Action not permitted
Modal body text goes here.
Modal Title
Modal Body
CVE-2016-0965 (GCVE-0-2016-0965)
Vulnerability from cvelistv5 – Published: 2016-02-10 20:00 – Updated: 2024-08-05 22:38- n/a
| URL | Tags |
|---|---|
| http://lists.opensuse.org/opensuse-security-annou… | vendor-advisoryx_refsource_SUSE |
| http://www.securitytracker.com/id/1034970 | vdb-entryx_refsource_SECTRACK |
| https://security.gentoo.org/glsa/201603-07 | vendor-advisoryx_refsource_GENTOO |
| http://rhn.redhat.com/errata/RHSA-2016-0166.html | vendor-advisoryx_refsource_REDHAT |
| http://lists.opensuse.org/opensuse-security-annou… | vendor-advisoryx_refsource_SUSE |
| http://lists.opensuse.org/opensuse-security-annou… | vendor-advisoryx_refsource_SUSE |
| https://www.exploit-db.com/exploits/39460/ | exploitx_refsource_EXPLOIT-DB |
| https://helpx.adobe.com/security/products/flash-p… | x_refsource_CONFIRM |
| http://lists.opensuse.org/opensuse-security-annou… | vendor-advisoryx_refsource_SUSE |
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-05T22:38:41.465Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"name": "SUSE-SU-2016:0400",
"tags": [
"vendor-advisory",
"x_refsource_SUSE",
"x_transferred"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00027.html"
},
{
"name": "1034970",
"tags": [
"vdb-entry",
"x_refsource_SECTRACK",
"x_transferred"
],
"url": "http://www.securitytracker.com/id/1034970"
},
{
"name": "GLSA-201603-07",
"tags": [
"vendor-advisory",
"x_refsource_GENTOO",
"x_transferred"
],
"url": "https://security.gentoo.org/glsa/201603-07"
},
{
"name": "RHSA-2016:0166",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT",
"x_transferred"
],
"url": "http://rhn.redhat.com/errata/RHSA-2016-0166.html"
},
{
"name": "openSUSE-SU-2016:0415",
"tags": [
"vendor-advisory",
"x_refsource_SUSE",
"x_transferred"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00030.html"
},
{
"name": "openSUSE-SU-2016:0412",
"tags": [
"vendor-advisory",
"x_refsource_SUSE",
"x_transferred"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00029.html"
},
{
"name": "39460",
"tags": [
"exploit",
"x_refsource_EXPLOIT-DB",
"x_transferred"
],
"url": "https://www.exploit-db.com/exploits/39460/"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "https://helpx.adobe.com/security/products/flash-player/apsb16-04.html"
},
{
"name": "SUSE-SU-2016:0398",
"tags": [
"vendor-advisory",
"x_refsource_SUSE",
"x_transferred"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00025.html"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"datePublic": "2016-02-09T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "Adobe Flash Player before 18.0.0.329 and 19.x and 20.x before 20.0.0.306 on Windows and OS X and before 11.2.202.569 on Linux, Adobe AIR before 20.0.0.260, Adobe AIR SDK before 20.0.0.260, and Adobe AIR SDK \u0026 Compiler before 20.0.0.260 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-0964, CVE-2016-0966, CVE-2016-0967, CVE-2016-0968, CVE-2016-0969, CVE-2016-0970, CVE-2016-0972, CVE-2016-0976, CVE-2016-0977, CVE-2016-0978, CVE-2016-0979, CVE-2016-0980, and CVE-2016-0981."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2017-09-09T09:57:01.000Z",
"orgId": "078d4453-3bcd-4900-85e6-15281da43538",
"shortName": "adobe"
},
"references": [
{
"name": "SUSE-SU-2016:0400",
"tags": [
"vendor-advisory",
"x_refsource_SUSE"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00027.html"
},
{
"name": "1034970",
"tags": [
"vdb-entry",
"x_refsource_SECTRACK"
],
"url": "http://www.securitytracker.com/id/1034970"
},
{
"name": "GLSA-201603-07",
"tags": [
"vendor-advisory",
"x_refsource_GENTOO"
],
"url": "https://security.gentoo.org/glsa/201603-07"
},
{
"name": "RHSA-2016:0166",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "http://rhn.redhat.com/errata/RHSA-2016-0166.html"
},
{
"name": "openSUSE-SU-2016:0415",
"tags": [
"vendor-advisory",
"x_refsource_SUSE"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00030.html"
},
{
"name": "openSUSE-SU-2016:0412",
"tags": [
"vendor-advisory",
"x_refsource_SUSE"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00029.html"
},
{
"name": "39460",
"tags": [
"exploit",
"x_refsource_EXPLOIT-DB"
],
"url": "https://www.exploit-db.com/exploits/39460/"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://helpx.adobe.com/security/products/flash-player/apsb16-04.html"
},
{
"name": "SUSE-SU-2016:0398",
"tags": [
"vendor-advisory",
"x_refsource_SUSE"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00025.html"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "psirt@adobe.com",
"ID": "CVE-2016-0965",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "Adobe Flash Player before 18.0.0.329 and 19.x and 20.x before 20.0.0.306 on Windows and OS X and before 11.2.202.569 on Linux, Adobe AIR before 20.0.0.260, Adobe AIR SDK before 20.0.0.260, and Adobe AIR SDK \u0026 Compiler before 20.0.0.260 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-0964, CVE-2016-0966, CVE-2016-0967, CVE-2016-0968, CVE-2016-0969, CVE-2016-0970, CVE-2016-0972, CVE-2016-0976, CVE-2016-0977, CVE-2016-0978, CVE-2016-0979, CVE-2016-0980, and CVE-2016-0981."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "SUSE-SU-2016:0400",
"refsource": "SUSE",
"url": "http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00027.html"
},
{
"name": "1034970",
"refsource": "SECTRACK",
"url": "http://www.securitytracker.com/id/1034970"
},
{
"name": "GLSA-201603-07",
"refsource": "GENTOO",
"url": "https://security.gentoo.org/glsa/201603-07"
},
{
"name": "RHSA-2016:0166",
"refsource": "REDHAT",
"url": "http://rhn.redhat.com/errata/RHSA-2016-0166.html"
},
{
"name": "openSUSE-SU-2016:0415",
"refsource": "SUSE",
"url": "http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00030.html"
},
{
"name": "openSUSE-SU-2016:0412",
"refsource": "SUSE",
"url": "http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00029.html"
},
{
"name": "39460",
"refsource": "EXPLOIT-DB",
"url": "https://www.exploit-db.com/exploits/39460/"
},
{
"name": "https://helpx.adobe.com/security/products/flash-player/apsb16-04.html",
"refsource": "CONFIRM",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb16-04.html"
},
{
"name": "SUSE-SU-2016:0398",
"refsource": "SUSE",
"url": "http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00025.html"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "078d4453-3bcd-4900-85e6-15281da43538",
"assignerShortName": "adobe",
"cveId": "CVE-2016-0965",
"datePublished": "2016-02-10T20:00:00.000Z",
"dateReserved": "2015-12-22T00:00:00.000Z",
"dateUpdated": "2024-08-05T22:38:41.465Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1",
"vulnerability-lookup:meta": {
"epss": {
"cve": "CVE-2016-0965",
"date": "2026-05-30",
"epss": "0.4906",
"percentile": "0.97824"
},
"nvd": "{\"cve\":{\"id\":\"CVE-2016-0965\",\"sourceIdentifier\":\"psirt@adobe.com\",\"published\":\"2016-02-10T20:59:12.797\",\"lastModified\":\"2026-05-06T22:30:45.220\",\"vulnStatus\":\"Modified\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"Adobe Flash Player before 18.0.0.329 and 19.x and 20.x before 20.0.0.306 on Windows and OS X and before 11.2.202.569 on Linux, Adobe AIR before 20.0.0.260, Adobe AIR SDK before 20.0.0.260, and Adobe AIR SDK \u0026 Compiler before 20.0.0.260 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-0964, CVE-2016-0966, CVE-2016-0967, CVE-2016-0968, CVE-2016-0969, CVE-2016-0970, CVE-2016-0972, CVE-2016-0976, CVE-2016-0977, CVE-2016-0978, CVE-2016-0979, CVE-2016-0980, and CVE-2016-0981.\"},{\"lang\":\"es\",\"value\":\"Adobe Flash Player en versiones anteriores a 18.0.0.329 y 19.x y 20.x en versiones anteriores a 20.0.0.306 en Windows y OS X y en versiones anteriores a 11.2.202.569 en Linux, Adobe AIR en versiones anteriores a 20.0.0.260, Adobe AIR SDK en versiones anteriores a 20.0.0.260 y Adobe AIR SDK \u0026 Compiler en versiones anteriores a 20.0.0.260 permiten a atacantes ejecutar c\u00f3digo arbitrario o causar una denegaci\u00f3n de servicio (corrupci\u00f3n de memoria) a trav\u00e9s de vectores no especificados, una vulnerabilidad diferente a CVE-2016-0964, CVE-2016-0966, CVE-2016-0967, CVE-2016-0968, CVE-2016-0969, CVE-2016-0970, CVE-2016-0972, CVE-2016-0976, CVE-2016-0977, CVE-2016-0978, CVE-2016-0979, CVE-2016-0980 y CVE-2016-0981.\"}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H\",\"baseScore\":8.8,\"baseSeverity\":\"HIGH\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"REQUIRED\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":2.8,\"impactScore\":5.9}],\"cvssMetricV2\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"2.0\",\"vectorString\":\"AV:N/AC:M/Au:N/C:C/I:C/A:C\",\"baseScore\":9.3,\"accessVector\":\"NETWORK\",\"accessComplexity\":\"MEDIUM\",\"authentication\":\"NONE\",\"confidentialityImpact\":\"COMPLETE\",\"integrityImpact\":\"COMPLETE\",\"availabilityImpact\":\"COMPLETE\"},\"baseSeverity\":\"HIGH\",\"exploitabilityScore\":8.6,\"impactScore\":10.0,\"acInsufInfo\":false,\"obtainAllPrivilege\":false,\"obtainUserPrivilege\":false,\"obtainOtherPrivilege\":false,\"userInteractionRequired\":true}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-787\"}]}],\"configurations\":[{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:flash_player:*:*:*:*:*:*:*:*\",\"versionEndIncluding\":\"11.2.202.559\",\"matchCriteriaId\":\"9C8C62C1-327A-4D04-A51C-0614DB4F5493\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"703AF700-7A70-47E2-BC3A-7FD03B3CA9C1\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:flash_player_desktop_runtime:*:*:*:*:*:*:*:*\",\"versionEndIncluding\":\"20.0.0.286\",\"matchCriteriaId\":\"BAFA5674-4EBC-4587-87C6-22A522B487C6\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:o:apple:mac_os_x:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"4781BF1E-8A4E-4AFF-9540-23D523EE30DD\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"A2572D17-1DE6-457B-99CC-64AFD54487EA\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:flash_player:*:*:*:*:esr:*:*:*\",\"versionEndIncluding\":\"18.0.0.326\",\"matchCriteriaId\":\"002CFEA6-D147-44B4-90FC-0D3C68D96082\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:o:apple:mac_os_x:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"4781BF1E-8A4E-4AFF-9540-23D523EE30DD\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"A2572D17-1DE6-457B-99CC-64AFD54487EA\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"21540673-614A-4D40-8BD7-3F07723803B0\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"E93068DB-549B-45AB-8E5C-00EB5D8B5CF8\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:flash_player:*:*:*:*:*:internet_explorer:*:*\",\"versionEndIncluding\":\"20.0.0.272\",\"matchCriteriaId\":\"F40FBAAB-92FC-45AF-B656-E87ECC4C4816\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:flash_player:*:*:*:*:*:chrome:*:*\",\"versionEndIncluding\":\"20.0.0.286\",\"matchCriteriaId\":\"686929A4-EB67-47B6-87EC-453BCD13FE20\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:o:apple:mac_os_x:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"4781BF1E-8A4E-4AFF-9540-23D523EE30DD\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:o:google:chrome_os:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"D32ACF6F-5FF7-4815-8EAD-4719F5FC9B79\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"703AF700-7A70-47E2-BC3A-7FD03B3CA9C1\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"A2572D17-1DE6-457B-99CC-64AFD54487EA\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"21540673-614A-4D40-8BD7-3F07723803B0\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:flash_player:*:*:*:*:*:edge:*:*\",\"versionEndIncluding\":\"20.0.0.272\",\"matchCriteriaId\":\"E823E5FE-7367-41DE-8CD7-842C5C2F53CE\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:air_desktop_runtime:*:*:*:*:*:*:*:*\",\"versionEndIncluding\":\"20.0.0.233\",\"matchCriteriaId\":\"18BA497D-0C1D-451E-B54F-4028FD9B9F3B\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:o:apple:mac_os_x:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"4781BF1E-8A4E-4AFF-9540-23D523EE30DD\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"A2572D17-1DE6-457B-99CC-64AFD54487EA\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:air_sdk:*:*:*:*:*:*:*:*\",\"versionEndIncluding\":\"20.0.0.233\",\"matchCriteriaId\":\"F09C5C9A-0493-4601-84AE-3A9C5985231D\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:o:apple:iphone_os:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"B5415705-33E5-46D5-8E4D-9EBADC8C5705\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:o:apple:mac_os_x:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"4781BF1E-8A4E-4AFF-9540-23D523EE30DD\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:o:google:android:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"A2572D17-1DE6-457B-99CC-64AFD54487EA\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:air_sdk_\\\\\u0026_compiler:*:*:*:*:*:*:*:*\",\"versionEndIncluding\":\"20.0.0.233\",\"matchCriteriaId\":\"00D08966-361A-430D-9B39-ED143404EBF6\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:o:apple:iphone_os:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"B5415705-33E5-46D5-8E4D-9EBADC8C5705\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:o:apple:mac_os_x:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"4781BF1E-8A4E-4AFF-9540-23D523EE30DD\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:o:google:android:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"A2572D17-1DE6-457B-99CC-64AFD54487EA\"}]}]}],\"references\":[{\"url\":\"http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00025.html\",\"source\":\"psirt@adobe.com\",\"tags\":[\"Broken Link\",\"Third Party Advisory\"]},{\"url\":\"http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00027.html\",\"source\":\"psirt@adobe.com\",\"tags\":[\"Broken Link\",\"Third Party Advisory\"]},{\"url\":\"http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00029.html\",\"source\":\"psirt@adobe.com\",\"tags\":[\"Broken Link\",\"Third Party Advisory\"]},{\"url\":\"http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00030.html\",\"source\":\"psirt@adobe.com\",\"tags\":[\"Broken Link\",\"Third Party Advisory\"]},{\"url\":\"http://rhn.redhat.com/errata/RHSA-2016-0166.html\",\"source\":\"psirt@adobe.com\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://www.securitytracker.com/id/1034970\",\"source\":\"psirt@adobe.com\",\"tags\":[\"Broken Link\",\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"https://helpx.adobe.com/security/products/flash-player/apsb16-04.html\",\"source\":\"psirt@adobe.com\",\"tags\":[\"Patch\",\"Vendor Advisory\"]},{\"url\":\"https://security.gentoo.org/glsa/201603-07\",\"source\":\"psirt@adobe.com\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://www.exploit-db.com/exploits/39460/\",\"source\":\"psirt@adobe.com\",\"tags\":[\"Exploit\",\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00025.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Broken Link\",\"Third Party Advisory\"]},{\"url\":\"http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00027.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Broken Link\",\"Third Party Advisory\"]},{\"url\":\"http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00029.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Broken Link\",\"Third Party Advisory\"]},{\"url\":\"http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00030.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Broken Link\",\"Third Party Advisory\"]},{\"url\":\"http://rhn.redhat.com/errata/RHSA-2016-0166.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://www.securitytracker.com/id/1034970\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Broken Link\",\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"https://helpx.adobe.com/security/products/flash-player/apsb16-04.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\",\"Vendor Advisory\"]},{\"url\":\"https://security.gentoo.org/glsa/201603-07\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://www.exploit-db.com/exploits/39460/\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Exploit\",\"Third Party Advisory\",\"VDB Entry\"]}]}}"
}
}
{
"CVSS 2.0": "AV:N/AC:L/Au:N/C:C/I:C/A:C",
"CVSS 3.0": null,
"CVSS 4.0": null,
"remediation_\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": null,
"remediation_\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435": null,
"\u0412\u0435\u043d\u0434\u043e\u0440 \u041f\u041e": "Adobe Systems Inc.",
"\u0412\u0435\u0440\u0441\u0438\u044f \u041f\u041e": "\u0434\u043e 20.0.0.260 (Adobe Integrated Runtime), \u0434\u043e 18.0.0.329 (Flash Player), \u043e\u0442 19.0 \u0434\u043e 20.0.0.306 (Flash Player), \u0434\u043e 11.2.202.569 (Flash Player)",
"\u0412\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u0435 \u043c\u0435\u0440\u044b \u043f\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044e": "\u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f Adobe Integrated Runtime \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 20.0.0.260, \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f Flash Player \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 20.0.0.306 \u043f\u043e\u0434 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435\u043c \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c Windows \u0438 Mac OS X, \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f Flash Player \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 11.2.202.569 \u043f\u043e\u0434 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435\u043c \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Linux ",
"\u0414\u0430\u0442\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f": "10.02.2016",
"\u0414\u0430\u0442\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0433\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f": "23.03.2021",
"\u0414\u0430\u0442\u0430 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438": "02.03.2016",
"\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": "BDU:2016-00475",
"\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u044b \u0434\u0440\u0443\u0433\u0438\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "CVE-2016-0965",
"\u0418\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430",
"\u041a\u043b\u0430\u0441\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043a\u043e\u0434\u0430",
"\u041d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 \u041f\u041e": "Adobe Integrated Runtime, Flash Player",
"\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u041e\u0421 \u0438 \u0442\u0438\u043f \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b": "\u0421\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u043e \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f Linux . 64-bit, \u0421\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u043e \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f Linux . 32-bit, Apple Inc. MacOS X 32-bit, \u0421\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u043e \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f Linux . PowerPC, Microsoft Corp Windows - 64-bit, Microsoft Corp Windows - 32-bit, Apple Inc. MacOS X 64-bit, Apple Inc. MacOS X PowerPC, Google Inc Android . 64-bit, Google Inc Android . 32-bit, Google Inc Android . ARM, \u0421\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u043e \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f Linux . ARM, Microsoft Corp Windows - ARM, BlackBerry Limited Tablet OS . ARM, Apple Inc. iOS . PowerPC, Apple Inc. MacOS X ARM, Apple Inc. iOS . ARM",
"\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u044b\u0445 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c Adobe Integrated Runtime \u0438 Flash Player, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e \u0432\u044b\u0437\u0432\u0430\u0442\u044c \u043e\u0442\u043a\u0430\u0437 \u0432 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u0438 \u0438\u043b\u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434",
"\u041d\u0430\u043b\u0438\u0447\u0438\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
"\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "\u0412\u044b\u0445\u043e\u0434 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u0438 \u0437\u0430 \u0433\u0440\u0430\u043d\u0438\u0446\u044b \u0431\u0443\u0444\u0435\u0440\u0430 \u0432 \u043f\u0430\u043c\u044f\u0442\u0438 (CWE-119)",
"\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u044b\u0445 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c Adobe Integrated Runtime \u0438 Flash Player \u0432\u044b\u0437\u0432\u0430\u043d\u0430 \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435\u043c \u0431\u0443\u0444\u0435\u0440\u0430. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e, \u0434\u0435\u0439\u0441\u0442\u0432\u0443\u044e\u0449\u0435\u043c\u0443 \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e, \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u0438\u043b\u0438 \u0432\u044b\u0437\u0432\u0430\u0442\u044c \u043e\u0442\u043a\u0430\u0437 \u0432 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u0438 (\u043f\u043e\u0432\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u0435 \u043f\u0430\u043c\u044f\u0442\u0438)",
"\u041f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
"\u041f\u0440\u043e\u0447\u0430\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f": "-",
"\u0421\u0432\u044f\u0437\u044c \u0441 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430\u043c\u0438 \u0418\u0411": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
"\u0421\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u0430",
"\u0421\u043f\u043e\u0441\u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
"\u0421\u043f\u043e\u0441\u043e\u0431 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
"\u0421\u0441\u044b\u043b\u043a\u0438 \u043d\u0430 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0438": "https://helpx.adobe.com/security/products/flash-player/apsb16-04.html",
"\u0421\u0442\u0430\u0442\u0443\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u043c",
"\u0422\u0438\u043f \u041f\u041e": "\u041f\u0440\u0438\u043a\u043b\u0430\u0434\u043d\u043e\u0435 \u041f\u041e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c",
"\u0422\u0438\u043f \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "CWE-119",
"\u0423\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 2.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 10)"
}
CERTFR-2016-AVI-054
Vulnerability from certfr_avis - Published: 2016-02-10 - Updated: 2016-02-10
De multiples vulnérabilités ont été corrigées dans les produits Adobe. Certaines d'entre elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance, un contournement de la politique de sécurité et une atteinte à la confidentialité des données.
