Lucene search

K
suseSuseOPENSUSE-SU-2015:1267-1
HistoryJul 18, 2015 - 7:10 p.m.

flash-player (critical)

2015-07-1819:10:21
lists.opensuse.org
26

EPSS

0.974

Percentile

99.9%

flash-player was updated to fix two security issues.

These security issues were fixed:

  • CVE-2015-5123: Use-after-free vulnerability in the BitmapData class in
    the ActionScript 3 (AS3) implementation in Adobe Flash Player allowed
    remote attackers to execute arbitrary code or cause a denial of service
    (memory corruption) via crafted Flash content that overrides a valueOf
    function (bsc#937752).
  • CVE-2015-5122: Use-after-free vulnerability in the DisplayObject class
    in the ActionScript 3 (AS3) implementation in Adobe Flash Player allowed
    remote attackers to execute arbitrary code or cause a denial of service
    (memory corruption) via crafted Flash content that leverages improper
    handling of the opaqueBackground property (bsc#937752).