critical Security update for flash-player

SUSE-SLE-WE-12-2015-323

flash-player was updated to fix two security issues. These security issues were fixed: - CVE-2015-5123: Use-after-free vulnerability in the BitmapData class in the ActionScript 3 (AS3) implementation in Adobe Flash Player allowed remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted Flash content that overrides a valueOf function (bsc#937752). - CVE-2015-5122: Use-after-free vulnerability in the DisplayObject class in the ActionScript 3 (AS3) implementation in Adobe Flash Player allowed remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted Flash content that leverages improper handling of the opaqueBackground property (bsc#937752).

• Release Date
  Jul 16 2015
• References
  Bugzilla: 937752
  CVEs: CVE-2015-5123, CVE-2015-5122
• Type
  security
• Severity
  critical

cloud_download Downloads

SUSE Linux Enterprise Workstation Extension 12 x86_64

• Packages
  flash-player
  Adobe Flash Plugin and Standalone Player

  11.2.202.491-96.1 lock rpm lock nosrc

  11.2.202.491-96.1 lock rpm lock nosrc

  flash-player-gnome
  Adobe Flash Plugin and Standalone Player Settings

  11.2.202.491-96.1 lock rpm

  11.2.202.491-96.1 lock rpm