Solution
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
None| Vendor | Product | Description | ||
|---|---|---|---|---|
| Adobe | N/A | Adobe Bridge CC versions antérieures à 6.2 pour Windows et Macintosh | ||
| Adobe | N/A | Adobe Connect versions antérieures à 9.5.2 pour Windows | ||
| Adobe | N/A | Adobe Flash Player ESR versions antérieures à 18.0.0.329 pour Windows et Macintosh | ||
| Adobe | N/A | Adobe Photoshop CC 2014 versions antérieures à 15.2.4 (2014.2.4) pour Windows et Macintosh | ||
| Adobe | N/A | Adobe Flash Player versions antérieures à 11.2.202.569 pour Linux | ||
| Adobe | N/A | AIR SDK versions antérieures à 20.0.0.260 pour Windows, Macintosh, Android et iOS | ||
| Adobe | N/A | Adobe Flash Player versions antérieures à 20.0.0.306 pour Windows et Macintosh | ||
| Adobe | N/A | Adobe Photoshop CC 2015 versions antérieures à 16.1.2 (2015.1.2) pour Windows et Macintosh | ||
| Adobe | N/A | AIR SDK & Compiler versions antérieures à 20.0.0.260 pour Windows, Macintosh, Android et iOS | ||
| Adobe | N/A | Adobe Experience Manager versions 6.1.0, 6.0.0, et 5.6.1 pour Windows, Unix, Linux et OS X |
| Title | Publication Time | Tags | ||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
||||||||||||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "Adobe Bridge CC versions ant\u00e9rieures \u00e0 6.2 pour Windows et Macintosh",
"product": {
"name": "N/A",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": "Adobe Connect versions ant\u00e9rieures \u00e0 9.5.2 pour Windows",
"product": {
"name": "N/A",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": "Adobe Flash Player ESR versions ant\u00e9rieures \u00e0 18.0.0.329 pour Windows et Macintosh",
"product": {
"name": "N/A",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": "Adobe Photoshop CC 2014 versions ant\u00e9rieures \u00e0 15.2.4 (2014.2.4) pour Windows et Macintosh",
"product": {
"name": "N/A",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": "Adobe Flash Player versions ant\u00e9rieures \u00e0 11.2.202.569 pour Linux",
"product": {
"name": "N/A",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": "AIR SDK versions ant\u00e9rieures \u00e0 20.0.0.260 pour Windows, Macintosh, Android et iOS",
"product": {
"name": "N/A",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": "Adobe Flash Player versions ant\u00e9rieures \u00e0 20.0.0.306 pour Windows et Macintosh",
"product": {
"name": "N/A",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": "Adobe Photoshop CC 2015 versions ant\u00e9rieures \u00e0 16.1.2 (2015.1.2) pour Windows et Macintosh",
"product": {
"name": "N/A",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": "AIR SDK \u0026 Compiler versions ant\u00e9rieures \u00e0 20.0.0.260 pour Windows, Macintosh, Android et iOS",
"product": {
"name": "N/A",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": "Adobe Experience Manager versions 6.1.0, 6.0.0, et 5.6.1 pour Windows, Unix, Linux et OS X",
"product": {
"name": "N/A",
"vendor": {
"name": "Adobe",
"scada": false
}
}
}
],
"affected_systems_content": null,
"content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
"cves": [
{
"name": "CVE-2016-0972",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-0972"
},
{
"name": "CVE-2016-0974",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-0974"
},
{
"name": "CVE-2016-0948",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-0948"
},
{
"name": "CVE-2016-0965",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-0965"
},
{
"name": "CVE-2016-0981",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-0981"
},
{
"name": "CVE-2016-0985",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-0985"
},
{
"name": "CVE-2016-0984",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-0984"
},
{
"name": "CVE-2016-0967",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-0967"
},
{
"name": "CVE-2016-0973",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-0973"
},
{
"name": "CVE-2016-0968",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-0968"
},
{
"name": "CVE-2016-0978",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-0978"
},
{
"name": "CVE-2016-0977",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-0977"
},
{
"name": "CVE-2016-0964",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-0964"
},
{
"name": "CVE-2016-0957",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-0957"
},
{
"name": "CVE-2016-0976",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-0976"
},
{
"name": "CVE-2016-0958",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-0958"
},
{
"name": "CVE-2016-0956",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-0956"
},
{
"name": "CVE-2016-0971",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-0971"
},
{
"name": "CVE-2016-0952",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-0952"
},
{
"name": "CVE-2016-0975",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-0975"
},
{
"name": "CVE-2016-0982",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-0982"
},
{
"name": "CVE-2016-0955",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-0955"
},
{
"name": "CVE-2016-0950",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-0950"
},
{
"name": "CVE-2016-0983",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-0983"
},
{
"name": "CVE-2016-0969",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-0969"
},
{
"name": "CVE-2016-0966",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-0966"
},
{
"name": "CVE-2016-0953",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-0953"
},
{
"name": "CVE-2016-0980",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-0980"
},
{
"name": "CVE-2016-0979",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-0979"
},
{
"name": "CVE-2016-0949",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-0949"
},
{
"name": "CVE-2016-0951",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-0951"
},
{
"name": "CVE-2016-0970",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-0970"
}
],
"initial_release_date": "2016-02-10T00:00:00",
"last_revision_date": "2016-02-10T00:00:00",
"links": [],
"reference": "CERTFR-2016-AVI-054",
"revisions": [
{
"description": "version initiale.",
"revision_date": "2016-02-10T00:00:00.000000"
}
],
"risks": [
{
"description": "Injection de requ\u00eates ill\u00e9gitimes par rebond (CSRF)"
},
{
"description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
},
{
"description": "Contournement de la politique de s\u00e9curit\u00e9"
},
{
"description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
}
],
"summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 corrig\u00e9es dans \u003cspan\nclass=\"textit\"\u003eles produits Adobe\u003c/span\u003e. Certaines d\u0027entre elles\npermettent \u00e0 un attaquant de provoquer une ex\u00e9cution de code arbitraire\n\u00e0 distance, un contournement de la politique de s\u00e9curit\u00e9 et une atteinte\n\u00e0 la confidentialit\u00e9 des donn\u00e9es.\n",
"title": "Multiples vuln\u00e9rabilit\u00e9s dans les produits Adobe",
"vendor_advisories": [
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Adobe APSB16-05 du 09 f\u00e9vrier 2016",
"url": "https://helpx.adobe.com/security/products/experience-manager/apsb16-05.html"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Adobe APSB16-04 du 09 f\u00e9vrier 2016",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb16-04.html"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Adobe APSB16-07 du 09 f\u00e9vrier 2016",
"url": "https://helpx.adobe.com/security/products/connect/apsb16-07.html"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Adobe APSB16-03 du 09 f\u00e9vrier 2016",
"url": "https://helpx.adobe.com/security/products/photoshop/apsb16-03.html"
}
]
}
CERTFR-2016-AVI-055
Vulnerability from certfr_avis - Published: 2016-02-10 - Updated: 2016-02-10
De multiples vulnérabilités ont été corrigées dans Microsoft Internet Explorer. Certaines d'entre elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance, un contournement de la politique de sécurité et une atteinte à la confidentialité des données.
Solution
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
None| Vendor | Product | Description | ||
|---|---|---|---|---|
| Microsoft | Windows | Microsoft Internet Explorer 11 pour Windows 8.1 | ||
| Microsoft | Windows | Microsoft Internet Explorer 10 pour Windows Server 2012 | ||
| Microsoft | Windows | Microsoft Internet Explorer 11 pour Windows 10 | ||
| Microsoft | Windows | Microsoft Internet Explorer 9 pour Windows Vista SP2 | ||
| Microsoft | Windows | Microsoft Internet Explorer 11 pour Windows RT 8.1 | ||
| Microsoft | Windows | Microsoft Internet Explorer 11 pour Windows Server 2008 R2 | ||
| Microsoft | Windows | Microsoft Internet Explorer 11 pour Windows Server 2012 R2 | ||
| Microsoft | Windows | Microsoft Internet Explorer 11 pour Windows 7 SP1 | ||
| Microsoft | Windows | Adobe Flash Player pour Windows Internet Explorer 10 et 11 sur Windows 8.1 et 10, Windows Server 2012 et 2012 R2, et Windows RT 8.1 | ||
| Microsoft | Windows | Microsoft Internet Explorer 9 pour Windows Server 2008 SP2 |
| Title | Publication Time | Tags | |||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|
|
|||||||||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "Microsoft Internet Explorer 11 pour Windows 8.1",
"product": {
"name": "Windows",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft Internet Explorer 10 pour Windows Server 2012",
"product": {
"name": "Windows",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft Internet Explorer 11 pour Windows 10",
"product": {
"name": "Windows",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft Internet Explorer 9 pour Windows Vista SP2",
"product": {
"name": "Windows",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft Internet Explorer 11 pour Windows RT 8.1",
"product": {
"name": "Windows",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft Internet Explorer 11 pour Windows Server 2008 R2",
"product": {
"name": "Windows",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft Internet Explorer 11 pour Windows Server 2012 R2",
"product": {
"name": "Windows",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft Internet Explorer 11 pour Windows 7 SP1",
"product": {
"name": "Windows",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Adobe Flash Player pour Windows Internet Explorer 10 et 11 sur Windows 8.1 et 10, Windows Server 2012 et 2012 R2, et Windows RT 8.1",
"product": {
"name": "Windows",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft Internet Explorer 9 pour Windows Server 2008 SP2",
"product": {
"name": "Windows",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
}
],
"affected_systems_content": null,
"content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
"cves": [
{
"name": "CVE-2016-0972",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-0972"
},
{
"name": "CVE-2016-0974",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-0974"
},
{
"name": "CVE-2016-0965",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-0965"
},
{
"name": "CVE-2016-0981",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-0981"
},
{
"name": "CVE-2016-0985",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-0985"
},
{
"name": "CVE-2016-0068",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-0068"
},
{
"name": "CVE-2016-0984",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-0984"
},
{
"name": "CVE-2016-0967",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-0967"
},
{
"name": "CVE-2016-0063",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-0063"
},
{
"name": "CVE-2016-0062",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-0062"
},
{
"name": "CVE-2016-0973",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-0973"
},
{
"name": "CVE-2016-0968",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-0968"
},
{
"name": "CVE-2016-0077",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-0077"
},
{
"name": "CVE-2016-0978",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-0978"
},
{
"name": "CVE-2016-0041",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-0041"
},
{
"name": "CVE-2016-0977",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-0977"
},
{
"name": "CVE-2016-0964",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-0964"
},
{
"name": "CVE-2016-0976",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-0976"
},
{
"name": "CVE-2016-0061",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-0061"
},
{
"name": "CVE-2016-0971",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-0971"
},
{
"name": "CVE-2016-0060",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-0060"
},
{
"name": "CVE-2016-0975",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-0975"
},
{
"name": "CVE-2016-0059",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-0059"
},
{
"name": "CVE-2016-0067",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-0067"
},
{
"name": "CVE-2016-0982",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-0982"
},
{
"name": "CVE-2016-0983",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-0983"
},
{
"name": "CVE-2016-0072",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-0072"
},
{
"name": "CVE-2016-0969",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-0969"
},
{
"name": "CVE-2016-0966",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-0966"
},
{
"name": "CVE-2016-0071",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-0071"
},
{
"name": "CVE-2016-0064",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-0064"
},
{
"name": "CVE-2016-0980",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-0980"
},
{
"name": "CVE-2016-0979",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-0979"
},
{
"name": "CVE-2016-0069",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-0069"
},
{
"name": "CVE-2016-0970",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-0970"
}
],
"initial_release_date": "2016-02-10T00:00:00",
"last_revision_date": "2016-02-10T00:00:00",
"links": [],
"reference": "CERTFR-2016-AVI-055",
"revisions": [
{
"description": "version initiale.",
"revision_date": "2016-02-10T00:00:00.000000"
}
],
"risks": [
{
"description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
},
{
"description": "Contournement de la politique de s\u00e9curit\u00e9"
},
{
"description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
},
{
"description": "\u00c9l\u00e9vation de privil\u00e8ges"
}
],
"summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 corrig\u00e9es dans \u003cspan\nclass=\"textit\"\u003eMicrosoft Internet Explorer\u003c/span\u003e. Certaines d\u0027entre\nelles permettent \u00e0 un attaquant de provoquer une ex\u00e9cution de code\narbitraire \u00e0 distance, un contournement de la politique de s\u00e9curit\u00e9 et\nune atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es.\n",
"title": "Multiples vuln\u00e9rabilit\u00e9s dans Microsoft Internet Explorer",
"vendor_advisories": [
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Adobe APSB16-04 du 09 f\u00e9vrier 2016",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb16-04.html"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft MS16-022 du 09 f\u00e9vrier 2016",
"url": "https://technet.microsoft.com/en-us/library/security/ms16-022"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft MS16-009 du 09 f\u00e9vrier 2016",
"url": "https://technet.microsoft.com/en-us/library/security/ms16-009"
}
]
}
CERTFR-2016-AVI-056
Vulnerability from certfr_avis - Published: 2016-02-10 - Updated: 2016-02-10
De multiples vulnérabilités ont été corrigées dans Microsoft Edge. Elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance et un contournement de la politique de sécurité.
