GCVE Workshop - 22 September 2026 (14:00-18:00), Luxembourg Before The Vulnopticon Conference - Registration

SUSE-SU-2017:0523-1

Vulnerability from csaf_suse - Published: 2017-02-20 12:06 - Updated: 2017-02-20 12:06
Summary
Security update for flash-player
Severity
Important
Notes
Title of the patch: Security update for flash-player
Description of the patch: The Adobe flash-player was updated to 24.0.0.221 to fix the following issues: Security update to 24.0.0.221 (bsc#1025258), fixing the following vulnerabilities advised under APSB17-04: * type confusion vulnerability that could lead to code execution (CVE-2017-2995). * integer overflow vulnerability that could lead to code execution (CVE-2017-2987). * use-after-free vulnerabilities that could lead to code execution (CVE-2017-2982, CVE-2017-2985, CVE-2017-2993, CVE-2017-2994). * heap buffer overflow vulnerabilities that could lead to code execution (CVE-2017- 2984, CVE-2017-2986, CVE-2017-2992). * memory corruption vulnerabilities that could lead to code execution (CVE-2017-2988, CVE-2017-2990, CVE-2017-2991, CVE-2017-2996).
Patchnames: SUSE-SLE-DESKTOP-12-SP1-2017-268,SUSE-SLE-WE-12-SP1-2017-268
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
CVE-2017-2982
8.8 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Affected products
Product Identifier Version Remediation
Unresolved product id: SUSE Linux Enterprise Desktop 12 SP1:flash-player-24.0.0.221-158.1.x86_64 —
Vendor Fix
Unresolved product id: SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-24.0.0.221-158.1.x86_64 —
Vendor Fix
Unresolved product id: SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-24.0.0.221-158.1.x86_64 —
Vendor Fix
Unresolved product id: SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-24.0.0.221-158.1.x86_64 —
Vendor Fix
Threats
Impact critical
CVE-2017-2985
8.8 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Affected products
Recommended 4 products, the same list as for CVE-2017-2982
Threats
Impact critical
CVE-2017-2986
8.8 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Affected products
Recommended 4 products, the same list as for CVE-2017-2982
Threats
Impact critical
CVE-2017-2987
8.8 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Affected products
Recommended 4 products, the same list as for CVE-2017-2982
Threats
Impact critical
CVE-2017-2988
8.8 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Affected products
Recommended 4 products, the same list as for CVE-2017-2982
Threats
Impact critical
CVE-2017-2990
8.8 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Affected products
Recommended 4 products, the same list as for CVE-2017-2982
Threats
Impact critical
CVE-2017-2991
8.8 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Affected products
Recommended 4 products, the same list as for CVE-2017-2982
Threats
Impact critical
CVE-2017-2992
8.8 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Affected products
Recommended 4 products, the same list as for CVE-2017-2982
Threats
Impact critical
CVE-2017-2993
8.8 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Affected products
Recommended 4 products, the same list as for CVE-2017-2982
Threats
Impact critical
CVE-2017-2994
8.8 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Affected products
Recommended 4 products, the same list as for CVE-2017-2982
Threats
Impact critical
CVE-2017-2995
8.8 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Affected products
Recommended 4 products, the same list as for CVE-2017-2982
Threats
Impact critical
CVE-2017-2996
8.8 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Affected products
Recommended 4 products, the same list as for CVE-2017-2982
Threats
Impact critical
References
URL Category
https://www.suse.com/support/security/rating/ external
https://ftp.suse.com/pub/projects/security/csaf/s… self
https://www.suse.com/support/update/announcement/… self
https://lists.suse.com/pipermail/sle-security-upd… self
https://bugzilla.suse.com/1025258 self
https://www.suse.com/security/cve/CVE-2017-2982/ self
https://www.suse.com/security/cve/CVE-2017-2985/ self
https://www.suse.com/security/cve/CVE-2017-2986/ self
https://www.suse.com/security/cve/CVE-2017-2987/ self
https://www.suse.com/security/cve/CVE-2017-2988/ self
https://www.suse.com/security/cve/CVE-2017-2990/ self
https://www.suse.com/security/cve/CVE-2017-2991/ self
https://www.suse.com/security/cve/CVE-2017-2992/ self
https://www.suse.com/security/cve/CVE-2017-2993/ self
https://www.suse.com/security/cve/CVE-2017-2994/ self
https://www.suse.com/security/cve/CVE-2017-2995/ self
https://www.suse.com/security/cve/CVE-2017-2996/ self
https://www.suse.com/security/cve/CVE-2017-2982 external
https://bugzilla.suse.com/1025258 external
https://www.suse.com/security/cve/CVE-2017-2985 external
https://bugzilla.suse.com/1025258 external
https://www.suse.com/security/cve/CVE-2017-2986 external
https://bugzilla.suse.com/1025258 external
https://www.suse.com/security/cve/CVE-2017-2987 external
https://bugzilla.suse.com/1025258 external
https://www.suse.com/security/cve/CVE-2017-2988 external
https://bugzilla.suse.com/1025258 external
https://www.suse.com/security/cve/CVE-2017-2990 external
https://bugzilla.suse.com/1025258 external
https://www.suse.com/security/cve/CVE-2017-2991 external
https://bugzilla.suse.com/1025258 external
https://www.suse.com/security/cve/CVE-2017-2992 external
https://bugzilla.suse.com/1025258 external
https://www.suse.com/security/cve/CVE-2017-2993 external
https://bugzilla.suse.com/1025258 external
https://www.suse.com/security/cve/CVE-2017-2994 external
