Vulnerability from csaf_suse
Published
2015-08-12 07:50
Modified
2015-08-12 07:50
Summary
Security update for flash-player
Notes
Title of the patch
Security update for flash-player
Description of the patch
This security update to 11.2.202.508 (bsc#941239) fixes
the following issues:
* APSB15-19: CVE-2015-3107, CVE-2015-5124, CVE-2015-5125,
CVE-2015-5127, CVE-2015-5128, CVE-2015-5129, CVE-2015-5130,
CVE-2015-5131, CVE-2015-5132, CVE-2015-5133, CVE-2015-5134,
CVE-2015-5539, CVE-2015-5540, CVE-2015-5541, CVE-2015-5544,
CVE-2015-5545, CVE-2015-5546, CVE-2015-5547, CVE-2015-5548,
CVE-2015-5549, CVE-2015-5550, CVE-2015-5551, CVE-2015-5552,
CVE-2015-5553, CVE-2015-5554, CVE-2015-5555, CVE-2015-5556,
CVE-2015-5557, CVE-2015-5558, CVE-2015-5559, CVE-2015-5560,
CVE-2015-5561, CVE-2015-5562, CVE-2015-5563
Patchnames
SUSE-SLE-DESKTOP-12-2015-390,SUSE-SLE-WE-12-2015-390
Terms of use
CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
{ document: { aggregate_severity: { namespace: "https://www.suse.com/support/security/rating/", text: "critical", }, category: "csaf_security_advisory", csaf_version: "2.0", distribution: { text: "Copyright 2024 SUSE LLC. All rights reserved.", tlp: { label: "WHITE", url: "https://www.first.org/tlp/", }, }, lang: "en", notes: [ { category: "summary", text: "Security update for flash-player", title: "Title of the patch", }, { category: "description", text: "\nThis security update to 11.2.202.508 (bsc#941239) fixes\nthe following issues:\n\n * APSB15-19: CVE-2015-3107, CVE-2015-5124, CVE-2015-5125,\n CVE-2015-5127, CVE-2015-5128, CVE-2015-5129, CVE-2015-5130,\n CVE-2015-5131, CVE-2015-5132, CVE-2015-5133, CVE-2015-5134,\n CVE-2015-5539, CVE-2015-5540, CVE-2015-5541, CVE-2015-5544,\n CVE-2015-5545, CVE-2015-5546, CVE-2015-5547, CVE-2015-5548,\n CVE-2015-5549, CVE-2015-5550, CVE-2015-5551, CVE-2015-5552,\n CVE-2015-5553, CVE-2015-5554, CVE-2015-5555, CVE-2015-5556,\n CVE-2015-5557, CVE-2015-5558, CVE-2015-5559, CVE-2015-5560,\n CVE-2015-5561, CVE-2015-5562, CVE-2015-5563\n", title: "Description of the patch", }, { category: "details", text: "SUSE-SLE-DESKTOP-12-2015-390,SUSE-SLE-WE-12-2015-390", title: "Patchnames", }, { category: "legal_disclaimer", text: "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).", title: "Terms of use", }, ], publisher: { category: "vendor", contact_details: "https://www.suse.com/support/security/contact/", name: "SUSE Product Security Team", namespace: "https://www.suse.com/", }, references: [ { category: "external", summary: "SUSE ratings", url: "https://www.suse.com/support/security/rating/", }, { category: "self", summary: "URL of this CSAF notice", url: "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2015_1374-1.json", }, { category: "self", summary: "URL for SUSE-SU-2015:1374-1", url: "https://www.suse.com/support/update/announcement/2015/suse-su-20151374-1/", }, { category: "self", summary: "E-Mail link for SUSE-SU-2015:1374-1", url: "https://lists.suse.com/pipermail/sle-security-updates/2015-August/001533.html", }, { category: "self", summary: "SUSE Bug 941239", url: "https://bugzilla.suse.com/941239", }, { category: "self", summary: "SUSE CVE CVE-2015-3107 page", url: "https://www.suse.com/security/cve/CVE-2015-3107/", }, { category: "self", summary: "SUSE CVE CVE-2015-5124 page", url: "https://www.suse.com/security/cve/CVE-2015-5124/", }, { category: "self", summary: "SUSE CVE CVE-2015-5125 page", url: "https://www.suse.com/security/cve/CVE-2015-5125/", }, { category: "self", summary: "SUSE CVE CVE-2015-5127 page", url: "https://www.suse.com/security/cve/CVE-2015-5127/", }, { category: "self", summary: "SUSE CVE CVE-2015-5128 page", url: "https://www.suse.com/security/cve/CVE-2015-5128/", }, { category: "self", summary: "SUSE CVE CVE-2015-5129 page", url: "https://www.suse.com/security/cve/CVE-2015-5129/", }, { category: "self", summary: "SUSE CVE CVE-2015-5130 page", url: "https://www.suse.com/security/cve/CVE-2015-5130/", }, { category: "self", summary: "SUSE CVE CVE-2015-5131 page", url: "https://www.suse.com/security/cve/CVE-2015-5131/", }, { category: "self", summary: "SUSE CVE CVE-2015-5132 page", url: "https://www.suse.com/security/cve/CVE-2015-5132/", }, { category: "self", summary: "SUSE CVE CVE-2015-5133 page", url: "https://www.suse.com/security/cve/CVE-2015-5133/", }, { category: "self", summary: "SUSE CVE CVE-2015-5134 page", url: "https://www.suse.com/security/cve/CVE-2015-5134/", }, { category: "self", summary: "SUSE CVE CVE-2015-5539 page", url: "https://www.suse.com/security/cve/CVE-2015-5539/", }, { category: "self", summary: "SUSE CVE CVE-2015-5540 page", url: "https://www.suse.com/security/cve/CVE-2015-5540/", }, { category: "self", summary: "SUSE CVE CVE-2015-5541 page", url: "https://www.suse.com/security/cve/CVE-2015-5541/", }, { category: "self", summary: "SUSE CVE CVE-2015-5544 page", url: "https://www.suse.com/security/cve/CVE-2015-5544/", }, { category: "self", summary: "SUSE CVE CVE-2015-5545 page", url: "https://www.suse.com/security/cve/CVE-2015-5545/", }, { category: "self", summary: "SUSE CVE CVE-2015-5546 page", url: "https://www.suse.com/security/cve/CVE-2015-5546/", }, { category: "self", summary: "SUSE CVE CVE-2015-5547 page", url: "https://www.suse.com/security/cve/CVE-2015-5547/", }, { category: "self", summary: "SUSE CVE CVE-2015-5548 page", url: "https://www.suse.com/security/cve/CVE-2015-5548/", }, { category: "self", summary: "SUSE CVE CVE-2015-5549 page", url: "https://www.suse.com/security/cve/CVE-2015-5549/", }, { category: "self", summary: "SUSE CVE CVE-2015-5550 page", url: "https://www.suse.com/security/cve/CVE-2015-5550/", }, { category: "self", summary: "SUSE CVE CVE-2015-5551 page", url: "https://www.suse.com/security/cve/CVE-2015-5551/", }, { category: "self", summary: "SUSE CVE CVE-2015-5552 page", url: "https://www.suse.com/security/cve/CVE-2015-5552/", }, { category: "self", summary: "SUSE CVE CVE-2015-5553 page", url: "https://www.suse.com/security/cve/CVE-2015-5553/", }, { category: "self", summary: "SUSE CVE CVE-2015-5554 page", url: "https://www.suse.com/security/cve/CVE-2015-5554/", }, { category: "self", summary: "SUSE CVE CVE-2015-5555 page", url: "https://www.suse.com/security/cve/CVE-2015-5555/", }, { category: "self", summary: "SUSE CVE CVE-2015-5556 page", url: "https://www.suse.com/security/cve/CVE-2015-5556/", }, { category: "self", summary: "SUSE CVE CVE-2015-5557 page", url: "https://www.suse.com/security/cve/CVE-2015-5557/", }, { category: "self", summary: "SUSE CVE CVE-2015-5558 page", url: "https://www.suse.com/security/cve/CVE-2015-5558/", }, { category: "self", summary: "SUSE CVE CVE-2015-5559 page", url: "https://www.suse.com/security/cve/CVE-2015-5559/", }, { category: "self", summary: "SUSE CVE CVE-2015-5560 page", url: "https://www.suse.com/security/cve/CVE-2015-5560/", }, { category: "self", summary: "SUSE CVE CVE-2015-5561 page", url: "https://www.suse.com/security/cve/CVE-2015-5561/", }, { category: "self", summary: "SUSE CVE CVE-2015-5562 page", url: "https://www.suse.com/security/cve/CVE-2015-5562/", }, { category: "self", summary: "SUSE CVE CVE-2015-5563 page", url: "https://www.suse.com/security/cve/CVE-2015-5563/", }, ], title: "Security update for flash-player", tracking: { current_release_date: "2015-08-12T07:50:09Z", generator: { date: "2015-08-12T07:50:09Z", engine: { name: "cve-database.git:bin/generate-csaf.pl", version: "1", }, }, id: "SUSE-SU-2015:1374-1", initial_release_date: "2015-08-12T07:50:09Z", revision_history: [ { date: "2015-08-12T07:50:09Z", number: "1", summary: "Current version", }, ], status: "final", version: "1", }, }, product_tree: { branches: [ { branches: [ { branches: [ { category: "product_version", name: "flash-player-11.2.202.508-99.1.x86_64", product: { name: "flash-player-11.2.202.508-99.1.x86_64", product_id: "flash-player-11.2.202.508-99.1.x86_64", }, }, { category: "product_version", name: "flash-player-gnome-11.2.202.508-99.1.x86_64", product: { name: "flash-player-gnome-11.2.202.508-99.1.x86_64", product_id: "flash-player-gnome-11.2.202.508-99.1.x86_64", }, }, ], category: "architecture", name: "x86_64", }, { branches: [ { category: "product_name", name: "SUSE Linux Enterprise Desktop 12", product: { name: "SUSE Linux Enterprise Desktop 12", product_id: "SUSE Linux Enterprise Desktop 12", product_identification_helper: { cpe: "cpe:/o:suse:sled:12", }, }, }, { category: "product_name", name: "SUSE Linux Enterprise Workstation Extension 12", product: { name: "SUSE Linux Enterprise Workstation Extension 12", product_id: "SUSE Linux Enterprise Workstation Extension 12", product_identification_helper: { cpe: "cpe:/o:suse:sle-we:12", }, }, }, ], category: "product_family", name: "SUSE Linux Enterprise", }, ], category: "vendor", name: "SUSE", }, ], relationships: [ { category: "default_component_of", full_product_name: { name: "flash-player-11.2.202.508-99.1.x86_64 as component of SUSE Linux Enterprise Desktop 12", product_id: "SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.508-99.1.x86_64", }, product_reference: "flash-player-11.2.202.508-99.1.x86_64", relates_to_product_reference: "SUSE Linux Enterprise Desktop 12", }, { category: "default_component_of", full_product_name: { name: "flash-player-gnome-11.2.202.508-99.1.x86_64 as component of SUSE Linux Enterprise Desktop 12", product_id: "SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.508-99.1.x86_64", }, product_reference: "flash-player-gnome-11.2.202.508-99.1.x86_64", relates_to_product_reference: "SUSE Linux Enterprise Desktop 12", }, { category: "default_component_of", full_product_name: { name: "flash-player-11.2.202.508-99.1.x86_64 as component of SUSE Linux Enterprise Workstation Extension 12", product_id: "SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.508-99.1.x86_64", }, product_reference: "flash-player-11.2.202.508-99.1.x86_64", relates_to_product_reference: "SUSE Linux Enterprise Workstation Extension 12", }, { category: "default_component_of", full_product_name: { name: "flash-player-gnome-11.2.202.508-99.1.x86_64 as component of SUSE Linux Enterprise Workstation Extension 12", product_id: "SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.508-99.1.x86_64", }, product_reference: "flash-player-gnome-11.2.202.508-99.1.x86_64", relates_to_product_reference: "SUSE Linux Enterprise Workstation Extension 12", }, ], }, vulnerabilities: [ { cve: "CVE-2015-3107", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-3107", }, ], notes: [ { category: "general", text: "Use-after-free vulnerability in Adobe Flash Player before 13.0.0.292 and 14.x through 18.x before 18.0.0.160 on Windows and OS X and before 11.2.202.466 on Linux, Adobe AIR before 18.0.0.144 on Windows and before 18.0.0.143 on OS X and Android, Adobe AIR SDK before 18.0.0.144 on Windows and before 18.0.0.143 on OS X, and Adobe AIR SDK & Compiler before 18.0.0.144 on Windows and before 18.0.0.143 on OS X allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-3103 and CVE-2015-3106.