Solution
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
None| Title | Publication Time | Tags | |||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|
|
|||||||||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "Microsoft Edge pour Windows 10",
"product": {
"name": "Edge",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Adobe Flash Player versions ant\u00e9rieures \u00e0 20.0.0.306 pour Microsoft Edge sur Windows 10",
"product": {
"name": "Edge",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
}
],
"affected_systems_content": null,
"content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
"cves": [
{
"name": "CVE-2016-0972",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-0972"
},
{
"name": "CVE-2016-0974",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-0974"
},
{
"name": "CVE-2016-0965",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-0965"
},
{
"name": "CVE-2016-0981",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-0981"
},
{
"name": "CVE-2016-0985",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-0985"
},
{
"name": "CVE-2016-0984",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-0984"
},
{
"name": "CVE-2016-0967",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-0967"
},
{
"name": "CVE-2016-0062",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-0062"
},
{
"name": "CVE-2016-0973",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-0973"
},
{
"name": "CVE-2016-0968",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-0968"
},
{
"name": "CVE-2016-0077",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-0077"
},
{
"name": "CVE-2016-0978",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-0978"
},
{
"name": "CVE-2016-0977",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-0977"
},
{
"name": "CVE-2016-0964",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-0964"
},
{
"name": "CVE-2016-0976",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-0976"
},
{
"name": "CVE-2016-0061",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-0061"
},
{
"name": "CVE-2016-0971",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-0971"
},
{
"name": "CVE-2016-0060",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-0060"
},
{
"name": "CVE-2016-0975",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-0975"
},
{
"name": "CVE-2016-0982",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-0982"
},
{
"name": "CVE-2016-0983",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-0983"
},
{
"name": "CVE-2016-0969",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-0969"
},
{
"name": "CVE-2016-0966",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-0966"
},
{
"name": "CVE-2016-0080",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-0080"
},
{
"name": "CVE-2016-0980",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-0980"
},
{
"name": "CVE-2016-0979",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-0979"
},
{
"name": "CVE-2016-0084",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-0084"
},
{
"name": "CVE-2016-0970",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-0970"
}
],
"initial_release_date": "2016-02-10T00:00:00",
"last_revision_date": "2016-02-10T00:00:00",
"links": [],
"reference": "CERTFR-2016-AVI-056",
"revisions": [
{
"description": "version initiale.",
"revision_date": "2016-02-10T00:00:00.000000"
}
],
"risks": [
{
"description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
},
{
"description": "Contournement de la politique de s\u00e9curit\u00e9"
}
],
"summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 corrig\u00e9es dans \u003cspan\nclass=\"textit\"\u003eMicrosoft Edge\u003c/span\u003e. Elles permettent \u00e0 un attaquant de\nprovoquer une ex\u00e9cution de code arbitraire \u00e0 distance et un\ncontournement de la politique de s\u00e9curit\u00e9.\n",
"title": "Multiples vuln\u00e9rabilit\u00e9s dans Microsoft Edge",
"vendor_advisories": [
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Adobe APSB16-04 du 09 f\u00e9vrier 2016",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb16-04.html"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft MS16-022 du 09 f\u00e9vrier 2016",
"url": "https://technet.microsoft.com/en-us/library/security/ms16-022"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft MS16-011 du 09 f\u00e9vrier 2016",
"url": "https://technet.microsoft.com/en-us/library/security/ms16-011"
}
]
}
用户可参考如下厂商提供的安全公告获取补丁以修复该漏洞: https://helpx.adobe.com/security/products/flash-player/apsb16-04.html
| Name | ['Adobe Flash Player(on Windows/OS X) \r\n19.x', 'Adobe Flash Player < 18.0.0.329', 'Adobe Flash Player(on Windows/OS X) 20.x(<20.0.0.306)', 'Adobe Flash Player(on Linux) < 11.2.202.569', 'Adobe AIR SDK & Compiler < 20.0.0.260', 'Adobe AIR SDK < 20.0.0.260', 'Adobe AIR < 20.0.0.260'] |
|---|
{
"cves": {
"cve": {
"cveNumber": "CVE-2016-0965"
}
},
"description": "Adobe Flash Player\u0026 Compiler\u662f\u7f8e\u56fd\u5965\u591a\u6bd4\uff08Adobe\uff09\u516c\u53f8\u7684\u4e00\u4e2a\u96c6\u6210\u7684\u591a\u5a92\u4f53\u64ad\u653e\u5668\uff0c\u77ed\u5c0f\u7cbe\u608d\uff0c\u80fd\u591f\u5728\u5404\u79cd\u6d4f\u89c8\u5668\u3001\u64cd\u4f5c\u7cfb\u7edf\u548c\u79fb\u52a8\u8bbe\u5907\u4e0a\u4f7f\u7528\u3002\r\n\r\n\u591a\u6b3eAdobe\u4ea7\u54c1\u4e2d\u5b58\u5728\u5b89\u5168\u6f0f\u6d1e\u3002\u653b\u51fb\u8005\u53ef\u5229\u7528\u8be5\u6f0f\u6d1e\u6267\u884c\u4efb\u610f\u4ee3\u7801\u6216\u9020\u6210\u62d2\u7edd\u670d\u52a1\uff08\u5185\u5b58\u7834\u574f\uff09\u3002",
"discovererName": "Ben Hawkes, Mateusz Jurczyk and Natalie Silvanovich of Google Project Zero",
"formalWay": "\u7528\u6237\u53ef\u53c2\u8003\u5982\u4e0b\u5382\u5546\u63d0\u4f9b\u7684\u5b89\u5168\u516c\u544a\u83b7\u53d6\u8865\u4e01\u4ee5\u4fee\u590d\u8be5\u6f0f\u6d1e\uff1a\r\nhttps://helpx.adobe.com/security/products/flash-player/apsb16-04.html",
"isEvent": "\u901a\u7528\u8f6f\u786c\u4ef6\u6f0f\u6d1e",
"number": "CNVD-2016-01046",
"openTime": "2016-02-17",
"patchDescription": "Adobe Flash Player\u0026 Compiler\u662f\u7f8e\u56fd\u5965\u591a\u6bd4\uff08Adobe\uff09\u516c\u53f8\u7684\u4e00\u4e2a\u96c6\u6210\u7684\u591a\u5a92\u4f53\u64ad\u653e\u5668\uff0c\u77ed\u5c0f\u7cbe\u608d\uff0c\u80fd\u591f\u5728\u5404\u79cd\u6d4f\u89c8\u5668\u3001\u64cd\u4f5c\u7cfb\u7edf\u548c\u79fb\u52a8\u8bbe\u5907\u4e0a\u4f7f\u7528\u3002\r\n\r\n\u591a\u6b3eAdobe\u4ea7\u54c1\u4e2d\u5b58\u5728\u5b89\u5168\u6f0f\u6d1e\u3002\u653b\u51fb\u8005\u53ef\u5229\u7528\u8be5\u6f0f\u6d1e\u6267\u884c\u4efb\u610f\u4ee3\u7801\u6216\u9020\u6210\u62d2\u7edd\u670d\u52a1\uff08\u5185\u5b58\u7834\u574f\uff09\u3002\u76ee\u524d\uff0c\u4f9b\u5e94\u5546\u53d1\u5e03\u4e86\u5b89\u5168\u516c\u544a\u53ca\u76f8\u5173\u8865\u4e01\u4fe1\u606f\uff0c\u4fee\u590d\u4e86\u6b64\u6f0f\u6d1e\u3002",
"patchName": "Adobe Flash Player\u0026 Compiler\u62d2\u7edd\u670d\u52a1\u6f0f\u6d1e\uff08CNVD-2016-01046\uff09\u7684\u8865\u4e01",
"products": {
"product": [
"Adobe Flash Player(on Windows/OS X) \r\n19.x",
"Adobe Flash Player \u003c 18.0.0.329",
"Adobe Flash Player(on Windows/OS X) 20.x(\u003c20.0.0.306)",
"Adobe Flash Player(on Linux) \u003c 11.2.202.569",
"Adobe AIR SDK \u0026 Compiler \u003c 20.0.0.260",
"Adobe AIR SDK \u003c 20.0.0.260",
"Adobe AIR \u003c 20.0.0.260"
]
},
"referenceLink": "https://helpx.adobe.com/security/products/flash-player/apsb16-04.html",
"serverity": "\u9ad8",
"submitTime": "2016-02-11",
"title": "Adobe Flash Player\u0026 Compiler\u62d2\u7edd\u670d\u52a1\u6f0f\u6d1e\uff08CNVD-2016-01046\uff09"
}
FKIE_CVE-2016-0965
Vulnerability from fkie_nvd - Published: 2016-02-10 20:59 - Updated: 2026-05-06 22:30| Vendor | Product | Version | |
|---|---|---|---|
| adobe | flash_player | * | |
| linux | linux_kernel | - | |
| adobe | flash_player_desktop_runtime | * | |
| apple | mac_os_x | - | |
| microsoft | windows | - | |
| adobe | flash_player | * | |
| apple | mac_os_x | - | |
| microsoft | windows | - | |
| microsoft | windows_10 | - | |
| microsoft | windows_8.1 | - | |
| adobe | flash_player | * | |
| adobe | flash_player | * | |
| apple | mac_os_x | - | |
| chrome_os | - | ||
| linux | linux_kernel | - | |
| microsoft | windows | - | |
| microsoft | windows_10 | - | |
| adobe | flash_player | * | |
| adobe | air_desktop_runtime | * | |
| apple | mac_os_x | - | |
| microsoft | windows | - | |
| adobe | air_sdk | * | |
| apple | iphone_os | - | |
| apple | mac_os_x | - | |
| android | - | ||
| microsoft | windows | - | |
| adobe | air_sdk_\&_compiler | * | |
| apple | iphone_os | - | |
| apple | mac_os_x | - | |
| android | - | ||
| microsoft | windows | - |
{
"configurations": [
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:adobe:flash_player:*:*:*:*:*:*:*:*",
"matchCriteriaId": "9C8C62C1-327A-4D04-A51C-0614DB4F5493",
"versionEndIncluding": "11.2.202.559",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
"matchCriteriaId": "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:adobe:flash_player_desktop_runtime:*:*:*:*:*:*:*:*",
"matchCriteriaId": "BAFA5674-4EBC-4587-87C6-22A522B487C6",
"versionEndIncluding": "20.0.0.286",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:apple:mac_os_x:-:*:*:*:*:*:*:*",
"matchCriteriaId": "4781BF1E-8A4E-4AFF-9540-23D523EE30DD",
"vulnerable": false
},
{
"criteria": "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
"matchCriteriaId": "A2572D17-1DE6-457B-99CC-64AFD54487EA",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:adobe:flash_player:*:*:*:*:esr:*:*:*",
"matchCriteriaId": "002CFEA6-D147-44B4-90FC-0D3C68D96082",
"versionEndIncluding": "18.0.0.326",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:apple:mac_os_x:-:*:*:*:*:*:*:*",
"matchCriteriaId": "4781BF1E-8A4E-4AFF-9540-23D523EE30DD",
"vulnerable": false
},
{
"criteria": "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
"matchCriteriaId": "A2572D17-1DE6-457B-99CC-64AFD54487EA",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
"matchCriteriaId": "21540673-614A-4D40-8BD7-3F07723803B0",
"vulnerable": false
},
{
"criteria": "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*",
"matchCriteriaId": "E93068DB-549B-45AB-8E5C-00EB5D8B5CF8",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:adobe:flash_player:*:*:*:*:*:internet_explorer:*:*",
"matchCriteriaId": "F40FBAAB-92FC-45AF-B656-E87ECC4C4816",
"versionEndIncluding": "20.0.0.272",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:adobe:flash_player:*:*:*:*:*:chrome:*:*",
"matchCriteriaId": "686929A4-EB67-47B6-87EC-453BCD13FE20",
"versionEndIncluding": "20.0.0.286",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:apple:mac_os_x:-:*:*:*:*:*:*:*",
"matchCriteriaId": "4781BF1E-8A4E-4AFF-9540-23D523EE30DD",
"vulnerable": false
},
{
"criteria": "cpe:2.3:o:google:chrome_os:-:*:*:*:*:*:*:*",
"matchCriteriaId": "D32ACF6F-5FF7-4815-8EAD-4719F5FC9B79",
"vulnerable": false
},
{
"criteria": "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
"matchCriteriaId": "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1",
"vulnerable": false
},
{
"criteria": "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
"matchCriteriaId": "A2572D17-1DE6-457B-99CC-64AFD54487EA",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
"matchCriteriaId": "21540673-614A-4D40-8BD7-3F07723803B0",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:adobe:flash_player:*:*:*:*:*:edge:*:*",
"matchCriteriaId": "E823E5FE-7367-41DE-8CD7-842C5C2F53CE",
"versionEndIncluding": "20.0.0.272",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:adobe:air_desktop_runtime:*:*:*:*:*:*:*:*",
"matchCriteriaId": "18BA497D-0C1D-451E-B54F-4028FD9B9F3B",
"versionEndIncluding": "20.0.0.233",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:apple:mac_os_x:-:*:*:*:*:*:*:*",
"matchCriteriaId": "4781BF1E-8A4E-4AFF-9540-23D523EE30DD",
"vulnerable": false
},
{
"criteria": "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
"matchCriteriaId": "A2572D17-1DE6-457B-99CC-64AFD54487EA",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:adobe:air_sdk:*:*:*:*:*:*:*:*",
"matchCriteriaId": "F09C5C9A-0493-4601-84AE-3A9C5985231D",
"versionEndIncluding": "20.0.0.233",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:apple:iphone_os:-:*:*:*:*:*:*:*",
"matchCriteriaId": "B5415705-33E5-46D5-8E4D-9EBADC8C5705",
"vulnerable": false
},
{
"criteria": "cpe:2.3:o:apple:mac_os_x:-:*:*:*:*:*:*:*",
"matchCriteriaId": "4781BF1E-8A4E-4AFF-9540-23D523EE30DD",
"vulnerable": false
},
{
"criteria": "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
"matchCriteriaId": "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26",
"vulnerable": false
},
{
"criteria": "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
"matchCriteriaId": "A2572D17-1DE6-457B-99CC-64AFD54487EA",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:adobe:air_sdk_\\\u0026_compiler:*:*:*:*:*:*:*:*",
"matchCriteriaId": "00D08966-361A-430D-9B39-ED143404EBF6",
"versionEndIncluding": "20.0.0.233",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:apple:iphone_os:-:*:*:*:*:*:*:*",
"matchCriteriaId": "B5415705-33E5-46D5-8E4D-9EBADC8C5705",
"vulnerable": false
},
{
"criteria": "cpe:2.3:o:apple:mac_os_x:-:*:*:*:*:*:*:*",
"matchCriteriaId": "4781BF1E-8A4E-4AFF-9540-23D523EE30DD",
"vulnerable": false
},
{
"criteria": "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
"matchCriteriaId": "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26",
"vulnerable": false
},
{
"criteria": "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
"matchCriteriaId": "A2572D17-1DE6-457B-99CC-64AFD54487EA",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
}
],
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Adobe Flash Player before 18.0.0.329 and 19.x and 20.x before 20.0.0.306 on Windows and OS X and before 11.2.202.569 on Linux, Adobe AIR before 20.0.0.260, Adobe AIR SDK before 20.0.0.260, and Adobe AIR SDK \u0026 Compiler before 20.0.0.260 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-0964, CVE-2016-0966, CVE-2016-0967, CVE-2016-0968, CVE-2016-0969, CVE-2016-0970, CVE-2016-0972, CVE-2016-0976, CVE-2016-0977, CVE-2016-0978, CVE-2016-0979, CVE-2016-0980, and CVE-2016-0981."