https://bugzilla.suse.com/1025258 external
https://www.suse.com/security/cve/CVE-2017-2995 external
https://bugzilla.suse.com/1025258 external
https://www.suse.com/security/cve/CVE-2017-2996 external
https://bugzilla.suse.com/1025258 external
To clipboard 

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://www.suse.com/support/security/rating/",
      "text": "important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright 2024 SUSE LLC. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Security update for flash-player",
        "title": "Title of the patch"
      },
      {
        "category": "description",
        "text": "\nThe Adobe flash-player was updated to 24.0.0.221 to fix the following issues:\n\nSecurity update to 24.0.0.221 (bsc#1025258), fixing the following\n  vulnerabilities advised under APSB17-04:\n\n* type confusion vulnerability that could lead to code execution (CVE-2017-2995).\n* integer overflow vulnerability that could lead to code execution (CVE-2017-2987).\n* use-after-free vulnerabilities that could lead to code execution (CVE-2017-2982, CVE-2017-2985, CVE-2017-2993, CVE-2017-2994).\n* heap buffer overflow vulnerabilities that could lead to code execution (CVE-2017- 2984, CVE-2017-2986, CVE-2017-2992).\n* memory corruption vulnerabilities that could lead to code execution (CVE-2017-2988, CVE-2017-2990, CVE-2017-2991, CVE-2017-2996).\n",
        "title": "Description of the patch"
      },
      {
        "category": "details",
        "text": "SUSE-SLE-DESKTOP-12-SP1-2017-268,SUSE-SLE-WE-12-SP1-2017-268",
        "title": "Patchnames"
      },
      {
        "category": "legal_disclaimer",
        "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
        "title": "Terms of use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://www.suse.com/support/security/contact/",
      "name": "SUSE Product Security Team",
      "namespace": "https://www.suse.com/"
    },
    "references": [
      {
        "category": "external",
        "summary": "SUSE ratings",
        "url": "https://www.suse.com/support/security/rating/"
      },
      {
        "category": "self",
        "summary": "URL of this CSAF notice",
        "url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2017_0523-1.json"
      },
      {
        "category": "self",
        "summary": "URL for SUSE-SU-2017:0523-1",
        "url": "https://www.suse.com/support/update/announcement/2017/suse-su-20170523-1/"
      },
      {
        "category": "self",
        "summary": "E-Mail link for SUSE-SU-2017:0523-1",
        "url": "https://lists.suse.com/pipermail/sle-security-updates/2017-February/002657.html"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1025258",
        "url": "https://bugzilla.suse.com/1025258"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2017-2982 page",
        "url": "https://www.suse.com/security/cve/CVE-2017-2982/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2017-2985 page",
        "url": "https://www.suse.com/security/cve/CVE-2017-2985/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2017-2986 page",
        "url": "https://www.suse.com/security/cve/CVE-2017-2986/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2017-2987 page",
        "url": "https://www.suse.com/security/cve/CVE-2017-2987/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2017-2988 page",
        "url": "https://www.suse.com/security/cve/CVE-2017-2988/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2017-2990 page",
        "url": "https://www.suse.com/security/cve/CVE-2017-2990/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2017-2991 page",
        "url": "https://www.suse.com/security/cve/CVE-2017-2991/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2017-2992 page",
        "url": "https://www.suse.com/security/cve/CVE-2017-2992/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2017-2993 page",
        "url": "https://www.suse.com/security/cve/CVE-2017-2993/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2017-2994 page",
        "url": "https://www.suse.com/security/cve/CVE-2017-2994/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2017-2995 page",
        "url": "https://www.suse.com/security/cve/CVE-2017-2995/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2017-2996 page",
        "url": "https://www.suse.com/security/cve/CVE-2017-2996/"
      }
    ],
    "title": "Security update for flash-player",
    "tracking": {
      "current_release_date": "2017-02-20T12:06:55Z",
      "generator": {
        "date": "2017-02-20T12:06:55Z",
        "engine": {
          "name": "cve-database.git:bin/generate-csaf.pl",
          "version": "1"
        }
      },
      "id": "SUSE-SU-2017:0523-1",
      "initial_release_date": "2017-02-20T12:06:55Z",
      "revision_history": [
        {
          "date": "2017-02-20T12:06:55Z",
          "number": "1",
          "summary": "Current version"
        }
      ],
      "status": "final",
      "version": "1"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "flash-player-24.0.0.221-158.1.x86_64",
                "product": {
                  "name": "flash-player-24.0.0.221-158.1.x86_64",
                  "product_id": "flash-player-24.0.0.221-158.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "flash-player-gnome-24.0.0.221-158.1.x86_64",
                "product": {
                  "name": "flash-player-gnome-24.0.0.221-158.1.x86_64",
                  "product_id": "flash-player-gnome-24.0.0.221-158.1.x86_64"
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Desktop 12 SP1",