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.508-99.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-3107", url: "https://www.suse.com/security/cve/CVE-2015-3107", }, { category: "external", summary: "SUSE Bug 934088 for CVE-2015-3107", url: "https://bugzilla.suse.com/934088", }, { category: "external", summary: "SUSE Bug 941239 for CVE-2015-3107", url: "https://bugzilla.suse.com/941239", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.508-99.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2015-08-12T07:50:09Z", details: "important", }, ], title: "CVE-2015-3107", }, { cve: "CVE-2015-5124", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-5124", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 13.0.0.302 and 14.x through 18.x before 18.0.0.203 on Windows and OS X and before 11.2.202.481 on Linux, Adobe AIR before 18.0.0.180, Adobe AIR SDK before 18.0.0.180, and Adobe AIR SDK & Compiler before 18.0.0.180 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-3117, CVE-2015-3123, CVE-2015-3130, CVE-2015-3133, CVE-2015-3134, and CVE-2015-4431.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.508-99.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-5124", url: "https://www.suse.com/security/cve/CVE-2015-5124", }, { category: "external", summary: "SUSE Bug 941239 for CVE-2015-5124", url: "https://bugzilla.suse.com/941239", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.508-99.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2015-08-12T07:50:09Z", details: "critical", }, ], title: "CVE-2015-5124", }, { cve: "CVE-2015-5125", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-5125", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before 18.0.0.199, and Adobe AIR SDK & Compiler before 18.0.0.199 allow attackers to cause a denial of service (vector-length corruption) or possibly have unspecified other impact via unknown vectors.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.508-99.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-5125", url: "https://www.suse.com/security/cve/CVE-2015-5125", }, { category: "external", summary: "SUSE Bug 941239 for CVE-2015-5125", url: "https://bugzilla.suse.com/941239", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.508-99.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2015-08-12T07:50:09Z", details: "critical", }, ], title: "CVE-2015-5125", }, { cve: "CVE-2015-5127", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-5127", }, ], notes: [ { category: "general", text: "Use-after-free vulnerability in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before 18.0.0.199, and Adobe AIR SDK & Compiler before 18.0.0.199 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-5130, CVE-2015-5134, CVE-2015-5539, CVE-2015-5540, CVE-2015-5550, CVE-2015-5551, CVE-2015-5556, CVE-2015-5557, CVE-2015-5559, CVE-2015-5561, CVE-2015-5563, CVE-2015-5564, and CVE-2015-5565.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.508-99.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-5127", url: "https://www.suse.com/security/cve/CVE-2015-5127", }, { category: "external", summary: "SUSE Bug 941239 for CVE-2015-5127", url: "https://bugzilla.suse.com/941239", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.508-99.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2015-08-12T07:50:09Z", details: "critical", }, ], title: "CVE-2015-5127", }, { cve: "CVE-2015-5128", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-5128", }, ], notes: [ { category: "general", text: "** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.508-99.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-5128", url: "https://www.suse.com/security/cve/CVE-2015-5128", }, { category: "external", summary: "SUSE Bug 941239 for CVE-2015-5128", url: "https://bugzilla.suse.com/941239", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.508-99.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2015-08-12T07:50:09Z", details: "low", }, ], title: "CVE-2015-5128", }, { cve: "CVE-2015-5129", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-5129", }, ], notes: [ { category: "general", text: "Heap-based buffer overflow in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before 18.0.0.199, and Adobe AIR SDK & Compiler before 18.0.0.199 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-5541.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.508-99.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-5129", url: "https://www.suse.com/security/cve/CVE-2015-5129", }, { category: "external", summary: "SUSE Bug 941239 for CVE-2015-5129", url: "https://bugzilla.suse.com/941239", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.508-99.