},
{
"lang": "es",
"value": "Adobe Flash Player en versiones anteriores a 18.0.0.329 y 19.x y 20.x en versiones anteriores a 20.0.0.306 en Windows y OS X y en versiones anteriores a 11.2.202.569 en Linux, Adobe AIR en versiones anteriores a 20.0.0.260, Adobe AIR SDK en versiones anteriores a 20.0.0.260 y Adobe AIR SDK \u0026 Compiler en versiones anteriores a 20.0.0.260 permiten a atacantes ejecutar c\u00f3digo arbitrario o causar una denegaci\u00f3n de servicio (corrupci\u00f3n de memoria) a trav\u00e9s de vectores no especificados, una vulnerabilidad diferente a CVE-2016-0964, CVE-2016-0966, CVE-2016-0967, CVE-2016-0968, CVE-2016-0969, CVE-2016-0970, CVE-2016-0972, CVE-2016-0976, CVE-2016-0977, CVE-2016-0978, CVE-2016-0979, CVE-2016-0980 y CVE-2016-0981."
}
],
"id": "CVE-2016-0965",
"lastModified": "2026-05-06T22:30:45.220",
"metrics": {
"cvssMetricV2": [
{
"acInsufInfo": false,
"baseSeverity": "HIGH",
"cvssData": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "COMPLETE",
"baseScore": 9.3,
"confidentialityImpact": "COMPLETE",
"integrityImpact": "COMPLETE",
"vectorString": "AV:N/AC:M/Au:N/C:C/I:C/A:C",
"version": "2.0"
},
"exploitabilityScore": 8.6,
"impactScore": 10.0,
"obtainAllPrivilege": false,
"obtainOtherPrivilege": false,
"obtainUserPrivilege": false,
"source": "nvd@nist.gov",
"type": "Primary",
"userInteractionRequired": true
}
],
"cvssMetricV31": [
{
"cvssData": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"exploitabilityScore": 2.8,
"impactScore": 5.9,
"source": "nvd@nist.gov",
"type": "Primary"
}
]
},
"published": "2016-02-10T20:59:12.797",
"references": [
{
"source": "psirt@adobe.com",
"tags": [
"Broken Link",
"Third Party Advisory"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00025.html"
},
{
"source": "psirt@adobe.com",
"tags": [
"Broken Link",
"Third Party Advisory"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00027.html"
},
{
"source": "psirt@adobe.com",
"tags": [
"Broken Link",
"Third Party Advisory"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00029.html"
},
{
"source": "psirt@adobe.com",
"tags": [
"Broken Link",
"Third Party Advisory"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00030.html"
},
{
"source": "psirt@adobe.com",
"tags": [
"Third Party Advisory"
],
"url": "http://rhn.redhat.com/errata/RHSA-2016-0166.html"
},
{
"source": "psirt@adobe.com",
"tags": [
"Broken Link",
"Third Party Advisory",
"VDB Entry"
],
"url": "http://www.securitytracker.com/id/1034970"
},
{
"source": "psirt@adobe.com",
"tags": [
"Patch",
"Vendor Advisory"
],
"url": "https://helpx.adobe.com/security/products/flash-player/apsb16-04.html"
},
{
"source": "psirt@adobe.com",
"tags": [
"Third Party Advisory"
],
"url": "https://security.gentoo.org/glsa/201603-07"
},
{
"source": "psirt@adobe.com",
"tags": [
"Exploit",
"Third Party Advisory",
"VDB Entry"
],
"url": "https://www.exploit-db.com/exploits/39460/"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Broken Link",
"Third Party Advisory"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00025.html"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Broken Link",
"Third Party Advisory"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00027.html"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Broken Link",
"Third Party Advisory"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00029.html"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Broken Link",
"Third Party Advisory"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00030.html"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory"
],
"url": "http://rhn.redhat.com/errata/RHSA-2016-0166.html"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Broken Link",
"Third Party Advisory",
"VDB Entry"
],
"url": "http://www.securitytracker.com/id/1034970"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Patch",
"Vendor Advisory"
],
"url": "https://helpx.adobe.com/security/products/flash-player/apsb16-04.html"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory"
],
"url": "https://security.gentoo.org/glsa/201603-07"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Exploit",
"Third Party Advisory",
"VDB Entry"
],
"url": "https://www.exploit-db.com/exploits/39460/"
}
],
"sourceIdentifier": "psirt@adobe.com",
"vulnStatus": "Modified",
"weaknesses": [
{
"description": [
{
"lang": "en",
"value": "CWE-787"
}
],
"source": "nvd@nist.gov",
"type": "Primary"
}
]
}
GHSA-C536-X69W-FX6R
Vulnerability from github – Published: 2022-05-17 01:08 – Updated: 2025-04-12 12:56Adobe Flash Player before 18.0.0.329 and 19.x and 20.x before 20.0.0.306 on Windows and OS X and before 11.2.202.569 on Linux, Adobe AIR before 20.0.0.260, Adobe AIR SDK before 20.0.0.260, and Adobe AIR SDK & Compiler before 20.0.0.260 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-0964, CVE-2016-0966, CVE-2016-0967, CVE-2016-0968, CVE-2016-0969, CVE-2016-0970, CVE-2016-0972, CVE-2016-0976, CVE-2016-0977, CVE-2016-0978, CVE-2016-0979, CVE-2016-0980, and CVE-2016-0981.
{
"affected": [],
"aliases": [
"CVE-2016-0965"
],
"database_specific": {
"cwe_ids": [
"CWE-119",
"CWE-787"
],
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2016-02-10T20:59:00Z",
"severity": "CRITICAL"
},
"details": "Adobe Flash Player before 18.0.0.329 and 19.x and 20.x before 20.0.0.306 on Windows and OS X and before 11.2.202.569 on Linux, Adobe AIR before 20.0.0.260, Adobe AIR SDK before 20.0.0.260, and Adobe AIR SDK \u0026 Compiler before 20.0.0.260 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-0964, CVE-2016-0966, CVE-2016-0967, CVE-2016-0968, CVE-2016-0969, CVE-2016-0970, CVE-2016-0972, CVE-2016-0976, CVE-2016-0977, CVE-2016-0978, CVE-2016-0979, CVE-2016-0980, and CVE-2016-0981.",
"id": "GHSA-c536-x69w-fx6r",
"modified": "2025-04-12T12:56:51Z",
"published": "2022-05-17T01:08:14Z",
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-0965"
},
{
"type": "WEB",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb16-04.html"
},
{
"type": "WEB",
"url": "https://security.gentoo.org/glsa/201603-07"
},
{
"type": "WEB",
"url": "https://www.exploit-db.com/exploits/39460"
},
{
"type": "WEB",
"url": "http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00025.html"
},
{
"type": "WEB",
"url": "http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00027.html"
},
{
"type": "WEB",
"url": "http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00029.html"
},
{
"type": "WEB",
"url": "http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00030.html"
},
{
"type": "WEB",
"url": "http://rhn.redhat.com/errata/RHSA-2016-0166.html"
},
{
"type": "WEB",
"url": "http://www.securitytracker.com/id/1034970"
}
],
"schema_version": "1.4.0",
"severity": [
{
"score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"type": "CVSS_V3"
}
]
}
GSD-2016-0965
Vulnerability from gsd - Updated: 2023-12-13 01:21{
"GSD": {
"alias": "CVE-2016-0965",
"description": "Adobe Flash Player before 18.0.0.329 and 19.x and 20.x before 20.0.0.306 on Windows and OS X and before 11.2.202.569 on Linux, Adobe AIR before 20.0.0.260, Adobe AIR SDK before 20.0.0.260, and Adobe AIR SDK \u0026 Compiler before 20.0.0.260 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-0964, CVE-2016-0966, CVE-2016-0967, CVE-2016-0968, CVE-2016-0969, CVE-2016-0970, CVE-2016-0972, CVE-2016-0976, CVE-2016-0977, CVE-2016-0978, CVE-2016-0979, CVE-2016-0980, and CVE-2016-0981.",
"id": "GSD-2016-0965",
"references": [
"https://www.suse.com/security/cve/CVE-2016-0965.html",
"https://access.redhat.com/errata/RHSA-2016:0166",
"https://advisories.mageia.org/CVE-2016-0965.html",
"https://packetstormsecurity.com/files/cve/CVE-2016-0965"
]
},
"gsd": {
"metadata": {
"exploitCode": "unknown",
"remediation": "unknown",
"reportConfidence": "confirmed",
"type": "vulnerability"
},
"osvSchema": {
"aliases": [
"CVE-2016-0965"
],
"details": "Adobe Flash Player before 18.0.0.329 and 19.x and 20.x before 20.0.0.306 on Windows and OS X and before 11.2.202.569 on Linux, Adobe AIR before 20.0.0.260, Adobe AIR SDK before 20.0.0.260, and Adobe AIR SDK \u0026 Compiler before 20.0.0.260 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-0964, CVE-2016-0966, CVE-2016-0967, CVE-2016-0968, CVE-2016-0969, CVE-2016-0970, CVE-2016-0972, CVE-2016-0976, CVE-2016-0977, CVE-2016-0978, CVE-2016-0979, CVE-2016-0980, and CVE-2016-0981.",
"id": "GSD-2016-0965",
"modified": "2023-12-13T01:21:17.802728Z",
"schema_version": "1.4.0"
}
},
"namespaces": {
"cve.org": {
"CVE_data_meta": {
"ASSIGNER": "psirt@adobe.com",
"ID": "CVE-2016-0965",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "Adobe Flash Player before 18.0.0.329 and 19.x and 20.x before 20.0.0.306 on Windows and OS X and before 11.2.202.569 on Linux, Adobe AIR before 20.0.0.260, Adobe AIR SDK before 20.0.0.260, and Adobe AIR SDK \u0026 Compiler before 20.0.0.260 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-0964, CVE-2016-0966, CVE-2016-0967, CVE-2016-0968, CVE-2016-0969, CVE-2016-0970, CVE-2016-0972, CVE-2016-0976, CVE-2016-0977, CVE-2016-0978, CVE-2016-0979, CVE-2016-0980, and CVE-2016-0981."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "SUSE-SU-2016:0400",
"refsource": "SUSE",
"url": "http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00027.html"
},
{
"name": "1034970",
"refsource": "SECTRACK",
"url": "http://www.securitytracker.com/id/1034970"
},
{
"name": "GLSA-201603-07",
"refsource": "GENTOO",
"url": "https://security.gentoo.org/glsa/201603-07"
},
{
"name": "RHSA-2016:0166",
"refsource": "REDHAT",
"url": "http://rhn.redhat.com/errata/RHSA-2016-0166.html"
},
{
"name": "openSUSE-SU-2016:0415",
"refsource": "SUSE",
"url": "http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00030.html"
},
{
"name": "openSUSE-SU-2016:0412",
"refsource": "SUSE",
"url": "http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00029.html"
},
{
"name": "39460",
"refsource": "EXPLOIT-DB",
"url": "https://www.exploit-db.com/exploits/39460/"
},
{
"name": "https://helpx.adobe.com/security/products/flash-player/apsb16-04.html",
"refsource": "CONFIRM",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb16-04.html"
},
{
"name": "SUSE-SU-2016:0398",
"refsource": "SUSE",
"url": "http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00025.html"
}
]
}
},
"nvd.nist.gov": {
"configurations": {
"CVE_data_version": "4.0",
"nodes": [
{
"children": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:a:adobe:flash_player:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndIncluding": "11.2.202.559",
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
}
],
"operator": "OR"
}
],
"cpe_match": [],
"operator": "AND"
},
{
"children": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:a:adobe:flash_player_desktop_runtime:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndIncluding": "20.0.0.286",
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:apple:mac_os_x:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
},
{
"cpe23Uri": "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
}
],
"operator": "OR"
}
],
"cpe_match": [],
"operator": "AND"
},
{
"children": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:a:adobe:flash_player:*:*:*:*:esr:*:*:*",
"cpe_name": [],
"versionEndIncluding": "18.0.0.326",
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:apple:mac_os_x:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
},
{
"cpe23Uri": "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
}
],
"operator": "OR"
}
],
"cpe_match": [],
"operator": "AND"
},
{
"children": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
},
{
"cpe23Uri": "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:a:adobe:flash_player:*:*:*:*:*:internet_explorer:*:*",
"cpe_name": [],
"versionEndIncluding": "20.0.0.272",
"vulnerable": true
}
],
"operator": "OR"
}
],
"cpe_match": [],
"operator": "AND"
},
{
"children": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:a:adobe:flash_player:*:*:*:*:*:chrome:*:*",
"cpe_name": [],
"versionEndIncluding": "20.0.0.286",
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:apple:mac_os_x:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
},
{
"cpe23Uri": "cpe:2.3:o:google:chrome_os:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
},
{
"cpe23Uri": "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
},
{
"cpe23Uri": "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
}
],
"operator": "OR"
}
],
"cpe_match": [],
"operator": "AND"
},
{
"children": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:a:adobe:flash_player:*:*:*:*:*:edge:*:*",
"cpe_name": [],
"versionEndIncluding": "20.0.0.272",
"vulnerable": true
}
],
"operator": "OR"
}
],
"cpe_match": [],
"operator": "AND"
},
{
"children": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:a:adobe:air_desktop_runtime:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndIncluding": "20.0.0.233",
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:apple:mac_os_x:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
},
{
"cpe23Uri": "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
}
],
"operator": "OR"
}
],
"cpe_match": [],
"operator": "AND"
},
{
"children": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:a:adobe:air_sdk:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndIncluding": "20.0.0.233",
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:apple:iphone_os:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
},
{
"cpe23Uri": "cpe:2.3:o:apple:mac_os_x:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
},
{
"cpe23Uri": "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
},
{
"cpe23Uri": "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
}
],
"operator": "OR"
}
],
"cpe_match": [],
"operator": "AND"
},
{
"children": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:a:adobe:air_sdk_\\\u0026_compiler:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndIncluding": "20.0.0.233",
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:apple:iphone_os:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
},
{
"cpe23Uri": "cpe:2.3:o:apple:mac_os_x:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
},
{
"cpe23Uri": "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
},
{
"cpe23Uri": "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
}
],
"operator": "OR"
}
],
"cpe_match": [],
"operator": "AND"
}
]
},
"cve": {
"CVE_data_meta": {
"ASSIGNER": "psirt@adobe.com",
"ID": "CVE-2016-0965"
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "en",
"value": "Adobe Flash Player before 18.0.0.329 and 19.x and 20.x before 20.0.0.306 on Windows and OS X and before 11.2.202.569 on Linux, Adobe AIR before 20.0.0.260, Adobe AIR SDK before 20.0.0.260, and Adobe AIR SDK \u0026 Compiler before 20.0.0.260 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-0964, CVE-2016-0966, CVE-2016-0967, CVE-2016-0968, CVE-2016-0969, CVE-2016-0970, CVE-2016-0972, CVE-2016-0976, CVE-2016-0977, CVE-2016-0978, CVE-2016-0979, CVE-2016-0980, and CVE-2016-0981."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "en",
"value": "CWE-787"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "https://helpx.adobe.com/security/products/flash-player/apsb16-04.html",
"refsource": "CONFIRM",
"tags": [
"Patch",
"Vendor Advisory"
],
"url": "https://helpx.adobe.com/security/products/flash-player/apsb16-04.html"
},
{
"name": "GLSA-201603-07",
"refsource": "GENTOO",
"tags": [
"Third Party Advisory"
],
"url": "https://security.gentoo.org/glsa/201603-07"
},
{
"name": "RHSA-2016:0166",
"refsource": "REDHAT",
"tags": [
"Third Party Advisory"
],
"url": "http://rhn.redhat.com/errata/RHSA-2016-0166.html"
},
{
"name": "SUSE-SU-2016:0400",
"refsource": "SUSE",
"tags": [
"Broken Link",
"Third Party Advisory"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00027.html"
},
{
"name": "1034970",
"refsource": "SECTRACK",
"tags": [
"Broken Link",
"Third Party Advisory",
"VDB Entry"
],
"url": "http://www.securitytracker.com/id/1034970"
},
{
"name": "openSUSE-SU-2016:0412",
"refsource": "SUSE",
"tags": [
"Broken Link",
"Third Party Advisory"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00029.html"
},
{
"name": "SUSE-SU-2016:0398",
"refsource": "SUSE",
"tags": [
"Broken Link",
"Third Party Advisory"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00025.html"
},
{
"name": "openSUSE-SU-2016:0415",
"refsource": "SUSE",
"tags": [
"Broken Link",
"Third Party Advisory"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00030.html"
},
{
"name": "39460",
"refsource": "EXPLOIT-DB",
"tags": [
"Exploit",
"Third Party Advisory",
"VDB Entry"
],
"url": "https://www.exploit-db.com/exploits/39460/"
}
]
}
},
"impact": {
"baseMetricV2": {
"acInsufInfo": false,
"cvssV2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "COMPLETE",
"baseScore": 9.3,
"confidentialityImpact": "COMPLETE",
"integrityImpact": "COMPLETE",
"vectorString": "AV:N/AC:M/Au:N/C:C/I:C/A:C",
"version": "2.0"
},
"exploitabilityScore": 8.6,
"impactScore": 10.0,
"obtainAllPrivilege": false,
"obtainOtherPrivilege": false,
"obtainUserPrivilege": false,
"severity": "HIGH",
"userInteractionRequired": true
},
"baseMetricV3": {
"cvssV3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"exploitabilityScore": 2.8,
"impactScore": 5.9
}
},
"lastModifiedDate": "2023-01-26T21:42Z",
"publishedDate": "2016-02-10T20:59Z"
}
}
}
RHSA-2016:0166
