Lucene search

K
gentooGentoo FoundationGLSA-200610-02
HistoryOct 04, 2006 - 12:00 a.m.

Adobe Flash Player: Arbitrary code execution

2006-10-0400:00:00
Gentoo Foundation
security.gentoo.org
10

5.1 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:H/Au:N/C:P/I:P/A:P

0.798 High

EPSS

Percentile

98.3%

Background

The Adobe Flash Player is a renderer for Flash files - commonly used to provide interactive websites, digital experiences and mobile content.

Description

The Adobe Flash Player contains multiple unspecified vulnerabilities.

Impact

An attacker could entice a user to view a malicious Flash file and execute arbitrary code with the rights of the user running the player.

Workaround

There is no known workaround at this time.

Resolution

All Adobe Flash Player users should upgrade to the latest version:

 # emerge --sync
 # emerge --ask --oneshot --verbose ">=www-plugins/adobe-flash-7.0.68"
OSVersionArchitecturePackageVersionFilename
Gentooanyallwww-plugins/adobe-flash< 7.0.68UNKNOWN

5.1 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:H/Au:N/C:P/I:P/A:P

0.798 High

EPSS

Percentile

98.3%