                "product": {
                  "name": "SUSE Linux Enterprise Desktop 12 SP1",
                  "product_id": "SUSE Linux Enterprise Desktop 12 SP1",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sled:12:sp1"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Workstation Extension 12 SP1",
                "product": {
                  "name": "SUSE Linux Enterprise Workstation Extension 12 SP1",
                  "product_id": "SUSE Linux Enterprise Workstation Extension 12 SP1",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sle-we:12:sp1"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "SUSE Linux Enterprise"
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "flash-player-24.0.0.221-158.1.x86_64 as component of SUSE Linux Enterprise Desktop 12 SP1",
          "product_id": "SUSE Linux Enterprise Desktop 12 SP1:flash-player-24.0.0.221-158.1.x86_64"
        },
        "product_reference": "flash-player-24.0.0.221-158.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Desktop 12 SP1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "flash-player-gnome-24.0.0.221-158.1.x86_64 as component of SUSE Linux Enterprise Desktop 12 SP1",
          "product_id": "SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-24.0.0.221-158.1.x86_64"
        },
        "product_reference": "flash-player-gnome-24.0.0.221-158.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Desktop 12 SP1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "flash-player-24.0.0.221-158.1.x86_64 as component of SUSE Linux Enterprise Workstation Extension 12 SP1",
          "product_id": "SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-24.0.0.221-158.1.x86_64"
        },
        "product_reference": "flash-player-24.0.0.221-158.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Workstation Extension 12 SP1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "flash-player-gnome-24.0.0.221-158.1.x86_64 as component of SUSE Linux Enterprise Workstation Extension 12 SP1",
          "product_id": "SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-24.0.0.221-158.1.x86_64"
        },
        "product_reference": "flash-player-gnome-24.0.0.221-158.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Workstation Extension 12 SP1"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2017-2982",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2017-2982"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Adobe Flash Player versions 24.0.0.194 and earlier have an exploitable use after free vulnerability in a routine related to player shutdown. Successful exploitation could lead to arbitrary code execution.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Desktop 12 SP1:flash-player-24.0.0.221-158.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-24.0.0.221-158.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-24.0.0.221-158.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-24.0.0.221-158.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2017-2982",
          "url": "https://www.suse.com/security/cve/CVE-2017-2982"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1025258 for CVE-2017-2982",
          "url": "https://bugzilla.suse.com/1025258"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Desktop 12 SP1:flash-player-24.0.0.221-158.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-24.0.0.221-158.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-24.0.0.221-158.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-24.0.0.221-158.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Desktop 12 SP1:flash-player-24.0.0.221-158.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-24.0.0.221-158.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-24.0.0.221-158.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-24.0.0.221-158.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2017-02-20T12:06:55Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2017-2982"
    },
    {
      "cve": "CVE-2017-2985",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2017-2985"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Adobe Flash Player versions 24.0.0.194 and earlier have an exploitable use after free vulnerability in the ActionScript 3 BitmapData class. Successful exploitation could lead to arbitrary code execution.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Desktop 12 SP1:flash-player-24.0.0.221-158.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-24.0.0.221-158.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-24.0.0.221-158.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-24.0.0.221-158.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2017-2985",
          "url": "https://www.suse.com/security/cve/CVE-2017-2985"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1025258 for CVE-2017-2985",
          "url": "https://bugzilla.suse.com/1025258"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Desktop 12 SP1:flash-player-24.0.0.221-158.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-24.0.0.221-158.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-24.0.0.221-158.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-24.0.0.221-158.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Desktop 12 SP1:flash-player-24.0.0.221-158.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-24.0.0.221-158.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-24.0.0.221-158.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-24.0.0.221-158.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2017-02-20T12:06:55Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2017-2985"
