Advisories » MGASA-2018-0478

Updated flash-player-plugin packages fix security vulnerability

Publication date: 07 Dec 2018
Modification date: 07 Dec 2018
Type: security
Affected Mageia releases : 6
CVE: CVE-2018-15982 , CVE-2018-15983

Description

Use after free flaw enabling arbitrary code execution. (CVE-2018-15982)

Insecure Library Loading (DLL hijacking) flaw enabling privilege escalation.
(CVE-2018-15983)
                

References

• https://bugs.mageia.org/show_bug.cgi?id=23950
• https://helpx.adobe.com/security/products/flash-player/apsb18-42.html
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-15982
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-15983

SRPMS

6/nonfree

• flash-player-plugin-32.0.0.101-1.mga6.nonfree