Advisories » MGASA-2015-0404

Updated flash-player-plugin package fix security vulnerabilities

Publication date: 17 Oct 2015
Modification date: 17 Oct 2015
Type: security
Affected Mageia releases : 5
CVE: CVE-2015-7645 , CVE-2015-7647 , CVE-2015-7648

Description

Adobe Flash Player 11.2.202.540 contains fixes to critical security
vulnerabilities found in earlier versions that could potentially allow
an attacker to take control of the affected system.

This update resolves type confusion vulnerabilities that could lead to
code execution (CVE-2015-7645, CVE-2015-7647, CVE-2015-7648).

An exploit for CVE-2015-7645 is being used in the wild.
                

References

• https://bugs.mageia.org/show_bug.cgi?id=16970
• https://helpx.adobe.com/security/products/flash-player/apsb15-27.html
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7645
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7647
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7648

SRPMS

5/nonfree

• flash-player-plugin-11.2.202.540-1.mga5.nonfree