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2015-08-12T07:50:09Z", details: "critical", }, ], title: "CVE-2015-5129", }, { cve: "CVE-2015-5130", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-5130", }, ], notes: [ { category: "general", text: "Use-after-free vulnerability in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before 18.0.0.199, and Adobe AIR SDK & Compiler before 18.0.0.199 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-5127, CVE-2015-5134, CVE-2015-5539, CVE-2015-5540, CVE-2015-5550, CVE-2015-5551, CVE-2015-5556, CVE-2015-5557, CVE-2015-5559, CVE-2015-5561, CVE-2015-5563, CVE-2015-5564, and CVE-2015-5565.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.508-99.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-5130", url: "https://www.suse.com/security/cve/CVE-2015-5130", }, { category: "external", summary: "SUSE Bug 941239 for CVE-2015-5130", url: "https://bugzilla.suse.com/941239", }, { category: "external", summary: "SUSE Bug 952254 for CVE-2015-5130", url: "https://bugzilla.suse.com/952254", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.508-99.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2015-08-12T07:50:09Z", details: "critical", }, ], title: "CVE-2015-5130", }, { cve: "CVE-2015-5131", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-5131", }, ], notes: [ { category: "general", text: "Buffer overflow in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before 18.0.0.199, and Adobe AIR SDK & Compiler before 18.0.0.199 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-5132 and CVE-2015-5133.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.508-99.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-5131", url: "https://www.suse.com/security/cve/CVE-2015-5131", }, { category: "external", summary: "SUSE Bug 941239 for CVE-2015-5131", url: "https://bugzilla.suse.com/941239", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.508-99.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2015-08-12T07:50:09Z", details: "critical", }, ], title: "CVE-2015-5131", }, { cve: "CVE-2015-5132", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-5132", }, ], notes: [ { category: "general", text: "Buffer overflow in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before 18.0.0.199, and Adobe AIR SDK & Compiler before 18.0.0.199 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-5131 and CVE-2015-5133.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.508-99.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-5132", url: "https://www.suse.com/security/cve/CVE-2015-5132", }, { category: "external", summary: "SUSE Bug 941239 for CVE-2015-5132", url: "https://bugzilla.suse.com/941239", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.508-99.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2015-08-12T07:50:09Z", details: "critical", }, ], title: "CVE-2015-5132", }, { cve: "CVE-2015-5133", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-5133", }, ], notes: [ { category: "general", text: "Buffer overflow in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before 18.0.0.199, and Adobe AIR SDK & Compiler before 18.0.0.199 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-5131 and CVE-2015-5132.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.508-99.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-5133", url: "https://www.suse.com/security/cve/CVE-2015-5133", }, { category: "external", summary: "SUSE Bug 941239 for CVE-2015-5133", url: "https://bugzilla.suse.com/941239", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.508-99.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2015-08-12T07:50:09Z", details: "critical", }, ], title: "CVE-2015-5133", }, { cve: "CVE-2015-5134", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-5134", }, ], notes: [ { category: "general", text: "Use-after-free vulnerability in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before 18.0.0.199, and Adobe AIR SDK & Compiler before 18.0.0.199 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-5127, CVE-2015-5130, CVE-2015-5539, CVE-2015-5540, CVE-2015-5550, CVE-2015-5551, CVE-2015-5556, CVE-2015-5557, CVE-2015-5559, CVE-2015-5561, CVE-2015-5563, CVE-2015-5564, and CVE-2015-5565.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.508-99.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-5134", url: "https://www.suse.com/security/cve/CVE-2015-5134", }, { category: "external", summary: "SUSE Bug 941239 for CVE-2015-5134", url: "https://bugzilla.suse.com/941239", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.508-99.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2015-08-12T07:50:09Z", details: "critical", }, ], title: "CVE-2015-5134", }, { cve: "CVE-2015-5539", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-5539", }, ], notes: [ { category: "general", text: "Use-after-free vulnerability in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before 18.0.0.199, and Adobe AIR SDK & Compiler before 18.0.0.199 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-5127, CVE-2015-5130, CVE-2015-5134, CVE-2015-5540, CVE-2015-5550, CVE-2015-5551, CVE-2015-5556, CVE-2015-5557, CVE-2015-5559, CVE-2015-5561, CVE-2015-5563, CVE-2015-5564, and CVE-2015-5565.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.508-99.