SUSE-SU-2015:0493-1

    Dashboard / Vulnerabilities / SUSE-SU-2015:0493-1

    SUSE-SU-2015:0493-1

    Published: 14 Nov 2014Last Modified: 4 Feb 2026

    Summary: Security update for flash-player

    Details: flash-player was updated to version 11.2.202.418 to fix 18 security issues: * Memory corruption vulnerabilities that could lead to code execution (CVE-2014-0576, CVE-2014-0581, CVE-2014-8440, CVE-2014-8441). * Use-after-free vulnerabilities that could lead to code execution (CVE-2014-0573, CVE-2014-0588, CVE-2014-8438). * A double free vulnerability that could lead to code execution (CVE-2014-0574). * Type confusion vulnerabilities that could lead to code execution (CVE-2014-0577, CVE-2014-0584, CVE-2014-0585, CVE-2014-0586, CVE-2014-0590). * Heap buffer overflow vulnerabilities that could lead to code execution (CVE-2014-0582, CVE-2014-0589). * An information disclosure vulnerability that could be exploited to disclose session tokens (CVE-2014-8437). * A heap buffer overflow vulnerability that could be exploited to perform privilege escalation from low to medium integrity level (CVE-2014-0583). * A permission issue that could be exploited to perform privilege escalation from low to medium integrity level (CVE-2014-8442). Further information can be found at http://helpx.adobe.com/security/products/flash-player/apsb14-24.html <http://helpx.adobe.com/security/products/flash-player/apsb14-24.html> . Security Issues: * CVE-2014-0576 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0576> * CVE-2014-0581 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0581> * CVE-2014-8440 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8440> * CVE-2014-8441 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8441> * CVE-2014-0573 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0573> * CVE-2014-0588 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0588> * CVE-2014-8438 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8438> * CVE-2014-0574 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0574> * CVE-2014-0577 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0577> * CVE-2014-0584 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0584> * CVE-2014-0585 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0585> * CVE-2014-0586 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0586> * CVE-2014-0590 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0590> * CVE-2014-0582 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0582> * CVE-2014-0589 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0589> * CVE-2014-8437 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8437> * CVE-2014-0583 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0583> * CVE-2014-8442 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8442>