Vulnerability from csaf_redhat - Published: 2016-02-10 21:10 - Updated: 2025-11-21 17:54Adobe Flash Player before 18.0.0.329 and 19.x and 20.x before 20.0.0.306 on Windows and OS X and before 11.2.202.569 on Linux, Adobe AIR before 20.0.0.260, Adobe AIR SDK before 20.0.0.260, and Adobe AIR SDK & Compiler before 20.0.0.260 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-0965, CVE-2016-0966, CVE-2016-0967, CVE-2016-0968, CVE-2016-0969, CVE-2016-0970, CVE-2016-0972, CVE-2016-0976, CVE-2016-0977, CVE-2016-0978, CVE-2016-0979, CVE-2016-0980, and CVE-2016-0981.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.569-1.el5.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.569-1.el5.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.569-1.el6_7.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.569-1.el6_7.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.569-1.el6_7.i686 | — |
Vendor Fix
fix
|
Adobe Flash Player before 18.0.0.329 and 19.x and 20.x before 20.0.0.306 on Windows and OS X and before 11.2.202.569 on Linux, Adobe AIR before 20.0.0.260, Adobe AIR SDK before 20.0.0.260, and Adobe AIR SDK & Compiler before 20.0.0.260 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-0964, CVE-2016-0966, CVE-2016-0967, CVE-2016-0968, CVE-2016-0969, CVE-2016-0970, CVE-2016-0972, CVE-2016-0976, CVE-2016-0977, CVE-2016-0978, CVE-2016-0979, CVE-2016-0980, and CVE-2016-0981.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.569-1.el5.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.569-1.el5.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.569-1.el6_7.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.569-1.el6_7.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.569-1.el6_7.i686 | — |
Vendor Fix
fix
|
Adobe Flash Player before 18.0.0.329 and 19.x and 20.x before 20.0.0.306 on Windows and OS X and before 11.2.202.569 on Linux, Adobe AIR before 20.0.0.260, Adobe AIR SDK before 20.0.0.260, and Adobe AIR SDK & Compiler before 20.0.0.260 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-0964, CVE-2016-0965, CVE-2016-0967, CVE-2016-0968, CVE-2016-0969, CVE-2016-0970, CVE-2016-0972, CVE-2016-0976, CVE-2016-0977, CVE-2016-0978, CVE-2016-0979, CVE-2016-0980, and CVE-2016-0981.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.569-1.el5.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.569-1.el5.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.569-1.el6_7.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.569-1.el6_7.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.569-1.el6_7.i686 | — |
Vendor Fix
fix
|
Adobe Flash Player before 18.0.0.329 and 19.x and 20.x before 20.0.0.306 on Windows and OS X and before 11.2.202.569 on Linux, Adobe AIR before 20.0.0.260, Adobe AIR SDK before 20.0.0.260, and Adobe AIR SDK & Compiler before 20.0.0.260 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-0964, CVE-2016-0965, CVE-2016-0966, CVE-2016-0968, CVE-2016-0969, CVE-2016-0970, CVE-2016-0972, CVE-2016-0976, CVE-2016-0977, CVE-2016-0978, CVE-2016-0979, CVE-2016-0980, and CVE-2016-0981.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.569-1.el5.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.569-1.el5.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.569-1.el6_7.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.569-1.el6_7.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.569-1.el6_7.i686 | — |
Vendor Fix
fix
|
Adobe Flash Player before 18.0.0.329 and 19.x and 20.x before 20.0.0.306 on Windows and OS X and before 11.2.202.569 on Linux, Adobe AIR before 20.0.0.260, Adobe AIR SDK before 20.0.0.260, and Adobe AIR SDK & Compiler before 20.0.0.260 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-0964, CVE-2016-0965, CVE-2016-0966, CVE-2016-0967, CVE-2016-0969, CVE-2016-0970, CVE-2016-0972, CVE-2016-0976, CVE-2016-0977, CVE-2016-0978, CVE-2016-0979, CVE-2016-0980, and CVE-2016-0981.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.569-1.el5.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.569-1.el5.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.569-1.el6_7.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.569-1.el6_7.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.569-1.el6_7.i686 | — |
Vendor Fix
fix
|
Adobe Flash Player before 18.0.0.329 and 19.x and 20.x before 20.0.0.306 on Windows and OS X and before 11.2.202.569 on Linux, Adobe AIR before 20.0.0.260, Adobe AIR SDK before 20.0.0.260, and Adobe AIR SDK & Compiler before 20.0.0.260 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-0964, CVE-2016-0965, CVE-2016-0966, CVE-2016-0967, CVE-2016-0968, CVE-2016-0970, CVE-2016-0972, CVE-2016-0976, CVE-2016-0977, CVE-2016-0978, CVE-2016-0979, CVE-2016-0980, and CVE-2016-0981.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.569-1.el5.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.569-1.el5.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.569-1.el6_7.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.569-1.el6_7.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.569-1.el6_7.i686 | — |
Vendor Fix
fix
|
Adobe Flash Player before 18.0.0.329 and 19.x and 20.x before 20.0.0.306 on Windows and OS X and before 11.2.202.569 on Linux, Adobe AIR before 20.0.0.260, Adobe AIR SDK before 20.0.0.260, and Adobe AIR SDK & Compiler before 20.0.0.260 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-0964, CVE-2016-0965, CVE-2016-0966, CVE-2016-0967, CVE-2016-0968, CVE-2016-0969, CVE-2016-0972, CVE-2016-0976, CVE-2016-0977, CVE-2016-0978, CVE-2016-0979, CVE-2016-0980, and CVE-2016-0981.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.569-1.el5.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.569-1.el5.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.569-1.el6_7.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.569-1.el6_7.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.569-1.el6_7.i686 | — |
Vendor Fix
fix
|
Heap-based buffer overflow in Adobe Flash Player before 18.0.0.329 and 19.x and 20.x before 20.0.0.306 on Windows and OS X and before 11.2.202.569 on Linux, Adobe AIR before 20.0.0.260, Adobe AIR SDK before 20.0.0.260, and Adobe AIR SDK & Compiler before 20.0.0.260 allows attackers to execute arbitrary code via unspecified vectors.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.569-1.el5.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.569-1.el5.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.569-1.el6_7.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.569-1.el6_7.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.569-1.el6_7.i686 | — |
Vendor Fix
fix
|
Adobe Flash Player before 18.0.0.329 and 19.x and 20.x before 20.0.0.306 on Windows and OS X and before 11.2.202.569 on Linux, Adobe AIR before 20.0.0.260, Adobe AIR SDK before 20.0.0.260, and Adobe AIR SDK & Compiler before 20.0.0.260 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-0964, CVE-2016-0965, CVE-2016-0966, CVE-2016-0967, CVE-2016-0968, CVE-2016-0969, CVE-2016-0970, CVE-2016-0976, CVE-2016-0977, CVE-2016-0978, CVE-2016-0979, CVE-2016-0980, and CVE-2016-0981.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.569-1.el5.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.569-1.el5.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.569-1.el6_7.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.569-1.el6_7.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.569-1.el6_7.i686 | — |
Vendor Fix
fix
|
Use-after-free vulnerability in the URLRequest object implementation in Adobe Flash Player before 18.0.0.329 and 19.x and 20.x before 20.0.0.306 on Windows and OS X and before 11.2.202.569 on Linux, Adobe AIR before 20.0.0.260, Adobe AIR SDK before 20.0.0.260, and Adobe AIR SDK & Compiler before 20.0.0.260 allows attackers to execute arbitrary code via a URLLoader.load call, a different vulnerability than CVE-2016-0974, CVE-2016-0975, CVE-2016-0982, CVE-2016-0983, and CVE-2016-0984.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.569-1.el5.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.569-1.el5.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.569-1.el6_7.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.569-1.el6_7.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.569-1.el6_7.i686 | — |
Vendor Fix
fix
|
Use-after-free vulnerability in Adobe Flash Player before 18.0.0.329 and 19.x and 20.x before 20.0.0.306 on Windows and OS X and before 11.2.202.569 on Linux, Adobe AIR before 20.0.0.260, Adobe AIR SDK before 20.0.0.260, and Adobe AIR SDK & Compiler before 20.0.0.260 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2016-0973, CVE-2016-0975, CVE-2016-0982, CVE-2016-0983, and CVE-2016-0984.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.569-1.el5.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.569-1.el5.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.569-1.el6_7.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.569-1.el6_7.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.569-1.el6_7.i686 | — |
Vendor Fix
fix
|
Use-after-free vulnerability in the instanceof function in Adobe Flash Player before 18.0.0.329 and 19.x and 20.x before 20.0.0.306 on Windows and OS X and before 11.2.202.569 on Linux, Adobe AIR before 20.0.0.260, Adobe AIR SDK before 20.0.0.260, and Adobe AIR SDK & Compiler before 20.0.0.260 allows attackers to execute arbitrary code by leveraging improper reference handling, a different vulnerability than CVE-2016-0973, CVE-2016-0974, CVE-2016-0982, CVE-2016-0983, and CVE-2016-0984.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.569-1.el5.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.569-1.el5.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.569-1.el6_7.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.569-1.el6_7.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.569-1.el6_7.i686 | — |
Vendor Fix
fix
|
Adobe Flash Player before 18.0.0.329 and 19.x and 20.x before 20.0.0.306 on Windows and OS X and before 11.2.202.569 on Linux, Adobe AIR before 20.0.0.260, Adobe AIR SDK before 20.0.0.260, and Adobe AIR SDK & Compiler before 20.0.0.260 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-0964, CVE-2016-0965, CVE-2016-0966, CVE-2016-0967, CVE-2016-0968, CVE-2016-0969, CVE-2016-0970, CVE-2016-0972, CVE-2016-0977, CVE-2016-0978, CVE-2016-0979, CVE-2016-0980, and CVE-2016-0981.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.569-1.el5.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.569-1.el5.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.569-1.el6_7.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.569-1.el6_7.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.569-1.el6_7.i686 | — |
Vendor Fix
fix
|
Adobe Flash Player before 18.0.0.329 and 19.x and 20.x before 20.0.0.306 on Windows and OS X and before 11.2.202.569 on Linux, Adobe AIR before 20.0.0.260, Adobe AIR SDK before 20.0.0.260, and Adobe AIR SDK & Compiler before 20.0.0.260 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-0964, CVE-2016-0965, CVE-2016-0966, CVE-2016-0967, CVE-2016-0968, CVE-2016-0969, CVE-2016-0970, CVE-2016-0972, CVE-2016-0976, CVE-2016-0978, CVE-2016-0979, CVE-2016-0980, and CVE-2016-0981.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.569-1.el5.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.569-1.el5.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.569-1.el6_7.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.569-1.el6_7.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.569-1.el6_7.i686 | — |
Vendor Fix
fix
|
Adobe Flash Player before 18.0.0.329 and 19.x and 20.x before 20.0.0.306 on Windows and OS X and before 11.2.202.569 on Linux, Adobe AIR before 20.0.0.260, Adobe AIR SDK before 20.0.0.260, and Adobe AIR SDK & Compiler before 20.0.0.260 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-0964, CVE-2016-0965, CVE-2016-0966, CVE-2016-0967, CVE-2016-0968, CVE-2016-0969, CVE-2016-0970, CVE-2016-0972, CVE-2016-0976, CVE-2016-0977, CVE-2016-0979, CVE-2016-0980, and CVE-2016-0981.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.569-1.el5.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.569-1.el5.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.569-1.el6_7.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.569-1.el6_7.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.569-1.el6_7.i686 | — |
Vendor Fix
fix
|
Adobe Flash Player before 18.0.0.329 and 19.x and 20.x before 20.0.0.306 on Windows and OS X and before 11.2.202.569 on Linux, Adobe AIR before 20.0.0.260, Adobe AIR SDK before 20.0.0.260, and Adobe AIR SDK & Compiler before 20.0.0.260 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-0964, CVE-2016-0965, CVE-2016-0966, CVE-2016-0967, CVE-2016-0968, CVE-2016-0969, CVE-2016-0970, CVE-2016-0972, CVE-2016-0976, CVE-2016-0977, CVE-2016-0978, CVE-2016-0980, and CVE-2016-0981.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.569-1.el5.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.569-1.el5.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.569-1.el6_7.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.569-1.el6_7.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.569-1.el6_7.i686 | — |
Vendor Fix
fix
|
Adobe Flash Player before 18.0.0.329 and 19.x and 20.x before 20.0.0.306 on Windows and OS X and before 11.2.202.569 on Linux, Adobe AIR before 20.0.0.260, Adobe AIR SDK before 20.0.0.260, and Adobe AIR SDK & Compiler before 20.0.0.260 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-0964, CVE-2016-0965, CVE-2016-0966, CVE-2016-0967, CVE-2016-0968, CVE-2016-0969, CVE-2016-0970, CVE-2016-0972, CVE-2016-0976, CVE-2016-0977, CVE-2016-0978, CVE-2016-0979, and CVE-2016-0981.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.569-1.el5.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.569-1.el5.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.569-1.el6_7.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.569-1.el6_7.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.569-1.el6_7.i686 | — |
Vendor Fix
fix
|
Adobe Flash Player before 18.0.0.329 and 19.x and 20.x before 20.0.0.306 on Windows and OS X and before 11.2.202.569 on Linux, Adobe AIR before 20.0.0.260, Adobe AIR SDK before 20.0.0.260, and Adobe AIR SDK & Compiler before 20.0.0.260 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-0964, CVE-2016-0965, CVE-2016-0966, CVE-2016-0967, CVE-2016-0968, CVE-2016-0969, CVE-2016-0970, CVE-2016-0972, CVE-2016-0976, CVE-2016-0977, CVE-2016-0978, CVE-2016-0979, and CVE-2016-0980.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.569-1.el5.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.569-1.el5.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.569-1.el6_7.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.569-1.el6_7.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.569-1.el6_7.i686 | — |
Vendor Fix
fix
|
Use-after-free vulnerability in Adobe Flash Player before 18.0.0.329 and 19.x and 20.x before 20.0.0.306 on Windows and OS X and before 11.2.202.569 on Linux, Adobe AIR before 20.0.0.260, Adobe AIR SDK before 20.0.0.260, and Adobe AIR SDK & Compiler before 20.0.0.260 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2016-0973, CVE-2016-0974, CVE-2016-0975, CVE-2016-0983, and CVE-2016-0984.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.569-1.el5.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.569-1.el5.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.569-1.el6_7.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.569-1.el6_7.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.569-1.el6_7.i686 | — |
Vendor Fix
fix
|
Use-after-free vulnerability in Adobe Flash Player before 18.0.0.329 and 19.x and 20.x before 20.0.0.306 on Windows and OS X and before 11.2.202.569 on Linux, Adobe AIR before 20.0.0.260, Adobe AIR SDK before 20.0.0.260, and Adobe AIR SDK & Compiler before 20.0.0.260 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2016-0973, CVE-2016-0974, CVE-2016-0975, CVE-2016-0982, and CVE-2016-0984.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.569-1.el5.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.569-1.el5.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.569-1.el6_7.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.569-1.el6_7.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.569-1.el6_7.i686 | — |
Vendor Fix
fix
|
Use-after-free vulnerability in Adobe Flash Player before 18.0.0.329 and 19.x and 20.x before 20.0.0.306 on Windows and OS X and before 11.2.202.569 on Linux, Adobe AIR before 20.0.0.260, Adobe AIR SDK before 20.0.0.260, and Adobe AIR SDK & Compiler before 20.0.0.260 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2016-0973, CVE-2016-0974, CVE-2016-0975, CVE-2016-0982, and CVE-2016-0983.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.569-1.el5.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.569-1.el5.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.569-1.el6_7.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.569-1.el6_7.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.569-1.el6_7.i686 | — |
Vendor Fix
fix
|
Adobe Flash Player before 18.0.0.329 and 19.x and 20.x before 20.0.0.306 on Windows and OS X and before 11.2.202.569 on Linux, Adobe AIR before 20.0.0.260, Adobe AIR SDK before 20.0.0.260, and Adobe AIR SDK & Compiler before 20.0.0.260 allow attackers to execute arbitrary code by leveraging an unspecified "type confusion."