    },
    {
      "cve": "CVE-2017-2986",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2017-2986"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Adobe Flash Player versions 24.0.0.194 and earlier have an exploitable heap overflow vulnerability in the Flash Video (FLV) codec. Successful exploitation could lead to arbitrary code execution.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Desktop 12 SP1:flash-player-24.0.0.221-158.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-24.0.0.221-158.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-24.0.0.221-158.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-24.0.0.221-158.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2017-2986",
          "url": "https://www.suse.com/security/cve/CVE-2017-2986"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1025258 for CVE-2017-2986",
          "url": "https://bugzilla.suse.com/1025258"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Desktop 12 SP1:flash-player-24.0.0.221-158.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-24.0.0.221-158.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-24.0.0.221-158.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-24.0.0.221-158.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Desktop 12 SP1:flash-player-24.0.0.221-158.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-24.0.0.221-158.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-24.0.0.221-158.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-24.0.0.221-158.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2017-02-20T12:06:55Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2017-2986"
    },
    {
      "cve": "CVE-2017-2987",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2017-2987"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Adobe Flash Player versions 24.0.0.194 and earlier have an exploitable integer overflow vulnerability related to Flash Broker COM. Successful exploitation could lead to arbitrary code execution.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Desktop 12 SP1:flash-player-24.0.0.221-158.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-24.0.0.221-158.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-24.0.0.221-158.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-24.0.0.221-158.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2017-2987",
          "url": "https://www.suse.com/security/cve/CVE-2017-2987"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1025258 for CVE-2017-2987",
          "url": "https://bugzilla.suse.com/1025258"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Desktop 12 SP1:flash-player-24.0.0.221-158.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-24.0.0.221-158.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-24.0.0.221-158.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-24.0.0.221-158.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Desktop 12 SP1:flash-player-24.0.0.221-158.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-24.0.0.221-158.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-24.0.0.221-158.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-24.0.0.221-158.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2017-02-20T12:06:55Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2017-2987"
    },
    {
      "cve": "CVE-2017-2988",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2017-2988"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Adobe Flash Player versions 24.0.0.194 and earlier have an exploitable memory corruption vulnerability when performing garbage collection. Successful exploitation could lead to arbitrary code execution.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Desktop 12 SP1:flash-player-24.0.0.221-158.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-24.0.0.221-158.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-24.0.0.221-158.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-24.0.0.221-158.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2017-2988",
          "url": "https://www.suse.com/security/cve/CVE-2017-2988"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1025258 for CVE-2017-2988",
          "url": "https://bugzilla.suse.com/1025258"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Desktop 12 SP1:flash-player-24.0.0.221-158.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-24.0.0.221-158.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-24.0.0.221-158.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-24.0.0.221-158.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Desktop 12 SP1:flash-player-24.0.0.221-158.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-24.0.0.221-158.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-24.0.0.221-158.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-24.0.0.221-158.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2017-02-20T12:06:55Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2017-2988"
    },
    {
      "cve": "CVE-2017-2990",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2017-2990"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Adobe Flash Player versions 24.0.0.194 and earlier have an exploitable memory corruption vulnerability in the h264 decompression routine. Successful exploitation could lead to arbitrary code execution.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Desktop 12 SP1:flash-player-24.0.0.221-158.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-24.0.0.221-158.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-24.0.0.221-158.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-24.0.0.221-158.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2017-2990",