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-5539", url: "https://www.suse.com/security/cve/CVE-2015-5539", }, { category: "external", summary: "SUSE Bug 941239 for CVE-2015-5539", url: "https://bugzilla.suse.com/941239", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.508-99.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2015-08-12T07:50:09Z", details: "critical", }, ], title: "CVE-2015-5539", }, { cve: "CVE-2015-5540", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-5540", }, ], notes: [ { category: "general", text: "Use-after-free vulnerability in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before 18.0.0.199, and Adobe AIR SDK & Compiler before 18.0.0.199 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-5127, CVE-2015-5130, CVE-2015-5134, CVE-2015-5539, CVE-2015-5550, CVE-2015-5551, CVE-2015-5556, CVE-2015-5557, CVE-2015-5559, CVE-2015-5561, CVE-2015-5563, CVE-2015-5564, and CVE-2015-5565.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.508-99.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-5540", url: "https://www.suse.com/security/cve/CVE-2015-5540", }, { category: "external", summary: "SUSE Bug 941239 for CVE-2015-5540", url: "https://bugzilla.suse.com/941239", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.508-99.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2015-08-12T07:50:09Z", details: "critical", }, ], title: "CVE-2015-5540", }, { cve: "CVE-2015-5541", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-5541", }, ], notes: [ { category: "general", text: "Heap-based buffer overflow in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before 18.0.0.199, and Adobe AIR SDK & Compiler before 18.0.0.199 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-5129.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.508-99.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-5541", url: "https://www.suse.com/security/cve/CVE-2015-5541", }, { category: "external", summary: "SUSE Bug 941239 for CVE-2015-5541", url: "https://bugzilla.suse.com/941239", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.508-99.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2015-08-12T07:50:09Z", details: "critical", }, ], title: "CVE-2015-5541", }, { cve: "CVE-2015-5544", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-5544", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before 18.0.0.199, and Adobe AIR SDK & Compiler before 18.0.0.199 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-5545, CVE-2015-5546, CVE-2015-5547, CVE-2015-5548, CVE-2015-5549, CVE-2015-5552, and CVE-2015-5553.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.508-99.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-5544", url: "https://www.suse.com/security/cve/CVE-2015-5544", }, { category: "external", summary: "SUSE Bug 941239 for CVE-2015-5544", url: "https://bugzilla.suse.com/941239", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.508-99.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2015-08-12T07:50:09Z", details: "critical", }, ], title: "CVE-2015-5544", }, { cve: "CVE-2015-5545", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-5545", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before 18.0.0.199, and Adobe AIR SDK & Compiler before 18.0.0.199 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-5544, CVE-2015-5546, CVE-2015-5547, CVE-2015-5548, CVE-2015-5549, CVE-2015-5552, and CVE-2015-5553.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.508-99.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-5545", url: "https://www.suse.com/security/cve/CVE-2015-5545", }, { category: "external", summary: "SUSE Bug 941239 for CVE-2015-5545", url: "https://bugzilla.suse.com/941239", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.508-99.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2015-08-12T07:50:09Z", details: "critical", }, ], title: "CVE-2015-5545", }, { cve: "CVE-2015-5546", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-5546", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before 18.0.0.199, and Adobe AIR SDK & Compiler before 18.0.0.199 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-5544, CVE-2015-5545, CVE-2015-5547, CVE-2015-5548, CVE-2015-5549, CVE-2015-5552, and CVE-2015-5553.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.508-99.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-5546", url: "https://www.suse.com/security/cve/CVE-2015-5546", }, { category: "external", summary: "SUSE Bug 941239 for CVE-2015-5546", url: "https://bugzilla.suse.com/941239", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.508-99.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2015-08-12T07:50:09Z", details: "critical", }, ], title: "CVE-2015-5546", }, { cve: "CVE-2015-5547", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-5547", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before 18.0.0.199, and Adobe AIR SDK & Compiler before 18.0.0.199 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-5544, CVE-2015-5545, CVE-2015-5546, CVE-2015-5548, CVE-2015-5549, CVE-2015-5552, and CVE-2015-5553.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.508-99.