    References: https://www.suse.com/support/update/announcement/2015/suse-su-20150493-1/, https://bugzilla.suse.com/824512, https://bugzilla.suse.com/828810, https://bugzilla.suse.com/839897, https://bugzilla.suse.com/850220, https://bugzilla.suse.com/854881, https://bugzilla.suse.com/856386, https://bugzilla.suse.com/858822, https://bugzilla.suse.com/862288, https://bugzilla.suse.com/865021, https://bugzilla.suse.com/867808, https://bugzilla.suse.com/872692, https://bugzilla.suse.com/875577, https://bugzilla.suse.com/877649, https://bugzilla.suse.com/882187, https://bugzilla.suse.com/886472, https://bugzilla.suse.com/891688, https://bugzilla.suse.com/895856, https://bugzilla.suse.com/901334, https://bugzilla.suse.com/905032, https://bugzilla.suse.com/907257, https://bugzilla.suse.com/909219, https://bugzilla.suse.com/913057, https://bugzilla.suse.com/914333, https://bugzilla.suse.com/914463, https://bugzilla.suse.com/915918, https://bugzilla.suse.com/922033, https://bugzilla.suse.com/927089, https://bugzilla.suse.com/930677, https://bugzilla.suse.com/934088, https://bugzilla.suse.com/935701, https://www.suse.com/security/cve/CVE-2013-3343, https://www.suse.com/security/cve/CVE-2013-3344, https://www.suse.com/security/cve/CVE-2013-3345, https://www.suse.com/security/cve/CVE-2013-3347, https://www.suse.com/security/cve/CVE-2013-3361, https://www.suse.com/security/cve/CVE-2013-3362, https://www.suse.com/security/cve/CVE-2013-3363, https://www.suse.com/security/cve/CVE-2013-5324, https://www.suse.com/security/cve/CVE-2013-5329, https://www.suse.com/security/cve/CVE-2013-5330, https://www.suse.com/security/cve/CVE-2013-5331, https://www.suse.com/security/cve/CVE-2013-5332, https://www.suse.com/security/cve/CVE-2014-0491, https://www.suse.com/security/cve/CVE-2014-0492, https://www.suse.com/security/cve/CVE-2014-0497, https://www.suse.com/security/cve/CVE-2014-0498, https://www.suse.com/security/cve/CVE-2014-0499, https://www.suse.com/security/cve/CVE-2014-0502, https://www.suse.com/security/cve/CVE-2014-0503, https://www.suse.com/security/cve/CVE-2014-0504, https://www.suse.com/security/cve/CVE-2014-0506, https://www.suse.com/security/cve/CVE-2014-0507, https://www.suse.com/security/cve/CVE-2014-0508, https://www.suse.com/security/cve/CVE-2014-0509, https://www.suse.com/security/cve/CVE-2014-0510, https://www.suse.com/security/cve/CVE-2014-0515, https://www.suse.com/security/cve/CVE-2014-0516, https://www.suse.com/security/cve/CVE-2014-0517, https://www.suse.com/security/cve/CVE-2014-0518, https://www.suse.com/security/cve/CVE-2014-0519, https://www.suse.com/security/cve/CVE-2014-0520, https://www.suse.com/security/cve/CVE-2014-0531, https://www.suse.com/security/cve/CVE-2014-0532, https://www.suse.com/security/cve/CVE-2014-0533, https://www.suse.com/security/cve/CVE-2014-0534, https://www.suse.com/security/cve/CVE-2014-0535, https://www.suse.com/security/cve/CVE-2014-0536, https://www.suse.com/security/cve/CVE-2014-0537, https://www.suse.com/security/cve/CVE-2014-0538, https://www.suse.com/security/cve/CVE-2014-0539, https://www.suse.com/security/cve/CVE-2014-0540, https://www.suse.com/security/cve/CVE-2014-0541, https://www.suse.com/security/cve/CVE-2014-0542, https://www.suse.com/security/cve/CVE-2014-0543, https://www.suse.com/security/cve/CVE-2014-0544, https://www.suse.com/security/cve/CVE-2014-0545, https://www.suse.com/security/cve/CVE-2014-0547, https://www.suse.com/security/cve/CVE-2014-0548, https://www.suse.com/security/cve/CVE-2014-0549, https://www.suse.com/security/cve/CVE-2014-0550, https://www.suse.com/security/cve/CVE-2014-0551, https://www.suse.com/security/cve/CVE-2014-0552, https://www.suse.com/security/cve/CVE-2014-0553, https://www.suse.com/security/cve/CVE-2014-0554, https://www.suse.com/security/cve/CVE-2014-0555, https://www.suse.com/security/cve/CVE-2014-0556, https://www.suse.com/security/cve/CVE-2014-0557, https://www.suse.com/security/cve/CVE-2014-0558, https://www.suse.com/security/cve/CVE-2014-0559, https://www.suse.com/security/cve/CVE-2014-0564, https://www.suse.com/security/cve/CVE-2014-0569, https://www.suse.com/security/cve/CVE-2014-0573, https://www.suse.com/security/cve/CVE-2014-0574, https://www.suse.com/security/cve/CVE-2014-0576, https://www.suse.com/security/cve/CVE-2014-0577, https://www.suse.com/security/cve/CVE-2014-0580, https://www.suse.com/security/cve/CVE-2014-0581, https://www.suse.com/security/cve/CVE-2014-0582, https://www.suse.com/security/cve/CVE-2014-0583, https://www.suse.com/security/cve/CVE-2014-0584, https://www.suse.com/security/cve/CVE-2014-0585, https://www.suse.com/security/cve/CVE-2014-0586, https://www.suse.com/security/cve/CVE-2014-0587, https://www.suse.com/security/cve/CVE-2014-0588, https://www.suse.com/security/cve/CVE-2014-0589, https://www.suse.com/security/cve/CVE-2014-0590, https://www.suse.com/security/cve/CVE-2014-4671, https://www.suse.com/security