SUSE-SU-2015:1043-1

Dashboard / Vulnerabilities / SUSE-SU-2015:1043-1

SUSE-SU-2015:1043-1

Summary: Security update for flash-player

Details: The following issues are fixed by this updated: * CVE-2015-3096: These updates resolve a vulnerability that could be exploited to bypass the fix for CVE-2014-5333. * CVE-2015-3098, CVE-2015-3099, CVE-2015-3102:These updates resolve vulnerabilities that could be exploited to bypass the same-origin-policy and lead to information disclosure. * CVE-2015-3100: These updates resolve a stack overflow vulnerability that could lead to code execution. * CVE-2015-3103, CVE-2015-3106, CVE-2015-3107: These updates resolve use-after-free vulnerabilities that could lead to code execution. * CVE-2015-3104: These updates resolve an integer overflow vulnerability that could lead to code execution. * CVE-2015-3105: These updates resolve a memory corruption vulnerability that could lead to code execution. * CVE-2015-3108: These updates resolve a memory leak vulnerability that could be used to bypass ASLR (CVE-2015-3108). (bsc#934088)

References: https://www.suse.com/support/update/announcement/2015/suse-su-20151043-1/, https://bugzilla.suse.com/934088, https://www.suse.com/security/cve/CVE-2015-3096, https://www.suse.com/security/cve/CVE-2015-3098, https://www.suse.com/security/cve/CVE-2015-3099, https://www.suse.com/security/cve/CVE-2015-3100, https://www.suse.com/security/cve/CVE-2015-3102, https://www.suse.com/security/cve/CVE-2015-3103, https://www.suse.com/security/cve/CVE-2015-3104, https://www.suse.com/security/cve/CVE-2015-3105, https://www.suse.com/security/cve/CVE-2015-3106, https://www.suse.com/security/cve/CVE-2015-3107, https://www.suse.com/security/cve/CVE-2015-3108