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-5547", url: "https://www.suse.com/security/cve/CVE-2015-5547", }, { category: "external", summary: "SUSE Bug 941239 for CVE-2015-5547", url: "https://bugzilla.suse.com/941239", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.508-99.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2015-08-12T07:50:09Z", details: "critical", }, ], title: "CVE-2015-5547", }, { cve: "CVE-2015-5548", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-5548", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before 18.0.0.199, and Adobe AIR SDK & Compiler before 18.0.0.199 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-5544, CVE-2015-5545, CVE-2015-5546, CVE-2015-5547, CVE-2015-5549, CVE-2015-5552, and CVE-2015-5553.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.508-99.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-5548", url: "https://www.suse.com/security/cve/CVE-2015-5548", }, { category: "external", summary: "SUSE Bug 941239 for CVE-2015-5548", url: "https://bugzilla.suse.com/941239", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.508-99.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2015-08-12T07:50:09Z", details: "critical", }, ], title: "CVE-2015-5548", }, { cve: "CVE-2015-5549", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-5549", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before 18.0.0.199, and Adobe AIR SDK & Compiler before 18.0.0.199 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-5544, CVE-2015-5545, CVE-2015-5546, CVE-2015-5547, CVE-2015-5548, CVE-2015-5552, and CVE-2015-5553.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.508-99.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-5549", url: "https://www.suse.com/security/cve/CVE-2015-5549", }, { category: "external", summary: "SUSE Bug 941239 for CVE-2015-5549", url: "https://bugzilla.suse.com/941239", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.508-99.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2015-08-12T07:50:09Z", details: "critical", }, ], title: "CVE-2015-5549", }, { cve: "CVE-2015-5550", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-5550", }, ], notes: [ { category: "general", text: "Use-after-free vulnerability in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before 18.0.0.199, and Adobe AIR SDK & Compiler before 18.0.0.199 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-5127, CVE-2015-5130, CVE-2015-5134, CVE-2015-5539, CVE-2015-5540, CVE-2015-5551, CVE-2015-5556, CVE-2015-5557, CVE-2015-5559, CVE-2015-5561, CVE-2015-5563, CVE-2015-5564, and CVE-2015-5565.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.508-99.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-5550", url: "https://www.suse.com/security/cve/CVE-2015-5550", }, { category: "external", summary: "SUSE Bug 941239 for CVE-2015-5550", url: "https://bugzilla.suse.com/941239", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.508-99.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2015-08-12T07:50:09Z", details: "critical", }, ], title: "CVE-2015-5550", }, { cve: "CVE-2015-5551", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-5551", }, ], notes: [ { category: "general", text: "Use-after-free vulnerability in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before 18.0.0.199, and Adobe AIR SDK & Compiler before 18.0.0.199 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-5127, CVE-2015-5130, CVE-2015-5134, CVE-2015-5539, CVE-2015-5540, CVE-2015-5550, CVE-2015-5556, CVE-2015-5557, CVE-2015-5559, CVE-2015-5561, CVE-2015-5563, CVE-2015-5564, and CVE-2015-5565.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.508-99.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-5551", url: "https://www.suse.com/security/cve/CVE-2015-5551", }, { category: "external", summary: "SUSE Bug 941239 for CVE-2015-5551", url: "https://bugzilla.suse.com/941239", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.508-99.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2015-08-12T07:50:09Z", details: "critical", }, ], title: "CVE-2015-5551", }, { cve: "CVE-2015-5552", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-5552", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before 18.0.0.199, and Adobe AIR SDK & Compiler before 18.0.0.199 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-5544, CVE-2015-5545, CVE-2015-5546, CVE-2015-5547, CVE-2015-5548, CVE-2015-5549, and CVE-2015-5553.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.508-99.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-5552", url: "https://www.suse.com/security/cve/CVE-2015-5552", }, { category: "external", summary: "SUSE Bug 941239 for CVE-2015-5552", url: "https://bugzilla.suse.com/941239", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.508-99.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2015-08-12T07:50:09Z", details: "critical", }, ], title: "CVE-2015-5552", }, { cve: "CVE-2015-5553", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-5553", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before 18.0.0.199, and Adobe AIR SDK & Compiler before 18.0.0.199 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-5544, CVE-2015-5545, CVE-2015-5546, CVE-2015-5547, CVE-2015-5548, CVE-2015-5549, and CVE-2015-5552.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.508-99.