Alerts This Week
Warning Icon 1 666
Alerts This Week
Warning Icon 1 666

SUSE 11 SP1: 2012:0280-1 Critical Flash Player Security Update

suse
Calendar Grey February 18, 2012
Dist Suse Esm H88
Essential SUSE security patch for flash-player resolves several vulnerabilities, accompanied by detailed installation guidelines.
An update that fixes 7 vulnerabilities is now available

Summary

flash-player was updated to version 11.1.102.62. It fixes lots of security issues, some already exploited in the wild. Details can be found at: tml These vulnerabilities could cause a crash and potentially allow an attacker to take control of the affected system. This update also resolves a universal cross-site scripting vulnerability that could be used to take actions on a user's behalf on any website or webmail provider, if the user visits a malicious website. There are reports that this vulnerability (CVE-2012-0767) is being exploited in the wild in active targeted attacks designed to trick the user into clicking on a malicious link delivered in an email message (Internet Explorer on Windows only). Security Issue references:

References

#747297

Cross- CVE-2012-0751 CVE-2012-0752 CVE-2012-0753

CVE-2012-0754 CVE-2012-0755 CVE-2012-0756

CVE-2012-0767

Affected Products:

SUSE Linux Enterprise Desktop 11 SP1 FOR SP2

SUSE Linux Enterprise Desktop 11 SP1

https://www.suse.com/security/cve/CVE-2012-0751.html

https://www.suse.com/security/cve/CVE-2012-0752.html

https://www.suse.com/security/cve/CVE-2012-0753.html

https://www.suse.com/security/cve/CVE-2012-0754.html

https://www.suse.com/security/cve/CVE-2012-0755.html

https://www.suse.com/security/cve/CVE-2012-0756.html

https://www.suse.com/security/cve/CVE-2012-0767.html

Severity
critical
Lowest
Low
Medium
High
Critical

Announcement ID: SUSE-SU-2012:0280-1
Rating: critical

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here