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.569-1.el5.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.569-1.el5.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.569-1.el6_7.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.569-1.el6_7.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.569-1.el6_7.i686 | — |
Vendor Fix
fix
|
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Critical"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An updated Adobe Flash Player package that fixes multiple security issues\nis now available for Red Hat Enterprise Linux 5 and 6 Supplementary.\n\nRed Hat Product Security has rated this update as having Critical security\nimpact. Common Vulnerability Scoring System (CVSS) base scores, which give\ndetailed severity ratings, are available for each vulnerability from the\nCVE links in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "The flash-plugin package contains a Mozilla Firefox compatible Adobe Flash\nPlayer web browser plug-in.\n\nThis update fixes multiple vulnerabilities in Adobe Flash Player. These\nvulnerabilities, detailed in the Adobe Security Bulletin APSB16-04 listed\nin the References section, could allow an attacker to create a specially\ncrafted SWF file that would cause flash-plugin to crash, execute arbitrary\ncode, or disclose sensitive information when the victim loaded a page\ncontaining the malicious SWF content. (CVE-2016-0964, CVE-2016-0965,\nCVE-2016-0966, CVE-2016-0967, CVE-2016-0968, CVE-2016-0969, CVE-2016-0970,\nCVE-2016-0971, CVE-2016-0972, CVE-2016-0973, CVE-2016-0974, CVE-2016-0975,\nCVE-2016-0976, CVE-2016-0977, CVE-2016-0978, CVE-2016-0979, CVE-2016-0980,\nCVE-2016-0981, CVE-2016-0982, CVE-2016-0983, CVE-2016-0984, CVE-2016-0985)\n\nAll users of Adobe Flash Player should install this updated package, which\nupgrades Flash Player to version 11.2.202.569.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2016:0166",
"url": "https://access.redhat.com/errata/RHSA-2016:0166"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#critical",
"url": "https://access.redhat.com/security/updates/classification/#critical"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb16-04.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb16-04.html"
},
{
"category": "external",
"summary": "1306015",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1306015"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2016/rhsa-2016_0166.json"
}
],
"title": "Red Hat Security Advisory: flash-plugin security update",
"tracking": {
"current_release_date": "2025-11-21T17:54:59+00:00",
"generator": {
"date": "2025-11-21T17:54:59+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.6.12"
}
},
"id": "RHSA-2016:0166",
"initial_release_date": "2016-02-10T21:10:25+00:00",
"revision_history": [
{
"date": "2016-02-10T21:10:25+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2016-02-10T21:10:26+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2025-11-21T17:54:59+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Desktop Supplementary (v. 6)",
"product": {
"name": "Red Hat Enterprise Linux Desktop Supplementary (v. 6)",
"product_id": "6Client-Supplementary-6.7.z",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_extras:6"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Server Supplementary (v. 6)",
"product": {
"name": "Red Hat Enterprise Linux Server Supplementary (v. 6)",
"product_id": "6Server-Supplementary-6.7.z",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_extras:6"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Workstation Supplementary (v. 6)",
"product": {
"name": "Red Hat Enterprise Linux Workstation Supplementary (v. 6)",
"product_id": "6Workstation-Supplementary-6.7.z",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_extras:6"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Desktop Supplementary (v. 5)",
"product": {
"name": "Red Hat Enterprise Linux Desktop Supplementary (v. 5)",
"product_id": "5Client-Supplementary-5.11.Z",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_extras:5::client"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Server Supplementary (v. 5)",
"product": {
"name": "Red Hat Enterprise Linux Server Supplementary (v. 5)",
"product_id": "5Server-Supplementary-5.11.Z",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_extras:5::server"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux Supplementary"
},
{
"branches": [
{
"category": "product_version",
"name": "flash-plugin-0:11.2.202.569-1.el6_7.i686",
"product": {
"name": "flash-plugin-0:11.2.202.569-1.el6_7.i686",
"product_id": "flash-plugin-0:11.2.202.569-1.el6_7.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/flash-plugin@11.2.202.569-1.el6_7?arch=i686"
}
}
}
],
"category": "architecture",
"name": "i686"
},
{
"branches": [
{
"category": "product_version",
"name": "flash-plugin-0:11.2.202.569-1.el5.i386",
"product": {
"name": "flash-plugin-0:11.2.202.569-1.el5.i386",
"product_id": "flash-plugin-0:11.2.202.569-1.el5.i386",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/flash-plugin@11.2.202.569-1.el5?arch=i386"
}
}
}
],
"category": "architecture",
"name": "i386"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "flash-plugin-0:11.2.202.569-1.el5.i386 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 5)",
"product_id": "5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.569-1.el5.i386"
},
"product_reference": "flash-plugin-0:11.2.202.569-1.el5.i386",
"relates_to_product_reference": "5Client-Supplementary-5.11.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "flash-plugin-0:11.2.202.569-1.el5.i386 as a component of Red Hat Enterprise Linux Server Supplementary (v. 5)",
"product_id": "5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.569-1.el5.i386"
},
"product_reference": "flash-plugin-0:11.2.202.569-1.el5.i386",
"relates_to_product_reference": "5Server-Supplementary-5.11.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "flash-plugin-0:11.2.202.569-1.el6_7.i686 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)",
"product_id": "6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.569-1.el6_7.i686"
},
"product_reference": "flash-plugin-0:11.2.202.569-1.el6_7.i686",
"relates_to_product_reference": "6Client-Supplementary-6.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "flash-plugin-0:11.2.202.569-1.el6_7.i686 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)",
"product_id": "6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.569-1.el6_7.i686"
},
"product_reference": "flash-plugin-0:11.2.202.569-1.el6_7.i686",
"relates_to_product_reference": "6Server-Supplementary-6.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "flash-plugin-0:11.2.202.569-1.el6_7.i686 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)",
"product_id": "6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.569-1.el6_7.i686"
},
"product_reference": "flash-plugin-0:11.2.202.569-1.el6_7.i686",
"relates_to_product_reference": "6Workstation-Supplementary-6.7.z"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2016-0964",
"discovery_date": "2016-02-09T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1306015"
}
],
"notes": [
{
"category": "description",
"text": "Adobe Flash Player before 18.0.0.329 and 19.x and 20.x before 20.0.0.306 on Windows and OS X and before 11.2.202.569 on Linux, Adobe AIR before 20.0.0.260, Adobe AIR SDK before 20.0.0.260, and Adobe AIR SDK \u0026 Compiler before 20.0.0.260 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-0965, CVE-2016-0966, CVE-2016-0967, CVE-2016-0968, CVE-2016-0969, CVE-2016-0970, CVE-2016-0972, CVE-2016-0976, CVE-2016-0977, CVE-2016-0978, CVE-2016-0979, CVE-2016-0980, and CVE-2016-0981.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB16-04",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.569-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.569-1.el5.i386",
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.569-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.569-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.569-1.el6_7.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-0964"
},
{
"category": "external",
"summary": "RHBZ#1306015",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1306015"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-0964",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-0964"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-0964",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-0964"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb16-04.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb16-04.html"
}
],
"release_date": "2016-02-09T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2016-02-10T21:10:25+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.569-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.569-1.el5.i386",
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.569-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.569-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.569-1.el6_7.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2016:0166"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.569-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.569-1.el5.i386",
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.569-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.569-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.569-1.el6_7.i686"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB16-04"
},
{
"cve": "CVE-2016-0965",
"discovery_date": "2016-02-09T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1306015"
}
],
"notes": [
{
"category": "description",
"text": "Adobe Flash Player before 18.0.0.329 and 19.x and 20.x before 20.0.0.306 on Windows and OS X and before 11.2.202.569 on Linux, Adobe AIR before 20.0.0.260, Adobe AIR SDK before 20.0.0.260, and Adobe AIR SDK \u0026 Compiler before 20.0.0.260 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-0964, CVE-2016-0966, CVE-2016-0967, CVE-2016-0968, CVE-2016-0969, CVE-2016-0970, CVE-2016-0972, CVE-2016-0976, CVE-2016-0977, CVE-2016-0978, CVE-2016-0979, CVE-2016-0980, and CVE-2016-0981.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB16-04",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.569-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.569-1.el5.i386",
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.569-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.569-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.569-1.el6_7.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-0965"
},
{
"category": "external",
"summary": "RHBZ#1306015",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1306015"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-0965",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-0965"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-0965",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-0965"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb16-04.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb16-04.html"
}
],
"release_date": "2016-02-09T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2016-02-10T21:10:25+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.569-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.569-1.el5.i386",
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.569-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.569-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.569-1.el6_7.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2016:0166"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.569-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.569-1.el5.i386",
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.569-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.569-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.569-1.el6_7.i686"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB16-04"
},
{
"cve": "CVE-2016-0966",
"discovery_date": "2016-02-09T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1306015"
}
],
"notes": [
{
"category": "description",
"text": "Adobe Flash Player before 18.0.0.329 and 19.x and 20.x before 20.0.0.306 on Windows and OS X and before 11.2.202.569 on Linux, Adobe AIR before 20.0.0.260, Adobe AIR SDK before 20.0.0.260, and Adobe AIR SDK \u0026 Compiler before 20.0.0.260 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-0964, CVE-2016-0965, CVE-2016-0967, CVE-2016-0968, CVE-2016-0969, CVE-2016-0970, CVE-2016-0972, CVE-2016-0976, CVE-2016-0977, CVE-2016-0978, CVE-2016-0979, CVE-2016-0980, and CVE-2016-0981.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB16-04",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.569-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.569-1.el5.i386",
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.569-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.569-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.569-1.el6_7.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-0966"
},
{
"category": "external",
"summary": "RHBZ#1306015",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1306015"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-0966",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-0966"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-0966",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-0966"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb16-04.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb16-04.html"
}
],
"release_date": "2016-02-09T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2016-02-10T21:10:25+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.569-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.569-1.el5.i386",
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.569-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.569-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.569-1.el6_7.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2016:0166"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.569-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.569-1.el5.i386",
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.569-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.569-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.569-1.el6_7.i686"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB16-04"
},
{
"cve": "CVE-2016-0967",
"discovery_date": "2016-02-09T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1306015"
}
],
"notes": [
{
"category": "description",
"text": "Adobe Flash Player before 18.0.0.329 and 19.x and 20.x before 20.0.0.306 on Windows and OS X and before 11.2.202.569 on Linux, Adobe AIR before 20.0.0.260, Adobe AIR SDK before 20.0.0.260, and Adobe AIR SDK \u0026 Compiler before 20.0.0.260 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-0964, CVE-2016-0965, CVE-2016-0966, CVE-2016-0968, CVE-2016-0969, CVE-2016-0970, CVE-2016-0972, CVE-2016-0976, CVE-2016-0977, CVE-2016-0978, CVE-2016-0979, CVE-2016-0980, and CVE-2016-0981.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB16-04",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.569-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.569-1.el5.i386",
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.569-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.569-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.569-1.el6_7.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-0967"
},
{
"category": "external",
"summary": "RHBZ#1306015",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1306015"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-0967",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-0967"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-0967",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-0967"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb16-04.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb16-04.html"
}
],
"release_date": "2016-02-09T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2016-02-10T21:10:25+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.569-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.569-1.el5.i386",
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.569-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.569-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.569-1.el6_7.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2016:0166"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.569-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.569-1.el5.i386",
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.569-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.569-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.569-1.el6_7.i686"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB16-04"
},
{
"cve": "CVE-2016-0968",
"discovery_date": "2016-02-09T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1306015"
}
],
"notes": [
{
"category": "description",
"text": "Adobe Flash Player before 18.0.0.329 and 19.x and 20.x before 20.0.0.306 on Windows and OS X and before 11.2.202.569 on Linux, Adobe AIR before 20.0.0.260, Adobe AIR SDK before 20.0.0.260, and Adobe AIR SDK \u0026 Compiler before 20.0.0.260 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-0964, CVE-2016-0965, CVE-2016-0966, CVE-2016-0967, CVE-2016-0969, CVE-2016-0970, CVE-2016-0972, CVE-2016-0976, CVE-2016-0977, CVE-2016-0978, CVE-2016-0979, CVE-2016-0980, and CVE-2016-0981.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB16-04",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.569-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.569-1.el5.i386",
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.569-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.569-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.569-1.el6_7.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-0968"
},
{
"category": "external",
"summary": "RHBZ#1306015",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1306015"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-0968",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-0968"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-0968",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-0968"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb16-04.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb16-04.html"
}
],
"release_date": "2016-02-09T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2016-02-10T21:10:25+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.569-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.569-1.el5.i386",
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.569-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.569-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.569-1.el6_7.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2016:0166"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.569-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.569-1.el5.i386",
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.569-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.569-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.569-1.el6_7.i686"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB16-04"
},
{
"cve": "CVE-2016-0969",
"discovery_date": "2016-02-09T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1306015"
}
],
"notes": [
{
"category": "description",
"text": "Adobe Flash Player before 18.0.0.329 and 19.x and 20.x before 20.0.0.306 on Windows and OS X and before 11.2.202.569 on Linux, Adobe AIR before 20.0.0.260, Adobe AIR SDK before 20.0.0.260, and Adobe AIR SDK \u0026 Compiler before 20.0.0.260 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-0964, CVE-2016-0965, CVE-2016-0966, CVE-2016-0967, CVE-2016-0968, CVE-2016-0970, CVE-2016-0972, CVE-2016-0976, CVE-2016-0977, CVE-2016-0978, CVE-2016-0979, CVE-2016-0980, and CVE-2016-0981.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB16-04",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.569-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.569-1.el5.i386",
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.569-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.569-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.569-1.el6_7.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-0969"
},
{
"category": "external",
"summary": "RHBZ#1306015",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1306015"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-0969",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-0969"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-0969",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-0969"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb16-04.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb16-04.html"
}
],
"release_date": "2016-02-09T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2016-02-10T21:10:25+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.569-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.569-1.el5.i386",
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.569-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.569-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.569-1.el6_7.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2016:0166"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.569-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.569-1.el5.i386",
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.569-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.569-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.569-1.el6_7.i686"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB16-04"
},
{
"cve": "CVE-2016-0970",
"discovery_date": "2016-02-09T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1306015"
}
],
"notes": [
{
"category": "description",
"text": "Adobe Flash Player before 18.0.0.329 and 19.x and 20.x before 20.0.0.306 on Windows and OS X and before 11.2.202.569 on Linux, Adobe AIR before 20.0.0.260, Adobe AIR SDK before 20.0.0.260, and Adobe AIR SDK \u0026 Compiler before 20.0.0.260 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-0964, CVE-2016-0965, CVE-2016-0966, CVE-2016-0967, CVE-2016-0968, CVE-2016-0969, CVE-2016-0972, CVE-2016-0976, CVE-2016-0977, CVE-2016-0978, CVE-2016-0979, CVE-2016-0980, and CVE-2016-0981.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB16-04",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.569-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.569-1.el5.i386",
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.569-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.569-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.569-1.el6_7.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-0970"
},
{
"category": "external",
"summary": "RHBZ#1306015",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1306015"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-0970",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-0970"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-0970",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-0970"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb16-04.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb16-04.html"
}
],
"release_date": "2016-02-09T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2016-02-10T21:10:25+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.569-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.569-1.el5.i386",
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.569-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.569-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.569-1.el6_7.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2016:0166"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.569-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.569-1.el5.i386",
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.569-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.569-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.569-1.el6_7.i686"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB16-04"
},
{
"cve": "CVE-2016-0971",
"discovery_date": "2016-02-09T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1306015"
}
],
"notes": [
{
"category": "description",
"text": "Heap-based buffer overflow in Adobe Flash Player before 18.0.0.329 and 19.x and 20.x before 20.0.0.306 on Windows and OS X and before 11.2.202.569 on Linux, Adobe AIR before 20.0.0.260, Adobe AIR SDK before 20.0.0.260, and Adobe AIR SDK \u0026 Compiler before 20.0.0.260 allows attackers to execute arbitrary code via unspecified vectors.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB16-04",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.569-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.569-1.el5.i386",
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.569-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.569-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.569-1.el6_7.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-0971"
},
{
"category": "external",
"summary": "RHBZ#1306015",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1306015"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-0971",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-0971"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-0971",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-0971"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb16-04.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb16-04.html"
}
],
"release_date": "2016-02-09T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2016-02-10T21:10:25+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.569-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.569-1.el5.i386",
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.569-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.569-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.569-1.el6_7.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2016:0166"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.569-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.569-1.el5.i386",
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.569-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.569-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.569-1.el6_7.i686"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB16-04"
},
{
"cve": "CVE-2016-0972",
"discovery_date": "2016-02-09T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1306015"
}
],
"notes": [
{
"category": "description",
"text": "Adobe Flash Player before 18.0.0.329 and 19.x and 20.x before 20.0.0.306 on Windows and OS X and before 11.2.202.569 on Linux, Adobe AIR before 20.0.0.260, Adobe AIR SDK before 20.0.0.260, and Adobe AIR SDK \u0026 Compiler before 20.0.0.260 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-0964, CVE-2016-0965, CVE-2016-0966, CVE-2016-0967, CVE-2016-0968, CVE-2016-0969, CVE-2016-0970, CVE-2016-0976, CVE-2016-0977, CVE-2016-0978, CVE-2016-0979, CVE-2016-0980, and CVE-2016-0981.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB16-04",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.569-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.569-1.el5.i386",
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.569-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.569-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.569-1.el6_7.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-0972"
},
{
"category": "external",
"summary": "RHBZ#1306015",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1306015"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-0972",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-0972"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-0972",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-0972"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb16-04.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb16-04.html"
}
],
"release_date": "2016-02-09T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2016-02-10T21:10:25+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.569-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.569-1.el5.i386",