/cve/CVE-2014-8437, https://www.suse.com/security/cve/CVE-2014-8438, https://www.suse.com/security/cve/CVE-2014-8439, https://www.suse.com/security/cve/CVE-2014-8440, https://www.suse.com/security/cve/CVE-2014-8441, https://www.suse.com/security/cve/CVE-2014-8442, https://www.suse.com/security/cve/CVE-2014-8443, https://www.suse.com/security/cve/CVE-2014-9162, https://www.suse.com/security/cve/CVE-2014-9163, https://www.suse.com/security/cve/CVE-2014-9164, https://www.suse.com/security/cve/CVE-2015-0301, https://www.suse.com/security/cve/CVE-2015-0302, https://www.suse.com/security/cve/CVE-2015-0303, https://www.suse.com/security/cve/CVE-2015-0304, https://www.suse.com/security/cve/CVE-2015-0305, https://www.suse.com/security/cve/CVE-2015-0306, https://www.suse.com/security/cve/CVE-2015-0307, https://www.suse.com/security/cve/CVE-2015-0308, https://www.suse.com/security/cve/CVE-2015-0309, https://www.suse.com/security/cve/CVE-2015-0310, https://www.suse.com/security/cve/CVE-2015-0311, https://www.suse.com/security/cve/CVE-2015-0313, https://www.suse.com/security/cve/CVE-2015-0314, https://www.suse.com/security/cve/CVE-2015-0315, https://www.suse.com/security/cve/CVE-2015-0316, https://www.suse.com/security/cve/CVE-2015-0317, https://www.suse.com/security/cve/CVE-2015-0318, https://www.suse.com/security/cve/CVE-2015-0319, https://www.suse.com/security/cve/CVE-2015-0320, https://www.suse.com/security/cve/CVE-2015-0321, https://www.suse.com/security/cve/CVE-2015-0322, https://www.suse.com/security/cve/CVE-2015-0323, https://www.suse.com/security/cve/CVE-2015-0324, https://www.suse.com/security/cve/CVE-2015-0325, https://www.suse.com/security/cve/CVE-2015-0326, https://www.suse.com/security/cve/CVE-2015-0327, https://www.suse.com/security/cve/CVE-2015-0328, https://www.suse.com/security/cve/CVE-2015-0329, https://www.suse.com/security/cve/CVE-2015-0330, https://www.suse.com/security/cve/CVE-2015-0332, https://www.suse.com/security/cve/CVE-2015-0333, https://www.suse.com/security/cve/CVE-2015-0334, https://www.suse.com/security/cve/CVE-2015-0335, https://www.suse.com/security/cve/CVE-2015-0336, https://www.suse.com/security/cve/CVE-2015-0337, https://www.suse.com/security/cve/CVE-2015-0338, https://www.suse.com/security/cve/CVE-2015-0339, https://www.suse.com/security/cve/CVE-2015-0340, https://www.suse.com/security/cve/CVE-2015-0341, https://www.suse.com/security/cve/CVE-2015-0342, https://www.suse.com/security/cve/CVE-2015-0346, https://www.suse.com/security/cve/CVE-2015-0347, https://www.suse.com/security/cve/CVE-2015-0348, https://www.suse.com/security/cve/CVE-2015-0349, https://www.suse.com/security/cve/CVE-2015-0350, https://www.suse.com/security/cve/CVE-2015-0351, https://www.suse.com/security/cve/CVE-2015-0352, https://www.suse.com/security/cve/CVE-2015-0353, https://www.suse.com/security/cve/CVE-2015-0354, https://www.suse.com/security/cve/CVE-2015-0355, https://www.suse.com/security/cve/CVE-2015-0356, https://www.suse.com/security/cve/CVE-2015-0357, https://www.suse.com/security/cve/CVE-2015-0358, https://www.suse.com/security/cve/CVE-2015-0359, https://www.suse.com/security/cve/CVE-2015-0360, https://www.suse.com/security/cve/CVE-2015-3038, https://www.suse.com/security/cve/CVE-2015-3039, https://www.suse.com/security/cve/CVE-2015-3040, https://www.suse.com/security/cve/CVE-2015-3041, https://www.suse.com/security/cve/CVE-2015-3042, https://www.suse.com/security/cve/CVE-2015-3043, https://www.suse.com/security/cve/CVE-2015-3044, https://www.suse.com/security/cve/CVE-2015-3077, https://www.suse.com/security/cve/CVE-2015-3078, https://www.suse.com/security/cve/CVE-2015-3079, https://www.suse.com/security/cve/CVE-2015-3080, https://www.suse.com/security/cve/CVE-2015-3081, https://www.suse.com/security/cve/CVE-2015-3082, https://www.suse.com/security/cve/CVE-2015-3083, https://www.suse.com/security/cve/CVE-2015-3084, https://www.suse.com/security/cve/CVE-2015-3085, https://www.suse.com/security/cve/CVE-2015-3086, https://www.suse.com/security/cve/CVE-2015-3087, https://www.suse.com/security/cve/CVE-2015-3088, https://www.suse.com/security/cve/CVE-2015-3089, https://www.suse.com/security/cve/CVE-2015-3090, https://www.suse.com/security/cve/CVE-2015-3091, https://www.suse.com/security/cve/CVE-2015-3092, https://www.suse.com/security/cve/CVE-2015-3093, https://www.suse.com/security/cve/CVE-2015-3096, https://www.suse.com/security/cve/CVE-2015-3098, https://www.suse.com/security/cve/CVE-2015-3099, https://www.suse.com/security/cve/CVE-2015-3100, https://www.suse.com/security/cve/CVE-2015-3102, https://www.suse.com/security/cve/CVE-2015-3103, https://www.suse.com/security/cve/CVE-2015-3106, https://www.suse.com/security/cve/CVE-2015-3107, https://www.suse.com/security/cve/CVE-2015-3108, https://www.suse.com/security/cve/CVE-2015-3113

    Affected packages

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High