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-5553", url: "https://www.suse.com/security/cve/CVE-2015-5553", }, { category: "external", summary: "SUSE Bug 941239 for CVE-2015-5553", url: "https://bugzilla.suse.com/941239", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.508-99.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2015-08-12T07:50:09Z", details: "critical", }, ], title: "CVE-2015-5553", }, { cve: "CVE-2015-5554", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-5554", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before 18.0.0.199, and Adobe AIR SDK & Compiler before 18.0.0.199 allow attackers to execute arbitrary code by leveraging an unspecified \"type confusion,\" a different vulnerability than CVE-2015-5555, CVE-2015-5558, and CVE-2015-5562.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.508-99.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-5554", url: "https://www.suse.com/security/cve/CVE-2015-5554", }, { category: "external", summary: "SUSE Bug 941239 for CVE-2015-5554", url: "https://bugzilla.suse.com/941239", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.508-99.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2015-08-12T07:50:09Z", details: "critical", }, ], title: "CVE-2015-5554", }, { cve: "CVE-2015-5555", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-5555", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before 18.0.0.199, and Adobe AIR SDK & Compiler before 18.0.0.199 allow attackers to execute arbitrary code by leveraging an unspecified \"type confusion,\" a different vulnerability than CVE-2015-5554, CVE-2015-5558, and CVE-2015-5562.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.508-99.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-5555", url: "https://www.suse.com/security/cve/CVE-2015-5555", }, { category: "external", summary: "SUSE Bug 941239 for CVE-2015-5555", url: "https://bugzilla.suse.com/941239", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.508-99.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2015-08-12T07:50:09Z", details: "critical", }, ], title: "CVE-2015-5555", }, { cve: "CVE-2015-5556", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-5556", }, ], notes: [ { category: "general", text: "Use-after-free vulnerability in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before 18.0.0.199, and Adobe AIR SDK & Compiler before 18.0.0.199 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-5127, CVE-2015-5130, CVE-2015-5134, CVE-2015-5539, CVE-2015-5540, CVE-2015-5550, CVE-2015-5551, CVE-2015-5557, CVE-2015-5559, CVE-2015-5561, CVE-2015-5563, CVE-2015-5564, and CVE-2015-5565.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.508-99.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-5556", url: "https://www.suse.com/security/cve/CVE-2015-5556", }, { category: "external", summary: "SUSE Bug 941239 for CVE-2015-5556", url: "https://bugzilla.suse.com/941239", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.508-99.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2015-08-12T07:50:09Z", details: "critical", }, ], title: "CVE-2015-5556", }, { cve: "CVE-2015-5557", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-5557", }, ], notes: [ { category: "general", text: "Use-after-free vulnerability in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before 18.0.0.199, and Adobe AIR SDK & Compiler before 18.0.0.199 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-5127, CVE-2015-5130, CVE-2015-5134, CVE-2015-5539, CVE-2015-5540, CVE-2015-5550, CVE-2015-5551, CVE-2015-5556, CVE-2015-5559, CVE-2015-5561, CVE-2015-5563, CVE-2015-5564, and CVE-2015-5565.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.508-99.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-5557", url: "https://www.suse.com/security/cve/CVE-2015-5557", }, { category: "external", summary: "SUSE Bug 941239 for CVE-2015-5557", url: "https://bugzilla.suse.com/941239", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.508-99.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2015-08-12T07:50:09Z", details: "critical", }, ], title: "CVE-2015-5557", }, { cve: "CVE-2015-5558", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-5558", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before 18.0.0.199, and Adobe AIR SDK & Compiler before 18.0.0.199 allow attackers to execute arbitrary code by leveraging an unspecified \"type confusion,\" a different vulnerability than CVE-2015-5554, CVE-2015-5555, and CVE-2015-5562.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.508-99.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-5558", url: "https://www.suse.com/security/cve/CVE-2015-5558", }, { category: "external", summary: "SUSE Bug 941239 for CVE-2015-5558", url: "https://bugzilla.suse.com/941239", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.508-99.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2015-08-12T07:50:09Z", details: "critical", }, ], title: "CVE-2015-5558", }, { cve: "CVE-2015-5559", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-5559", }, ], notes: [ { category: "general", text: "Use-after-free vulnerability in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before 18.0.0.199, and Adobe AIR SDK & Compiler before 18.0.0.199 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-5127, CVE-2015-5130, CVE-2015-5134, CVE-2015-5539, CVE-2015-5540, CVE-2015-5550, CVE-2015-5551, CVE-2015-5556, CVE-2015-5557, CVE-2015-5561, CVE-2015-5563, CVE-2015-5564, and CVE-2015-5565.