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.569-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.569-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.569-1.el6_7.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2016:0166"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.569-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.569-1.el5.i386",
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.569-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.569-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.569-1.el6_7.i686"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB16-04"
},
{
"cve": "CVE-2016-0973",
"discovery_date": "2016-02-09T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1306015"
}
],
"notes": [
{
"category": "description",
"text": "Use-after-free vulnerability in the URLRequest object implementation in Adobe Flash Player before 18.0.0.329 and 19.x and 20.x before 20.0.0.306 on Windows and OS X and before 11.2.202.569 on Linux, Adobe AIR before 20.0.0.260, Adobe AIR SDK before 20.0.0.260, and Adobe AIR SDK \u0026 Compiler before 20.0.0.260 allows attackers to execute arbitrary code via a URLLoader.load call, a different vulnerability than CVE-2016-0974, CVE-2016-0975, CVE-2016-0982, CVE-2016-0983, and CVE-2016-0984.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB16-04",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.569-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.569-1.el5.i386",
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.569-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.569-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.569-1.el6_7.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-0973"
},
{
"category": "external",
"summary": "RHBZ#1306015",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1306015"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-0973",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-0973"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-0973",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-0973"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb16-04.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb16-04.html"
}
],
"release_date": "2016-02-09T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2016-02-10T21:10:25+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.569-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.569-1.el5.i386",
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.569-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.569-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.569-1.el6_7.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2016:0166"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.569-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.569-1.el5.i386",
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.569-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.569-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.569-1.el6_7.i686"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB16-04"
},
{
"cve": "CVE-2016-0974",
"discovery_date": "2016-02-09T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1306015"
}
],
"notes": [
{
"category": "description",
"text": "Use-after-free vulnerability in Adobe Flash Player before 18.0.0.329 and 19.x and 20.x before 20.0.0.306 on Windows and OS X and before 11.2.202.569 on Linux, Adobe AIR before 20.0.0.260, Adobe AIR SDK before 20.0.0.260, and Adobe AIR SDK \u0026 Compiler before 20.0.0.260 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2016-0973, CVE-2016-0975, CVE-2016-0982, CVE-2016-0983, and CVE-2016-0984.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB16-04",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.569-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.569-1.el5.i386",
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.569-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.569-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.569-1.el6_7.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-0974"
},
{
"category": "external",
"summary": "RHBZ#1306015",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1306015"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-0974",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-0974"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-0974",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-0974"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb16-04.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb16-04.html"
}
],
"release_date": "2016-02-09T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2016-02-10T21:10:25+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.569-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.569-1.el5.i386",
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.569-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.569-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.569-1.el6_7.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2016:0166"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.569-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.569-1.el5.i386",
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.569-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.569-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.569-1.el6_7.i686"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB16-04"
},
{
"cve": "CVE-2016-0975",
"discovery_date": "2016-02-09T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1306015"
}
],
"notes": [
{
"category": "description",
"text": "Use-after-free vulnerability in the instanceof function in Adobe Flash Player before 18.0.0.329 and 19.x and 20.x before 20.0.0.306 on Windows and OS X and before 11.2.202.569 on Linux, Adobe AIR before 20.0.0.260, Adobe AIR SDK before 20.0.0.260, and Adobe AIR SDK \u0026 Compiler before 20.0.0.260 allows attackers to execute arbitrary code by leveraging improper reference handling, a different vulnerability than CVE-2016-0973, CVE-2016-0974, CVE-2016-0982, CVE-2016-0983, and CVE-2016-0984.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB16-04",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.569-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.569-1.el5.i386",
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.569-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.569-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.569-1.el6_7.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-0975"
},
{
"category": "external",
"summary": "RHBZ#1306015",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1306015"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-0975",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-0975"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-0975",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-0975"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb16-04.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb16-04.html"
}
],
"release_date": "2016-02-09T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2016-02-10T21:10:25+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.569-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.569-1.el5.i386",
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.569-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.569-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.569-1.el6_7.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2016:0166"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.569-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.569-1.el5.i386",
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.569-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.569-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.569-1.el6_7.i686"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB16-04"
},
{
"cve": "CVE-2016-0976",
"discovery_date": "2016-02-09T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1306015"
}
],
"notes": [
{
"category": "description",
"text": "Adobe Flash Player before 18.0.0.329 and 19.x and 20.x before 20.0.0.306 on Windows and OS X and before 11.2.202.569 on Linux, Adobe AIR before 20.0.0.260, Adobe AIR SDK before 20.0.0.260, and Adobe AIR SDK \u0026 Compiler before 20.0.0.260 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-0964, CVE-2016-0965, CVE-2016-0966, CVE-2016-0967, CVE-2016-0968, CVE-2016-0969, CVE-2016-0970, CVE-2016-0972, CVE-2016-0977, CVE-2016-0978, CVE-2016-0979, CVE-2016-0980, and CVE-2016-0981.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB16-04",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.569-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.569-1.el5.i386",
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.569-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.569-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.569-1.el6_7.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-0976"
},
{
"category": "external",
"summary": "RHBZ#1306015",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1306015"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-0976",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-0976"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-0976",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-0976"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb16-04.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb16-04.html"
}
],
"release_date": "2016-02-09T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2016-02-10T21:10:25+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.569-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.569-1.el5.i386",
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.569-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.569-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.569-1.el6_7.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2016:0166"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.569-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.569-1.el5.i386",
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.569-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.569-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.569-1.el6_7.i686"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB16-04"
},
{
"cve": "CVE-2016-0977",
"discovery_date": "2016-02-09T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1306015"
}
],
"notes": [
{
"category": "description",
"text": "Adobe Flash Player before 18.0.0.329 and 19.x and 20.x before 20.0.0.306 on Windows and OS X and before 11.2.202.569 on Linux, Adobe AIR before 20.0.0.260, Adobe AIR SDK before 20.0.0.260, and Adobe AIR SDK \u0026 Compiler before 20.0.0.260 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-0964, CVE-2016-0965, CVE-2016-0966, CVE-2016-0967, CVE-2016-0968, CVE-2016-0969, CVE-2016-0970, CVE-2016-0972, CVE-2016-0976, CVE-2016-0978, CVE-2016-0979, CVE-2016-0980, and CVE-2016-0981.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB16-04",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.569-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.569-1.el5.i386",
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.569-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.569-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.569-1.el6_7.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-0977"
},
{
"category": "external",
"summary": "RHBZ#1306015",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1306015"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-0977",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-0977"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-0977",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-0977"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb16-04.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb16-04.html"
}
],
"release_date": "2016-02-09T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2016-02-10T21:10:25+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.569-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.569-1.el5.i386",
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.569-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.569-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.569-1.el6_7.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2016:0166"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.569-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.569-1.el5.i386",
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.569-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.569-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.569-1.el6_7.i686"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB16-04"
},
{
"cve": "CVE-2016-0978",
"discovery_date": "2016-02-09T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1306015"
}
],
"notes": [
{
"category": "description",
"text": "Adobe Flash Player before 18.0.0.329 and 19.x and 20.x before 20.0.0.306 on Windows and OS X and before 11.2.202.569 on Linux, Adobe AIR before 20.0.0.260, Adobe AIR SDK before 20.0.0.260, and Adobe AIR SDK \u0026 Compiler before 20.0.0.260 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-0964, CVE-2016-0965, CVE-2016-0966, CVE-2016-0967, CVE-2016-0968, CVE-2016-0969, CVE-2016-0970, CVE-2016-0972, CVE-2016-0976, CVE-2016-0977, CVE-2016-0979, CVE-2016-0980, and CVE-2016-0981.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB16-04",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.569-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.569-1.el5.i386",
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.569-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.569-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.569-1.el6_7.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-0978"
},
{
"category": "external",
"summary": "RHBZ#1306015",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1306015"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-0978",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-0978"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-0978",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-0978"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb16-04.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb16-04.html"
}
],
"release_date": "2016-02-09T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2016-02-10T21:10:25+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.569-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.569-1.el5.i386",
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.569-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.569-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.569-1.el6_7.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2016:0166"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.569-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.569-1.el5.i386",
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.569-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.569-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.569-1.el6_7.i686"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB16-04"
},
{
"cve": "CVE-2016-0979",
"discovery_date": "2016-02-09T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1306015"
}
],
"notes": [
{
"category": "description",
"text": "Adobe Flash Player before 18.0.0.329 and 19.x and 20.x before 20.0.0.306 on Windows and OS X and before 11.2.202.569 on Linux, Adobe AIR before 20.0.0.260, Adobe AIR SDK before 20.0.0.260, and Adobe AIR SDK \u0026 Compiler before 20.0.0.260 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-0964, CVE-2016-0965, CVE-2016-0966, CVE-2016-0967, CVE-2016-0968, CVE-2016-0969, CVE-2016-0970, CVE-2016-0972, CVE-2016-0976, CVE-2016-0977, CVE-2016-0978, CVE-2016-0980, and CVE-2016-0981.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB16-04",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.569-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.569-1.el5.i386",
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.569-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.569-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.569-1.el6_7.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-0979"
},
{
"category": "external",
"summary": "RHBZ#1306015",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1306015"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-0979",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-0979"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-0979",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-0979"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb16-04.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb16-04.html"
}
],
"release_date": "2016-02-09T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2016-02-10T21:10:25+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.569-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.569-1.el5.i386",
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.569-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.569-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.569-1.el6_7.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2016:0166"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.569-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.569-1.el5.i386",
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.569-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.569-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.569-1.el6_7.i686"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB16-04"
},
{
"cve": "CVE-2016-0980",
"discovery_date": "2016-02-09T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1306015"
}
],
"notes": [
{
"category": "description",
"text": "Adobe Flash Player before 18.0.0.329 and 19.x and 20.x before 20.0.0.306 on Windows and OS X and before 11.2.202.569 on Linux, Adobe AIR before 20.0.0.260, Adobe AIR SDK before 20.0.0.260, and Adobe AIR SDK \u0026 Compiler before 20.0.0.260 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-0964, CVE-2016-0965, CVE-2016-0966, CVE-2016-0967, CVE-2016-0968, CVE-2016-0969, CVE-2016-0970, CVE-2016-0972, CVE-2016-0976, CVE-2016-0977, CVE-2016-0978, CVE-2016-0979, and CVE-2016-0981.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB16-04",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.569-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.569-1.el5.i386",
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.569-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.569-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.569-1.el6_7.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-0980"
},
{
"category": "external",
"summary": "RHBZ#1306015",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1306015"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-0980",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-0980"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-0980",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-0980"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb16-04.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb16-04.html"
}
],
"release_date": "2016-02-09T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2016-02-10T21:10:25+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.569-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.569-1.el5.i386",
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.569-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.569-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.569-1.el6_7.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2016:0166"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.569-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.569-1.el5.i386",
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.569-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.569-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.569-1.el6_7.i686"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB16-04"
},
{
"cve": "CVE-2016-0981",
"discovery_date": "2016-02-09T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1306015"
}
],
"notes": [
{
"category": "description",
"text": "Adobe Flash Player before 18.0.0.329 and 19.x and 20.x before 20.0.0.306 on Windows and OS X and before 11.2.202.569 on Linux, Adobe AIR before 20.0.0.260, Adobe AIR SDK before 20.0.0.260, and Adobe AIR SDK \u0026 Compiler before 20.0.0.260 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-0964, CVE-2016-0965, CVE-2016-0966, CVE-2016-0967, CVE-2016-0968, CVE-2016-0969, CVE-2016-0970, CVE-2016-0972, CVE-2016-0976, CVE-2016-0977, CVE-2016-0978, CVE-2016-0979, and CVE-2016-0980.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB16-04",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.569-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.569-1.el5.i386",
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.569-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.569-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.569-1.el6_7.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-0981"
},
{
"category": "external",
"summary": "RHBZ#1306015",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1306015"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-0981",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-0981"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-0981",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-0981"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb16-04.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb16-04.html"
}
],
"release_date": "2016-02-09T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2016-02-10T21:10:25+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.569-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.569-1.el5.i386",
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.569-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.569-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.569-1.el6_7.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2016:0166"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.569-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.569-1.el5.i386",
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.569-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.569-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.569-1.el6_7.i686"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB16-04"
},
{
"cve": "CVE-2016-0982",
"discovery_date": "2016-02-09T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1306015"
}
],
"notes": [
{
"category": "description",
"text": "Use-after-free vulnerability in Adobe Flash Player before 18.0.0.329 and 19.x and 20.x before 20.0.0.306 on Windows and OS X and before 11.2.202.569 on Linux, Adobe AIR before 20.0.0.260, Adobe AIR SDK before 20.0.0.260, and Adobe AIR SDK \u0026 Compiler before 20.0.0.260 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2016-0973, CVE-2016-0974, CVE-2016-0975, CVE-2016-0983, and CVE-2016-0984.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB16-04",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.569-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.569-1.el5.i386",
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.569-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.569-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.569-1.el6_7.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-0982"
},
{
"category": "external",
"summary": "RHBZ#1306015",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1306015"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-0982",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-0982"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-0982",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-0982"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb16-04.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb16-04.html"
}
],
"release_date": "2016-02-09T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2016-02-10T21:10:25+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.569-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.569-1.el5.i386",
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.569-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.569-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.569-1.el6_7.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2016:0166"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.569-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.569-1.el5.i386",
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.569-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.569-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.569-1.el6_7.i686"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB16-04"
},
{
"cve": "CVE-2016-0983",
"discovery_date": "2016-02-09T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1306015"
}
],
"notes": [
{
"category": "description",
"text": "Use-after-free vulnerability in Adobe Flash Player before 18.0.0.329 and 19.x and 20.x before 20.0.0.306 on Windows and OS X and before 11.2.202.569 on Linux, Adobe AIR before 20.0.0.260, Adobe AIR SDK before 20.0.0.260, and Adobe AIR SDK \u0026 Compiler before 20.0.0.260 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2016-0973, CVE-2016-0974, CVE-2016-0975, CVE-2016-0982, and CVE-2016-0984.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB16-04",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.569-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.569-1.el5.i386",
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.569-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.569-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.569-1.el6_7.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-0983"
},
{
"category": "external",
"summary": "RHBZ#1306015",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1306015"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-0983",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-0983"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-0983",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-0983"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb16-04.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb16-04.html"
}
],
"release_date": "2016-02-09T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2016-02-10T21:10:25+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.569-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.569-1.el5.i386",
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.569-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.569-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.569-1.el6_7.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2016:0166"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.569-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.569-1.el5.i386",
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.569-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.569-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.569-1.el6_7.i686"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB16-04"
},
{
"cve": "CVE-2016-0984",
"discovery_date": "2016-02-09T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1306015"
}
],
"notes": [
{
"category": "description",
"text": "Use-after-free vulnerability in Adobe Flash Player before 18.0.0.329 and 19.x and 20.x before 20.0.0.306 on Windows and OS X and before 11.2.202.569 on Linux, Adobe AIR before 20.0.0.260, Adobe AIR SDK before 20.0.0.260, and Adobe AIR SDK \u0026 Compiler before 20.0.0.260 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2016-0973, CVE-2016-0974, CVE-2016-0975, CVE-2016-0982, and CVE-2016-0983.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB16-04",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.569-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.569-1.el5.i386",