          "url": "https://www.suse.com/security/cve/CVE-2017-2990"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1025258 for CVE-2017-2990",
          "url": "https://bugzilla.suse.com/1025258"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Desktop 12 SP1:flash-player-24.0.0.221-158.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-24.0.0.221-158.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-24.0.0.221-158.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-24.0.0.221-158.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Desktop 12 SP1:flash-player-24.0.0.221-158.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-24.0.0.221-158.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-24.0.0.221-158.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-24.0.0.221-158.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2017-02-20T12:06:55Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2017-2990"
    },
    {
      "cve": "CVE-2017-2991",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2017-2991"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Adobe Flash Player versions 24.0.0.194 and earlier have an exploitable memory corruption vulnerability in the h264 codec (related to decompression). Successful exploitation could lead to arbitrary code execution.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Desktop 12 SP1:flash-player-24.0.0.221-158.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-24.0.0.221-158.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-24.0.0.221-158.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-24.0.0.221-158.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2017-2991",
          "url": "https://www.suse.com/security/cve/CVE-2017-2991"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1025258 for CVE-2017-2991",
          "url": "https://bugzilla.suse.com/1025258"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Desktop 12 SP1:flash-player-24.0.0.221-158.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-24.0.0.221-158.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-24.0.0.221-158.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-24.0.0.221-158.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Desktop 12 SP1:flash-player-24.0.0.221-158.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-24.0.0.221-158.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-24.0.0.221-158.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-24.0.0.221-158.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2017-02-20T12:06:55Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2017-2991"
    },
    {
      "cve": "CVE-2017-2992",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2017-2992"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Adobe Flash Player versions 24.0.0.194 and earlier have an exploitable heap overflow vulnerability when parsing an MP4 header. Successful exploitation could lead to arbitrary code execution.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Desktop 12 SP1:flash-player-24.0.0.221-158.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-24.0.0.221-158.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-24.0.0.221-158.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-24.0.0.221-158.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2017-2992",
          "url": "https://www.suse.com/security/cve/CVE-2017-2992"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1025258 for CVE-2017-2992",
          "url": "https://bugzilla.suse.com/1025258"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Desktop 12 SP1:flash-player-24.0.0.221-158.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-24.0.0.221-158.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-24.0.0.221-158.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-24.0.0.221-158.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Desktop 12 SP1:flash-player-24.0.0.221-158.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-24.0.0.221-158.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-24.0.0.221-158.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-24.0.0.221-158.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2017-02-20T12:06:55Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2017-2992"
    },
    {
      "cve": "CVE-2017-2993",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2017-2993"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Adobe Flash Player versions 24.0.0.194 and earlier have an exploitable use after free vulnerability related to event handlers. Successful exploitation could lead to arbitrary code execution.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Desktop 12 SP1:flash-player-24.0.0.221-158.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-24.0.0.221-158.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-24.0.0.221-158.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-24.0.0.221-158.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2017-2993",
          "url": "https://www.suse.com/security/cve/CVE-2017-2993"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1025258 for CVE-2017-2993",