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.508-99.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-5559", url: "https://www.suse.com/security/cve/CVE-2015-5559", }, { category: "external", summary: "SUSE Bug 941239 for CVE-2015-5559", url: "https://bugzilla.suse.com/941239", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.508-99.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2015-08-12T07:50:09Z", details: "critical", }, ], title: "CVE-2015-5559", }, { cve: "CVE-2015-5560", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-5560", }, ], notes: [ { category: "general", text: "Integer overflow in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before 18.0.0.199, and Adobe AIR SDK & Compiler before 18.0.0.199 allows attackers to execute arbitrary code via unspecified vectors.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.508-99.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-5560", url: "https://www.suse.com/security/cve/CVE-2015-5560", }, { category: "external", summary: "SUSE Bug 941239 for CVE-2015-5560", url: "https://bugzilla.suse.com/941239", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.508-99.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2015-08-12T07:50:09Z", details: "critical", }, ], title: "CVE-2015-5560", }, { cve: "CVE-2015-5561", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-5561", }, ], notes: [ { category: "general", text: "Use-after-free vulnerability in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before 18.0.0.199, and Adobe AIR SDK & Compiler before 18.0.0.199 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-5127, CVE-2015-5130, CVE-2015-5134, CVE-2015-5539, CVE-2015-5540, CVE-2015-5550, CVE-2015-5551, CVE-2015-5556, CVE-2015-5557, CVE-2015-5559, CVE-2015-5563, CVE-2015-5564, and CVE-2015-5565.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.508-99.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-5561", url: "https://www.suse.com/security/cve/CVE-2015-5561", }, { category: "external", summary: "SUSE Bug 941239 for CVE-2015-5561", url: "https://bugzilla.suse.com/941239", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.508-99.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2015-08-12T07:50:09Z", details: "critical", }, ], title: "CVE-2015-5561", }, { cve: "CVE-2015-5562", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-5562", }, ], notes: [ { category: "general", text: "Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before 18.0.0.199, and Adobe AIR SDK & Compiler before 18.0.0.199 allow attackers to execute arbitrary code by leveraging an unspecified \"type confusion,\" a different vulnerability than CVE-2015-5554, CVE-2015-5555, and CVE-2015-5558.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.508-99.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-5562", url: "https://www.suse.com/security/cve/CVE-2015-5562", }, { category: "external", summary: "SUSE Bug 941239 for CVE-2015-5562", url: "https://bugzilla.suse.com/941239", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.508-99.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2015-08-12T07:50:09Z", details: "critical", }, ], title: "CVE-2015-5562", }, { cve: "CVE-2015-5563", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-5563", }, ], notes: [ { category: "general", text: "Use-after-free vulnerability in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before 18.0.0.199, and Adobe AIR SDK & Compiler before 18.0.0.199 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-5127, CVE-2015-5130, CVE-2015-5134, CVE-2015-5539, CVE-2015-5540, CVE-2015-5550, CVE-2015-5551, CVE-2015-5556, CVE-2015-5557, CVE-2015-5559, CVE-2015-5561, CVE-2015-5564, and CVE-2015-5565.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.508-99.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-5563", url: "https://www.suse.com/security/cve/CVE-2015-5563", }, { category: "external", summary: "SUSE Bug 941239 for CVE-2015-5563", url: "https://bugzilla.suse.com/941239", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.508-99.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.508-99.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2015-08-12T07:50:09Z", details: "critical", }, ], title: "CVE-2015-5563", }, ], }
Log in or create an account to share your comment.
Security Advisory comment format.
This schema specifies the format of a comment related to a security advisory.
Title of the comment
Description of the comment
Loading…
Loading…
Loading…
Sightings
| Author | Source | Type | Date |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
- Confirmed: The vulnerability is confirmed from an analyst perspective.
- Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
- Patched: This vulnerability was successfully patched by the user reporting the sighting.
- Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
- Not confirmed: The user expresses doubt about the veracity of the vulnerability.
- Not patched: This vulnerability was not successfully patched by the user reporting the sighting.