SUSE-SU-2015:1740-1: flash-player&distro=SUSE Linux Enterprise Desktop 12 SUSE Linux Enterprise
Vulnerability summary
SUSE-SU-2015:1740-1 is a vulnerability in flash-player&distro=SUSE Linux Enterprise Desktop 12 SUSE Linux Enterprise with no CVSS score yet.
Advisory lineage
Upstream 13 · Downstream 0 · Related 13Timeline
- 14-10-2015PublishedVulnerability first disclosed.
- 02-05-2025Last modifiedVulnerability information updated.
Description
Security update for flash-player flash-player was updated to version 11.2.202.535 to fix 13 security issues (bsc#950169). These security issues were fixed: - A vulnerability that could be exploited to bypass the same-origin-policy and lead to information disclosure (CVE-2015-7628). - A defense-in-depth feature in the Flash broker API (CVE-2015-5569). - Use-after-free vulnerabilities that could lead to code execution (CVE-2015-7629, CVE-2015-7631, CVE-2015-7643, CVE-2015-7644). - A buffer overflow vulnerability that could lead to code execution (CVE-2015-7632). - Memory corruption vulnerabilities that could lead to code execution (CVE-2015-7625, CVE-2015-7626, CVE-2015-7627, CVE-2015-7630, CVE-2015-7633, CVE-2015-7634).
CVSS metrics
Risk metrics not yet published.
EPSS trend
No EPSS score has been published for this record yet.
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Suse2 products
- flash-player&distro=SUSE Linux Enterprise Desktop 12< 11.2.202.535-105.1
- flash-player&distro=SUSE Linux Enterprise Workstation Extension 12< 11.2.202.535-105.1
1 vendor · 2 products
References
15 links- bugzilla.suse.com/950169REPORT