flash_player | 15.0.0.239 | |
adobe | flash_player | 15.0.0.246 | |
adobe | flash_player | 16.0.0.235 | |
adobe | flash_player | 16.0.0.257 | |
adobe | flash_player | 16.0.0.287 | |
adobe | flash_player | 16.0.0.296 | |
adobe | flash_player | 17.0.0.134 | |
adobe | flash_player | 17.0.0.169 | |
adobe | flash_player | 17.0.0.188 | |
apple | mac_os_x | - | |
microsoft | windows | - | |
adobe | air | * | |
adobe | air_sdk | * | |
adobe | air_sdk_\&_compiler | * | |
apple | mac_os_x | - | |
microsoft | windows | - | |
adobe | flash_player | * | |
linux | linux_kernel | - |
{ configurations: [ { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:a:adobe:air:*:*:*:*:*:*:*:*", matchCriteriaId: "5EA9C9E9-32C6-40F1-920D-970ABA6A94FB", versionEndIncluding: "17.0.0.144", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:o:google:android:*:*:*:*:*:*:*:*", matchCriteriaId: "8255F035-04C8-4158-B301-82101711939C", vulnerable: true, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:opensuse:evergreen:11.4:*:*:*:*:*:*:*", matchCriteriaId: "CCE4D64E-8C4B-4F21-A9B0-90637C85C1D0", vulnerable: true, }, ], negate: false, operator: "OR", }, ], }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:a:adobe:flash_player:*:*:*:*:*:*:*:*", matchCriteriaId: "E2E515D4-87A7-4CB5-8C91-0A95BE8F283B", versionEndIncluding: "13.0.0.289", vulnerable: true, }, { criteria: "cpe:2.3:a:adobe:flash_player:14.0.0.125:*:*:*:*:*:*:*", matchCriteriaId: "D5D7202D-56DF-400B-9F09-E7D9938222D3", vulnerable: true, }, { criteria: "cpe:2.3:a:adobe:flash_player:14.0.0.145:*:*:*:*:*:*:*", matchCriteriaId: "4D4F0D21-A64B-46C1-9591-96529661DF0B", vulnerable: true, }, { criteria: "cpe:2.3:a:adobe:flash_player:14.0.0.176:*:*:*:*:*:*:*", matchCriteriaId: "86961019-3B81-458E-949F-A2F006EA55FE", vulnerable: true, }, { criteria: "cpe:2.3:a:adobe:flash_player:14.0.0.179:*:*:*:*:*:*:*", matchCriteriaId: "25895BE9-71FD-4DE7-90FC-0199470A8738", vulnerable: true, }, { criteria: "cpe:2.3:a:adobe:flash_player:15.0.0.152:*:*:*:*:*:*:*", matchCriteriaId: "4D55A950-7D48-413C-AD43-6AC64FBE790C", vulnerable: true, }, { criteria: "cpe:2.3:a:adobe:flash_player:15.0.0.167:*:*:*:*:*:*:*", matchCriteriaId: "F1A22B74-453D-4A8A-B79A-2B3143A0D995", vulnerable: true, }, { criteria: "cpe:2.3:a:adobe:flash_player:15.0.0.189:*:*:*:*:*:*:*", matchCriteriaId: "3FE4B077-67D1-4B25-976E-715FB6B2A1D1", vulnerable: true, }, { criteria: "cpe:2.3:a:adobe:flash_player:15.0.0.223:*:*:*:*:*:*:*", matchCriteriaId: "BFC91B68-6B35-47BD-BC02-3F836E772CF3", vulnerable: true, }, { criteria: "cpe:2.3:a:adobe:flash_player:15.0.0.239:*:*:*:*:*:*:*", matchCriteriaId: "A3BE6004-C30A-46E2-9F25-785E12BBF640", vulnerable: true, }, { criteria: "cpe:2.3:a:adobe:flash_player:15.0.0.246:*:*:*:*:*:*:*", matchCriteriaId: "CFE8E51F-7A32-41A4-B03A-73E52EB64C04", vulnerable: true, }, { criteria: "cpe:2.3:a:adobe:flash_player:16.0.0.235:*:*:*:*:*:*:*", matchCriteriaId: "3E13E927-A77C-4681-AFDE-A5A14093234D", vulnerable: true, }, { criteria: "cpe:2.3:a:adobe:flash_player:16.0.0.257:*:*:*:*:*:*:*", matchCriteriaId: "27629FF0-5EB9-476F-B5B3-115F663AB65E", vulnerable: true, }, { criteria: "cpe:2.3:a:adobe:flash_player:16.0.0.287:*:*:*:*:*:*:*", matchCriteriaId: "C0AB583F-3EBD-47B6-975E-7754CC32CCA7", vulnerable: true, }, { criteria: "cpe:2.3:a:adobe:flash_player:16.0.0.296:*:*:*:*:*:*:*", matchCriteriaId: "B58DE1A9-0510-4B65-AB18-75F9263A7818", vulnerable: true, }, { criteria: "cpe:2.3:a:adobe:flash_player:17.0.0.134:*:*:*:*:*:*:*", matchCriteriaId: "1BC4FAD0-4A54-4EDF-BE39-28138B34E719", vulnerable: true, }, { criteria: "cpe:2.3:a:adobe:flash_player:17.0.0.169:*:*:*:*:*:*:*", matchCriteriaId: "BE1FBC20-3DE6-4426-9E97-42AFCEF8CEE4", vulnerable: true, }, { criteria: "cpe:2.3:a:adobe:flash_player:17.0.0.188:*:*:*:*:*:*:*", matchCriteriaId: "40EF2221-DE87-4D8F-B92D-8FD21EEBEABA", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:o:apple:mac_os_x:-:*:*:*:*:*:*:*", matchCriteriaId: "4781BF1E-8A4E-4AFF-9540-23D523EE30DD", vulnerable: false, }, { criteria: "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*", matchCriteriaId: "A2572D17-1DE6-457B-99CC-64AFD54487EA", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:a:adobe:air:*:*:*:*:*:*:*:*", matchCriteriaId: "A4D3CA52-FE42-4B46-92FF-E8B027F586BF", versionEndIncluding: "17.0.0.172", vulnerable: true, }, { criteria: "cpe:2.3:a:adobe:air_sdk:*:*:*:*:*:*:*:*", matchCriteriaId: "7F5DDA65-B2BF-4299-9A1E-C61BB08A70FB", versionEndIncluding: "17.0.0.172", vulnerable: true, }, { criteria: "cpe:2.3:a:adobe:air_sdk_\\&_compiler:*:*:*:*:*:*:*:*", matchCriteriaId: "2E9D89B2-3A2E-406F-8DD4-19078091E7F5", versionEndIncluding: "17.0.0.172", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:o:apple:mac_os_x:-:*:*:*:*:*:*:*", matchCriteriaId: "4781BF1E-8A4E-4AFF-9540-23D523EE30DD", vulnerable: false, }, { criteria: "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*", matchCriteriaId: "A2572D17-1DE6-457B-99CC-64AFD54487EA", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:a:adobe:flash_player:*:*:*:*:*:*:*:*", matchCriteriaId: "47355444-CF3A-4150-9757-46B5A431865F", versionEndIncluding: "11.2.202.460", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*", matchCriteriaId: "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, ], cveTags: [], descriptions: [ { lang: "en", value: "Use-after-free vulnerability in Adobe Flash Player before 13.0.0.292 and 14.x through 18.x before 18.0.0.160 on Windows and OS X and before 11.2.202.466 on Linux, Adobe AIR before 18.0.0.144 on Windows and before 18.0.0.143 on OS X and Android, Adobe AIR SDK before 18.0.0.144 on Windows and before 18.0.0.143 on OS X, and Adobe AIR SDK & Compiler before 18.0.0.144 on Windows and before 18.0.0.143 on OS X allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-3103 and CVE-2015-3106.", }, { lang: "es", value: "Vulnerabilidad de uso después de liberación en Adobe Flash Player anterior a 13.0.0.292 y 14.x hasta 18.x anterior a 18.0.0.160 en Windows y OS X y anterior a 11.2.202.466 en Linux, Adobe AIR anterior a 18.0.0.144 en Windows y anterior a 18.0.0.143 en OS X y Android, Adobe AIR SDK anterior a 18.0.0.144 en Windows y anterior a 18.0.0.143 en OS X, y Adobe AIR SDK & Compiler anterior a 18.0.0.144 en Windows y anterior a 18.0.0.143 en OS X permite a atacantes ejecutar código arbitrario a través de vectores no especificados, una vulnerabilidad diferente a CVE-2015-3103 y CVE-2015-3106.", }, ], id: "CVE-2015-3107", lastModified: "2025-04-12T10:46:40.837", metrics: { cvssMetricV2: [ { acInsufInfo: true, baseSeverity: "HIGH", cvssData: { accessComplexity: "LOW", accessVector: "NETWORK", authentication: "NONE", availabilityImpact: "COMPLETE", baseScore: 10, confidentialityImpact: "COMPLETE", integrityImpact: "COMPLETE", vectorString: "AV:N/AC:L/Au:N/C:C/I:C/A:C", version: "2.0", }, exploitabilityScore: 10, impactScore: 10, obtainAllPrivilege: false, obtainOtherPrivilege: false, obtainUserPrivilege: false, source: "nvd@nist.gov", type: "Primary", userInteractionRequired: false, }, ], }, published: "2015-06-10T01:59:48.630", references: [ { source: "psirt@adobe.com", url: "http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00005.html", }, { source: "psirt@adobe.com", url: "http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00009.html", }, { source: "psirt@adobe.com", url: "http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00011.html", }, { source: "psirt@adobe.com", tags: [ "Third Party Advisory", ], url: "http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00018.html", }, { source: "psirt@adobe.com", url: "http://rhn.redhat.com/errata/RHSA-2015-1086.html", }, { source: "psirt@adobe.com", tags: [ "Third Party Advisory", "VDB Entry", ], url: "http://www.securityfocus.com/bid/75087", }, { source: "psirt@adobe.com", url: "http://www.securitytracker.com/id/1032519", }, { source: "psirt@adobe.com", tags: [ "Patch", "Vendor Advisory", ], url: "https://helpx.adobe.com/security/products/flash-player/apsb15-11.html", }, { source: "psirt@adobe.com", url: "https://security.gentoo.org/glsa/201506-01", }, { source: "psirt@adobe.com", url: "https://security.gentoo.org/glsa/201508-01", }, { source: "psirt@adobe.com", url: "https://www.exploit-db.com/exploits/37850/", }, { source: "af854a3a-2127-422b-91ae-364da2661108", url: "http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00005.html", }, { source: "af854a3a-2127-422b-91ae-364da2661108", url: "http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00009.html", }, { source: "af854a3a-2127-422b-91ae-364da2661108", url: "http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00011.html", }, { source: "af854a3a-2127-422b-91ae-364da2661108", tags: [ "Third Party Advisory", ], url: "http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00018.html", }, { source: "af854a3a-2127-422b-91ae-364da2661108", url: "http://rhn.redhat.com/errata/RHSA-2015-1086.html", }, { source: "af854a3a-2127-422b-91ae-364da2661108", tags: [ "Third Party Advisory", "VDB Entry", ], url: "http://www.securityfocus.com/bid/75087", }, { source: "af854a3a-2127-422b-91ae-364da2661108", url: "http://www.securitytracker.com/id/1032519", }, { source: "af854a3a-2127-422b-91ae-364da2661108", tags: [ "Patch", "Vendor Advisory", ], url: "https://helpx.adobe.com/security/products/flash-player/apsb15-11.html", }, { source: "af854a3a-2127-422b-91ae-364da2661108", url: "https://security.gentoo.org/glsa/201506-01", }, { source: "af854a3a-2127-422b-91ae-364da2661108", url: "https://security.gentoo.org/glsa/201508-01", }, { source: "af854a3a-2127-422b-91ae-364da2661108", url: "https://www.exploit-db.com/exploits/37850/", }, ], sourceIdentifier: "psirt@adobe.com", vulnStatus: "Deferred", weaknesses: [ { description: [ { lang: "en", value: "CWE-416", }, { lang: "en", value: "NVD-CWE-Other", }, ], source: "nvd@nist.gov", type: "Primary", }, ], }
gsd-2015-3107
Vulnerability from gsd
{ GSD: { alias: "CVE-2015-3107", description: "Use-after-free vulnerability in Adobe Flash Player before 13.0.0.292 and 14.x through 18.x before 18.0.0.160 on Windows and OS X and before 11.2.202.466 on Linux, Adobe AIR before 18.0.0.144 on Windows and before 18.0.0.143 on OS X and Android, Adobe AIR SDK before 18.0.0.144 on Windows and before 18.0.0.143 on OS X, and Adobe AIR SDK & Compiler before 18.0.0.144 on Windows and before 18.0.0.143 on OS X allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-3103 and CVE-2015-3106.", id: "GSD-2015-3107", references: [ "https://www.suse.com/security/cve/CVE-2015-3107.html", "https://access.redhat.com/errata/RHSA-2015:1086", "https://advisories.mageia.org/CVE-2015-3107.html", "https://packetstormsecurity.com/files/cve/CVE-2015-3107", ], }, gsd: { metadata: { exploitCode: "unknown", remediation: "unknown", reportConfidence: "confirmed", type: "vulnerability", }, osvSchema: { aliases: [ "CVE-2015-3107", ], details: "Use-after-free vulnerability in Adobe Flash Player before 13.0.0.292 and 14.x through 18.x before 18.0.0.160 on Windows and OS X and before 11.2.202.466 on Linux, Adobe AIR before 18.0.0.144 on Windows and before 18.0.0.143 on OS X and Android, Adobe AIR SDK before 18.0.0.144 on Windows and before 18.0.0.143 on OS X, and Adobe AIR SDK & Compiler before 18.0.0.144 on Windows and before 18.0.0.143 on OS X allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-3103 and CVE-2015-3106.", id: "GSD-2015-3107", modified: "2023-12-13T01:20:07.879838Z", schema_version: "1.4.0", }, }, namespaces: { "cve.org": { CVE_data_meta: { ASSIGNER: "psirt@adobe.com", ID: "CVE-2015-3107", STATE: "PUBLIC", }, affects: { vendor: { vendor_data: [ { product: { product_data: [ { product_name: "n/a", version: { version_data: [ { version_value: "n/a", }, ], }, }, ], }, vendor_name: "n/a", }, ], }, }, data_format: "MITRE", data_type: "CVE", data_version: "4.0", description: { description_data: [ { lang: "eng", value: "Use-after-free vulnerability in Adobe Flash Player before 13.0.0.292 and 14.x through 18.x before 18.0.0.160 on Windows and OS X and before 11.2.202.466 on Linux, Adobe AIR before 18.0.0.144 on Windows and before 18.0.0.143 on OS X and Android, Adobe AIR SDK before 18.0.0.144 on Windows and before 18.0.0.143 on OS X, and Adobe AIR SDK & Compiler before 18.0.0.144 on Windows and before 18.0.0.143 on OS X allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-3103 and CVE-2015-3106.", }, ], }, problemtype: { problemtype_data: [ { description: [ { lang: "eng", value: "n/a", }, ], }, ], }, references: { reference_data: [ { name: "https://helpx.adobe.com/security/products/flash-player/apsb15-11.html", refsource: "CONFIRM", url: "https://helpx.adobe.com/security/products/flash-player/apsb15-11.html", }, { name: "37850", refsource: "EXPLOIT-DB", url: "https://www.exploit-db.com/exploits/37850/", }, { name: "75087", refsource: "BID", url: "http://www.securityfocus.com/bid/75087", }, { name: "1032519", refsource: "SECTRACK", url: "http://www.securitytracker.com/id/1032519", }, { name: "GLSA-201508-01", refsource: "GENTOO", url: "https://security.gentoo.org/glsa/201508-01", }, { name: "openSUSE-SU-2015:1047", refsource: "SUSE", url: "http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00009.html", }, { name: "GLSA-201506-01", refsource: "GENTOO", url: "https://security.gentoo.org/glsa/201506-01", }, { name: "SUSE-SU-2015:1043", refsource: "SUSE", url: "http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00005.html", }, { name: "openSUSE-SU-2015:1061", refsource: "SUSE", url: "http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00011.html", }, { name: "RHSA-2015:1086", refsource: "REDHAT", url: "http://rhn.redhat.com/errata/RHSA-2015-1086.html", }, { name: "openSUSE-SU-2015:1781", refsource: "SUSE", url: "http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00018.html", }, ], }, }, "nvd.nist.gov": { configurations: { CVE_data_version: "4.0", nodes: [ { children: [ { children: [], cpe_match: [ { cpe23Uri: "cpe:2.3:a:adobe:air:*:*:*:*:*:*:*:*", cpe_name: [], versionEndIncluding: "17.0.0.144", vulnerable: true, }, ], operator: "OR", }, { children: [], cpe_match: [ { cpe23Uri: "cpe:2.3:o:google:android:*:*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, ], operator: "OR", }, ], cpe_match: [], operator: "AND", }, { children: [], cpe_match: [ { cpe23Uri: "cpe:2.3:o:opensuse:evergreen:11.4:*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, ], operator: "OR", }, { children: [ { children: [], cpe_match: [ { cpe23Uri: "cpe:2.3:a:adobe:flash_player:*:*:*:*:*:*:*:*", cpe_name: [], versionEndIncluding: "13.0.0.289", vulnerable: true, }, { cpe23Uri: "cpe:2.3:a:adobe:flash_player:15.0.0.223:*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, { cpe23Uri: "cpe:2.3:a:adobe:flash_player:15.0.0.239:*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, { cpe23Uri: "cpe:2.3:a:adobe:flash_player:17.0.0.169:*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, { cpe23Uri: "cpe:2.3:a:adobe:flash_player:17.0.0.188:*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, { cpe23Uri: "cpe:2.3:a:adobe:flash_player:15.0.0.167:*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, { cpe23Uri: "cpe:2.3:a:adobe:flash_player:15.0.0.189:*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, { cpe23Uri: "cpe:2.3:a:adobe:flash_player:16.0.0.296:*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, { cpe23Uri: "cpe:2.3:a:adobe:flash_player:17.0.0.134:*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, { cpe23Uri: "cpe:2.3:a:adobe:flash_player:14.0.0.179:*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, { cpe23Uri: "cpe:2.3:a:adobe:flash_player:15.0.0.152:*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, { cpe23Uri: "cpe:2.3:a:adobe:flash_player:16.0.0.257:*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, { cpe23Uri: "cpe:2.3:a:adobe:flash_player:16.0.0.287:*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, { cpe23Uri: "cpe:2.3:a:adobe:flash_player:14.0.0.125:*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, { cpe23Uri: "cpe:2.3:a:adobe:flash_player:14.0.0.145:*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, { cpe23Uri: "cpe:2.3:a:adobe:flash_player:14.0.0.176:*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, { cpe23Uri: "cpe:2.3:a:adobe:flash_player:15.0.0.246:*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, { cpe23Uri: "cpe:2.3:a:adobe:flash_player:16.0.0.235:*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, ], operator: "OR", }, { children: [], cpe_match: [ { cpe23Uri: "cpe:2.3:o:apple:mac_os_x:-:*:*:*:*:*:*:*", cpe_name: [], vulnerable: false, }, { cpe23Uri: "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*", cpe_name: [], vulnerable: false, }, ], operator: "OR", }, ], cpe_match: [], operator: "AND", }, { children: [ { children: [], cpe_match: [ { cpe23Uri: "cpe:2.3:a:adobe:air_sdk:*:*:*:*:*:*:*:*", cpe_name: [], versionEndIncluding: "17.0.0.172", vulnerable: true, }, { cpe23Uri: "cpe:2.3:a:adobe:air:*:*:*:*:*:*:*:*", cpe_name: [], versionEndIncluding: "17.0.0.172", vulnerable: true, }, { cpe23Uri: "cpe:2.3:a:adobe:air_sdk_\\&_compiler:*:*:*:*:*:*:*:*", cpe_name: [], versionEndIncluding: "17.0.0.172", vulnerable: true, }, ], operator: "OR", }, { children: [], cpe_match: [ { cpe23Uri: "cpe:2.3:o:apple:mac_os_x:-:*:*:*:*:*:*:*", cpe_name: [], vulnerable: false, }, { cpe23Uri: "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*", cpe_name: [], vulnerable: false, }, ], operator: "OR", }, ], cpe_match: [], operator: "AND", }, { children: [ { children: [], cpe_match: [ { cpe23Uri: "cpe:2.3:a:adobe:flash_player:*:*:*:*:*:*:*:*", cpe_name: [], versionEndIncluding: "11.2.202.460", vulnerable: true, }, ], operator: "OR", }, { children: [], cpe_match: [ { cpe23Uri: "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*", cpe_name: [], vulnerable: false, }, ], operator: "OR", }, ], cpe_match: [], operator: "AND", }, ], }, cve: { CVE_data_meta: { ASSIGNER: "psirt@adobe.com", ID: "CVE-2015-3107", }, data_format: "MITRE", data_type: "CVE", data_version: "4.0", description: { description_data: [ { lang: "en", value: "Use-after-free vulnerability in Adobe Flash Player before 13.0.0.292 and 14.x through 18.x before 18.0.0.160 on Windows and OS X and before 11.2.202.466 on Linux, Adobe AIR before 18.0.0.144 on Windows and before 18.0.0.143 on OS X and Android, Adobe AIR SDK before 18.0.0.144 on Windows and before 18.0.0.143 on OS X, and Adobe AIR SDK & Compiler before 18.0.0.144 on Windows and before 18.0.0.143 on OS X allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-3103 and CVE-2015-3106.", }, ], }, problemtype: { problemtype_data: [ { description: [ { lang: "en", value: "NVD-CWE-Other", }, { lang: "en", value: "CWE-416", }, ], }, ], }, references: { reference_data: [ { name: "https://helpx.adobe.com/security/products/flash-player/apsb15-11.html", refsource: "CONFIRM", tags: [ "Patch", "Vendor Advisory", ], url: "https://helpx.adobe.com/security/products/flash-player/apsb15-11.html", }, { name: "75087", refsource: "BID", tags: [ "Third Party Advisory", "VDB Entry", ], url: "http://www.securityfocus.com/bid/75087", }, { name: "openSUSE-SU-2015:1781", refsource: "SUSE", tags: [ "Third Party Advisory", ], url: "http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00018.html", }, { name: "GLSA-201508-01", refsource: "GENTOO", tags: [], url: "https://security.gentoo.org/glsa/201508-01", }, { name: "GLSA-201506-01", refsource: "GENTOO", tags: [], url: "https://security.gentoo.org/glsa/201506-01", }, { name: "1032519", refsource: "SECTRACK", tags: [], url: "http://www.securitytracker.com/id/1032519", }, { name: "RHSA-2015:1086", refsource: "REDHAT", tags: [], url: "http://rhn.redhat.com/errata/RHSA-2015-1086.html", }, { name: "openSUSE-SU-2015:1061", refsource: "SUSE", tags: [], url: "http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00011.html", }, { name: "openSUSE-SU-2015:1047", refsource: "SUSE", tags: [], url: "http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00009.html", }, { name: "SUSE-SU-2015:1043", refsource: "SUSE", tags: [], url: "http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00005.html", }, { name: "37850", refsource: "EXPLOIT-DB", tags: [], url: "https://www.exploit-db.com/exploits/37850/", }, ], }, }, impact: { baseMetricV2: { acInsufInfo: true, cvssV2: { accessComplexity: "LOW", accessVector: "NETWORK", authentication: "NONE", availabilityImpact: "COMPLETE", baseScore: 10, confidentialityImpact: "COMPLETE", integrityImpact: "COMPLETE", vectorString: "AV:N/AC:L/Au:N/C:C/I:C/A:C", version: "2.0", }, exploitabilityScore: 10, impactScore: 10, obtainAllPrivilege: false, obtainOtherPrivilege: false, obtainUserPrivilege: false, severity: "HIGH", userInteractionRequired: false, }, }, lastModifiedDate: "2017-09-17T01:29Z", publishedDate: "2015-06-10T01:59Z", }, }, }
Log in or create an account to share your comment.
This schema specifies the format of a comment related to a security advisory.
Sightings
Author | Source | Type | Date |
---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
- Confirmed: The vulnerability is confirmed from an analyst perspective.
- Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
- Patched: This vulnerability was successfully patched by the user reporting the sighting.
- Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
- Not confirmed: The user expresses doubt about the veracity of the vulnerability.
- Not patched: This vulnerability was not successfully patched by the user reporting the sighting.