          "url": "https://bugzilla.suse.com/1025258"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Desktop 12 SP1:flash-player-24.0.0.221-158.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-24.0.0.221-158.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-24.0.0.221-158.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-24.0.0.221-158.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Desktop 12 SP1:flash-player-24.0.0.221-158.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-24.0.0.221-158.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-24.0.0.221-158.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-24.0.0.221-158.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2017-02-20T12:06:55Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2017-2993"
    },
    {
      "cve": "CVE-2017-2994",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2017-2994"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Adobe Flash Player versions 24.0.0.194 and earlier have an exploitable use after free vulnerability in Primetime SDK event dispatch. Successful exploitation could lead to arbitrary code execution.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Desktop 12 SP1:flash-player-24.0.0.221-158.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-24.0.0.221-158.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-24.0.0.221-158.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-24.0.0.221-158.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2017-2994",
          "url": "https://www.suse.com/security/cve/CVE-2017-2994"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1025258 for CVE-2017-2994",
          "url": "https://bugzilla.suse.com/1025258"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Desktop 12 SP1:flash-player-24.0.0.221-158.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-24.0.0.221-158.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-24.0.0.221-158.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-24.0.0.221-158.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Desktop 12 SP1:flash-player-24.0.0.221-158.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-24.0.0.221-158.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-24.0.0.221-158.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-24.0.0.221-158.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2017-02-20T12:06:55Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2017-2994"
    },
    {
      "cve": "CVE-2017-2995",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2017-2995"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Adobe Flash Player versions 24.0.0.194 and earlier have an exploitable type confusion vulnerability related to the MessageChannel class. Successful exploitation could lead to arbitrary code execution.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Desktop 12 SP1:flash-player-24.0.0.221-158.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-24.0.0.221-158.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-24.0.0.221-158.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-24.0.0.221-158.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2017-2995",
          "url": "https://www.suse.com/security/cve/CVE-2017-2995"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1025258 for CVE-2017-2995",
          "url": "https://bugzilla.suse.com/1025258"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Desktop 12 SP1:flash-player-24.0.0.221-158.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-24.0.0.221-158.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-24.0.0.221-158.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-24.0.0.221-158.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Desktop 12 SP1:flash-player-24.0.0.221-158.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-24.0.0.221-158.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-24.0.0.221-158.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-24.0.0.221-158.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2017-02-20T12:06:55Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2017-2995"
    },
    {
      "cve": "CVE-2017-2996",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2017-2996"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Adobe Flash Player versions 24.0.0.194 and earlier have an exploitable memory corruption vulnerability in Primetime SDK. Successful exploitation could lead to arbitrary code execution.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Desktop 12 SP1:flash-player-24.0.0.221-158.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-24.0.0.221-158.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-24.0.0.221-158.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-24.0.0.221-158.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2017-2996",
          "url": "https://www.suse.com/security/cve/CVE-2017-2996"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1025258 for CVE-2017-2996",
          "url": "https://bugzilla.suse.com/1025258"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Desktop 12 SP1:flash-player-24.0.0.221-158.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-24.0.0.221-158.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-24.0.0.221-158.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-24.0.0.221-158.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Desktop 12 SP1:flash-player-24.0.0.221-158.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-24.0.0.221-158.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-24.0.0.221-158.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-24.0.0.221-158.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2017-02-20T12:06:55Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2017-2996"
    }
  ]
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.


Detection rules are retrieved from Rulezet.


Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.