Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 544
Alerts This Week
Warning Icon 1 544

SUSE: 2016:0716-1 Important: Flash-Player Code Execution

suse
Calendar Grey March 11, 2016
Scroller Suse
Resolve 23 vulnerabilities in flash player via this SUSE Security Patch, tackling urgent risks efficiently.
An update that fixes 23 vulnerabilities is now available

Summary

Adobe flash-player was updated to 11.2.202.577 to fix the following list of security issues (bsc#970547): These updates resolve integer overflow vulnerabilities that could lead to code execution (CVE-2016-0963, CVE-2016-0993, CVE-2016-1010). These updates resolve use-after-free vulnerabilities that could lead to code execution (CVE-2016-0987, CVE-2016-0988, CVE-2016-0990, CVE-2016-0991, CVE-2016-0994, CVE-2016-0995, CVE-2016-0996, CVE-2016-0997, CVE-2016-0998, CVE-2016-0999, CVE-2016-1000). These updates resolve a heap overflow vulnerability that could lead to code execution (CVE-2016-1001). These updates resolve memory corruption vulnerabilities that could lead to code execution (CVE-2016-0960, CVE-2016-0961, CVE-2016-0962,

References

#970547

Cross- CVE-2016-0960 CVE-2016-0961 CVE-2016-0962

CVE-2016-0963 CVE-2016-0986 CVE-2016-0987

CVE-2016-0988 CVE-2016-0989 CVE-2016-0990

CVE-2016-0991 CVE-2016-0992 CVE-2016-0993

CVE-2016-0994 CVE-2016-0995 CVE-2016-0996

CVE-2016-0997 CVE-2016-0998 CVE-2016-0999

CVE-2016-1000 CVE-2016-1001 CVE-2016-1002

CVE-2016-1005 CVE-2016-1010

Affected Products:

SUSE Linux Enterprise Desktop 11-SP4

https://www.suse.com/security/cve/CVE-2016-0960.html

https://www.suse.com/security/cve/CVE-2016-0961.html

https://www.suse.com/security/cve/CVE-2016-0962.html

https://www.suse.com/security/cve/CVE-2016-0963.html

https://www.suse.com/security/cve/CVE-2016-0986.html

https://www.suse.com/security/cve/CVE-2016-0987.html

Severity
important
Lowest
Low
Medium
High
Critical

Announcement ID: SUSE-SU-2016:0716-1
Rating: important

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.