CVE-2009-1864 Common Vulnerabilities and Exposures

Upstream information

CVE-2009-1864 at MITRE

Description

Heap-based buffer overflow in Adobe Flash Player before 9.0.246.0 and 10.x before 10.0.32.18, and Adobe AIR before 1.5.2, allows attackers to cause a denial of service (application crash) or possibly execute arbitrary code via unspecified vectors.

SUSE information

Overall state of this security issue: Resolved

This issue is currently rated as having critical severity.

CVSS v2 Scores
	National Vulnerability Database
Base Score	9.3
Vector	AV:N/AC:M/Au:N/C:C/I:C/A:C
Access Vector	Network
Access Complexity	Medium
Authentication	None
Confidentiality Impact	Complete
Integrity Impact	Complete
Availability Impact	Complete

No SUSE Bugzilla entries cross referenced.

SUSE Security Advisories:

SUSE-SA:2009:041, published Wed, 05 Aug 2009 14:00:00 +0000

List of released packages

Product(s)	Fixed package version(s)	References
SUSE Linux Enterprise Desktop 12 SP1	`flash-player >= 11.2.202.548-111.1` `flash-player-gnome >= 11.2.202.548-111.1`	Patchnames: SUSE Linux Enterprise Desktop 12 SP1 GA flash-player-11.2.202.548-111.1 SUSE Linux Enterprise Workstation Extension 12 SP1 GA flash-player-11.2.202.548-111.1
SUSE Linux Enterprise Desktop 12	`flash-player >= 11.2.202.406-1.3` `flash-player-gnome >= 11.2.202.406-1.3`	Patchnames: SUSE Linux Enterprise Desktop 12 GA flash-player-11.2.202.406-1.3 SUSE Linux Enterprise Workstation Extension 12 GA flash-player-11.2.202.406-1.3
SUSE Linux Enterprise Server 12 SP1 SUSE Linux Enterprise Server for SAP Applications 12 SP1 SUSE Linux Enterprise Workstation Extension 12 SP1	`flash-player >= 11.2.202.548-111.1` `flash-player-gnome >= 11.2.202.548-111.1`	Patchnames: SUSE Linux Enterprise Workstation Extension 12 SP1 GA flash-player-11.2.202.548-111.1
SUSE Linux Enterprise Server 12 SUSE Linux Enterprise Server for SAP Applications 12 SUSE Linux Enterprise Workstation Extension 12	`flash-player >= 11.2.202.406-1.3` `flash-player-gnome >= 11.2.202.406-1.3`	Patchnames: SUSE Linux Enterprise Workstation Extension 12 GA flash-player-11.2.202.406-1.3

SUSE Timeline for this CVE

CVE page created: Tue Jul 9 16:38:51 2013
CVE page last modified: Sat Jun 15 20:56:37 2024