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.569-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.569-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.569-1.el6_7.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-0984"
},
{
"category": "external",
"summary": "RHBZ#1306015",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1306015"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-0984",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-0984"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-0984",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-0984"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb16-04.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb16-04.html"
},
{
"category": "external",
"summary": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog",
"url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
}
],
"release_date": "2016-02-09T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2016-02-10T21:10:25+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.569-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.569-1.el5.i386",
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.569-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.569-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.569-1.el6_7.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2016:0166"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.569-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.569-1.el5.i386",
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.569-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.569-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.569-1.el6_7.i686"
]
}
],
"threats": [
{
"category": "exploit_status",
"date": "2022-05-25T00:00:00+00:00",
"details": "CISA: https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
},
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB16-04"
},
{
"cve": "CVE-2016-0985",
"discovery_date": "2016-02-09T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1306015"
}
],
"notes": [
{
"category": "description",
"text": "Adobe Flash Player before 18.0.0.329 and 19.x and 20.x before 20.0.0.306 on Windows and OS X and before 11.2.202.569 on Linux, Adobe AIR before 20.0.0.260, Adobe AIR SDK before 20.0.0.260, and Adobe AIR SDK \u0026 Compiler before 20.0.0.260 allow attackers to execute arbitrary code by leveraging an unspecified \"type confusion.\"",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB16-04",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.569-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.569-1.el5.i386",
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.569-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.569-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.569-1.el6_7.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-0985"
},
{
"category": "external",
"summary": "RHBZ#1306015",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1306015"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-0985",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-0985"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-0985",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-0985"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb16-04.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb16-04.html"
}
],
"release_date": "2016-02-09T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2016-02-10T21:10:25+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.569-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.569-1.el5.i386",
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.569-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.569-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.569-1.el6_7.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2016:0166"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.569-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.569-1.el5.i386",
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.569-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.569-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.569-1.el6_7.i686"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB16-04"
}
]
}
SUSE-SU-2016:0398-1
Vulnerability from csaf_suse - Published: 2016-02-10 09:08 - Updated: 2016-02-10 09:08| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.569-120.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.569-120.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.569-120.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.569-120.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.569-120.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.569-120.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.569-120.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.569-120.1.x86_64 | — |
Vendor Fix
|
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.569-120.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.569-120.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.569-120.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.569-120.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.569-120.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.569-120.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.569-120.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.569-120.1.x86_64 | — |
Vendor Fix
|
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.569-120.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.569-120.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.569-120.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.569-120.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.569-120.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.569-120.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.569-120.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.569-120.1.x86_64 | — |
Vendor Fix
|
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.569-120.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.569-120.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.569-120.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.569-120.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.569-120.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.569-120.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.569-120.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.569-120.1.x86_64 | — |
Vendor Fix
|
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.569-120.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.569-120.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.569-120.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.569-120.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.569-120.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.569-120.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.569-120.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.569-120.1.x86_64 | — |
Vendor Fix
|
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.569-120.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.569-120.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.569-120.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.569-120.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.569-120.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.569-120.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.569-120.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.569-120.1.x86_64 | — |
Vendor Fix
|
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.569-120.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.569-120.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.569-120.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.569-120.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.569-120.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.569-120.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.569-120.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.569-120.1.x86_64 | — |
Vendor Fix
|
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.569-120.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.569-120.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.569-120.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.569-120.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.569-120.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.569-120.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.569-120.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.569-120.1.x86_64 | — |
Vendor Fix
|
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.569-120.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.569-120.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.569-120.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.569-120.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.569-120.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.569-120.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.569-120.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.569-120.1.x86_64 | — |
Vendor Fix
|
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.569-120.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.569-120.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.569-120.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.569-120.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.569-120.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.569-120.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.569-120.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.569-120.1.x86_64 | — |
Vendor Fix
|
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.569-120.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.569-120.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.569-120.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.569-120.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.569-120.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.569-120.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.569-120.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.569-120.1.x86_64 | — |
Vendor Fix
|
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.569-120.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.569-120.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.569-120.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.569-120.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.569-120.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.569-120.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.569-120.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.569-120.1.x86_64 | — |
Vendor Fix
|
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.569-120.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.569-120.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.569-120.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.569-120.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.569-120.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.569-120.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.569-120.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.569-120.1.x86_64 | — |
Vendor Fix
|
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.569-120.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.569-120.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.569-120.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.569-120.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.569-120.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.569-120.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.569-120.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.569-120.1.x86_64 | — |
Vendor Fix
|
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.569-120.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.569-120.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.569-120.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.569-120.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.569-120.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.569-120.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.569-120.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.569-120.1.x86_64 | — |
Vendor Fix
|
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.569-120.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.569-120.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.569-120.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.569-120.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.569-120.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.569-120.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.569-120.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.569-120.1.x86_64 | — |
Vendor Fix
|
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.569-120.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.569-120.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.569-120.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.569-120.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.569-120.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.569-120.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.569-120.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.569-120.1.x86_64 | — |
Vendor Fix
|
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.569-120.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.569-120.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.569-120.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.569-120.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.569-120.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.569-120.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.569-120.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.569-120.1.x86_64 | — |
Vendor Fix
|
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.569-120.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.569-120.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.569-120.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.569-120.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.569-120.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.569-120.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.569-120.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.569-120.1.x86_64 | — |
Vendor Fix
|
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.569-120.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.569-120.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.569-120.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.569-120.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.569-120.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.569-120.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.569-120.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.569-120.1.x86_64 | — |
Vendor Fix
|
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.569-120.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.569-120.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.569-120.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.569-120.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.569-120.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.569-120.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.569-120.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.569-120.1.x86_64 | — |
Vendor Fix
|
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.569-120.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.569-120.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.569-120.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.569-120.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.569-120.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.569-120.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.569-120.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.569-120.1.x86_64 | — |
Vendor Fix
|
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Security update for flash-player",
"title": "Title of the patch"
},
{
"category": "description",
"text": "\nThis update for flash-player fixes the following issues:\n\n- Security update to 11.2.202.569 (bsc#965901):\n * APSB16-04, CVE-2016-0964, CVE-2016-0965, CVE-2016-0966,\n CVE-2016-0967, CVE-2016-0968, CVE-2016-0969, CVE-2016-0970,\n CVE-2016-0971, CVE-2016-0972, CVE-2016-0973, CVE-2016-0974,\n CVE-2016-0975, CVE-2016-0976, CVE-2016-0977, CVE-2016-0978,\n CVE-2016-0979, CVE-2016-0980, CVE-2016-0981, CVE-2016-0982,\n CVE-2016-0983, CVE-2016-0984, CVE-2016-0985\n",
"title": "Description of the patch"
},
{
"category": "details",
"text": "SUSE-SLE-DESKTOP-12-2016-235,SUSE-SLE-DESKTOP-12-SP1-2016-235,SUSE-SLE-WE-12-2016-235,SUSE-SLE-WE-12-SP1-2016-235",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2016_0398-1.json"
},
{
"category": "self",
"summary": "URL for SUSE-SU-2016:0398-1",
"url": "https://www.suse.com/support/update/announcement/2016/suse-su-20160398-1/"
},
{
"category": "self",
"summary": "E-Mail link for SUSE-SU-2016:0398-1",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2016-February/001865.html"
},
{
"category": "self",
"summary": "SUSE Bug 965901",
"url": "https://bugzilla.suse.com/965901"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-0964 page",
"url": "https://www.suse.com/security/cve/CVE-2016-0964/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-0965 page",
"url": "https://www.suse.com/security/cve/CVE-2016-0965/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-0966 page",
"url": "https://www.suse.com/security/cve/CVE-2016-0966/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-0967 page",
"url": "https://www.suse.com/security/cve/CVE-2016-0967/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-0968 page",
"url": "https://www.suse.com/security/cve/CVE-2016-0968/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-0969 page",
"url": "https://www.suse.com/security/cve/CVE-2016-0969/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-0970 page",
"url": "https://www.suse.com/security/cve/CVE-2016-0970/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-0971 page",
"url": "https://www.suse.com/security/cve/CVE-2016-0971/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-0972 page",
"url": "https://www.suse.com/security/cve/CVE-2016-0972/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-0973 page",
"url": "https://www.suse.com/security/cve/CVE-2016-0973/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-0974 page",
"url": "https://www.suse.com/security/cve/CVE-2016-0974/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-0975 page",
"url": "https://www.suse.com/security/cve/CVE-2016-0975/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-0976 page",
"url": "https://www.suse.com/security/cve/CVE-2016-0976/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-0977 page",
"url": "https://www.suse.com/security/cve/CVE-2016-0977/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-0978 page",
"url": "https://www.suse.com/security/cve/CVE-2016-0978/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-0979 page",
"url": "https://www.suse.com/security/cve/CVE-2016-0979/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-0980 page",
"url": "https://www.suse.com/security/cve/CVE-2016-0980/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-0981 page",
"url": "https://www.suse.com/security/cve/CVE-2016-0981/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-0982 page",
"url": "https://www.suse.com/security/cve/CVE-2016-0982/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-0983 page",
"url": "https://www.suse.com/security/cve/CVE-2016-0983/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-0984 page",
"url": "https://www.suse.com/security/cve/CVE-2016-0984/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-0985 page",
"url": "https://www.suse.com/security/cve/CVE-2016-0985/"
}
],
"title": "Security update for flash-player",
"tracking": {
"current_release_date": "2016-02-10T09:08:38Z",
"generator": {
"date": "2016-02-10T09:08:38Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "SUSE-SU-2016:0398-1",
"initial_release_date": "2016-02-10T09:08:38Z",
"revision_history": [
{
"date": "2016-02-10T09:08:38Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "flash-player-11.2.202.569-120.1.x86_64",
"product": {
"name": "flash-player-11.2.202.569-120.1.x86_64",
"product_id": "flash-player-11.2.202.569-120.1.x86_64"
}
},
{
"category": "product_version",
"name": "flash-player-gnome-11.2.202.569-120.1.x86_64",
"product": {
"name": "flash-player-gnome-11.2.202.569-120.1.x86_64",
"product_id": "flash-player-gnome-11.2.202.569-120.1.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE Linux Enterprise Desktop 12",
"product": {
"name": "SUSE Linux Enterprise Desktop 12",
"product_id": "SUSE Linux Enterprise Desktop 12",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sled:12"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Desktop 12 SP1",
"product": {
"name": "SUSE Linux Enterprise Desktop 12 SP1",
"product_id": "SUSE Linux Enterprise Desktop 12 SP1",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sled:12:sp1"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Workstation Extension 12",
"product": {
"name": "SUSE Linux Enterprise Workstation Extension 12",
"product_id": "SUSE Linux Enterprise Workstation Extension 12",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sle-we:12"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Workstation Extension 12 SP1",
"product": {
"name": "SUSE Linux Enterprise Workstation Extension 12 SP1",
"product_id": "SUSE Linux Enterprise Workstation Extension 12 SP1",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sle-we:12:sp1"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "flash-player-11.2.202.569-120.1.x86_64 as component of SUSE Linux Enterprise Desktop 12",
"product_id": "SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.569-120.1.x86_64"
},
"product_reference": "flash-player-11.2.202.569-120.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Desktop 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "flash-player-gnome-11.2.202.569-120.1.x86_64 as component of SUSE Linux Enterprise Desktop 12",
"product_id": "SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.569-120.1.x86_64"
},
"product_reference": "flash-player-gnome-11.2.202.569-120.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Desktop 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "flash-player-11.2.202.569-120.1.x86_64 as component of SUSE Linux Enterprise Desktop 12 SP1",
"product_id": "SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.569-120.1.x86_64"
},
"product_reference": "flash-player-11.2.202.569-120.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Desktop 12 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "flash-player-gnome-11.2.202.569-120.1.x86_64 as component of SUSE Linux Enterprise Desktop 12 SP1",
"product_id": "SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.569-120.1.x86_64"
},
"product_reference": "flash-player-gnome-11.2.202.569-120.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Desktop 12 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "flash-player-11.2.202.569-120.1.x86_64 as component of SUSE Linux Enterprise Workstation Extension 12",
"product_id": "SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.569-120.1.x86_64"
},
"product_reference": "flash-player-11.2.202.569-120.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Workstation Extension 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "flash-player-gnome-11.2.202.569-120.1.x86_64 as component of SUSE Linux Enterprise Workstation Extension 12",
"product_id": "SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.569-120.1.x86_64"
},
"product_reference": "flash-player-gnome-11.2.202.569-120.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Workstation Extension 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "flash-player-11.2.202.569-120.1.x86_64 as component of SUSE Linux Enterprise Workstation Extension 12 SP1",
"product_id": "SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.569-120.1.x86_64"
},
"product_reference": "flash-player-11.2.202.569-120.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Workstation Extension 12 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "flash-player-gnome-11.2.202.569-120.1.x86_64 as component of SUSE Linux Enterprise Workstation Extension 12 SP1",
"product_id": "SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.569-120.1.x86_64"
},
"product_reference": "flash-player-gnome-11.2.202.569-120.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Workstation Extension 12 SP1"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2016-0964",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-0964"
}
],
"notes": [
{
"category": "general",
"text": "Adobe Flash Player before 18.0.0.329 and 19.x and 20.x before 20.0.0.306 on Windows and OS X and before 11.2.202.569 on Linux, Adobe AIR before 20.0.0.260, Adobe AIR SDK before 20.0.0.260, and Adobe AIR SDK \u0026 Compiler before 20.0.0.260 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-0965, CVE-2016-0966, CVE-2016-0967, CVE-2016-0968, CVE-2016-0969, CVE-2016-0970, CVE-2016-0972, CVE-2016-0976, CVE-2016-0977, CVE-2016-0978, CVE-2016-0979, CVE-2016-0980, and CVE-2016-0981.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.569-120.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-0964",
"url": "https://www.suse.com/security/cve/CVE-2016-0964"
},
{
"category": "external",
"summary": "SUSE Bug 965901 for CVE-2016-0964",
"url": "https://bugzilla.suse.com/965901"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.569-120.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.569-120.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-02-10T09:08:38Z",
"details": "moderate"
}
],
"title": "CVE-2016-0964"
},
{
"cve": "CVE-2016-0965",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-0965"
}
],
"notes": [
{
"category": "general",
"text": "Adobe Flash Player before 18.0.0.329 and 19.x and 20.x before 20.0.0.306 on Windows and OS X and before 11.2.202.569 on Linux, Adobe AIR before 20.0.0.260, Adobe AIR SDK before 20.0.0.260, and Adobe AIR SDK \u0026 Compiler before 20.0.0.260 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-0964, CVE-2016-0966, CVE-2016-0967, CVE-2016-0968, CVE-2016-0969, CVE-2016-0970, CVE-2016-0972, CVE-2016-0976, CVE-2016-0977, CVE-2016-0978, CVE-2016-0979, CVE-2016-0980, and CVE-2016-0981.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.569-120.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-0965",
"url": "https://www.suse.com/security/cve/CVE-2016-0965"
},
{
"category": "external",
"summary": "SUSE Bug 965901 for CVE-2016-0965",
"url": "https://bugzilla.suse.com/965901"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.569-120.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.569-120.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-02-10T09:08:38Z",
"details": "important"
}
],
"title": "CVE-2016-0965"
},
{
"cve": "CVE-2016-0966",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-0966"
}
],
"notes": [
{
"category": "general",
"text": "Adobe Flash Player before 18.0.0.329 and 19.x and 20.x before 20.0.0.306 on Windows and OS X and before 11.2.202.569 on Linux, Adobe AIR before 20.0.0.260, Adobe AIR SDK before 20.0.0.260, and Adobe AIR SDK \u0026 Compiler before 20.0.0.260 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-0964, CVE-2016-0965, CVE-2016-0967, CVE-2016-0968, CVE-2016-0969, CVE-2016-0970, CVE-2016-0972, CVE-2016-0976, CVE-2016-0977, CVE-2016-0978, CVE-2016-0979, CVE-2016-0980, and CVE-2016-0981.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.569-120.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-0966",
"url": "https://www.suse.com/security/cve/CVE-2016-0966"
},
{
"category": "external",
"summary": "SUSE Bug 965901 for CVE-2016-0966",
"url": "https://bugzilla.suse.com/965901"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.569-120.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.569-120.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-02-10T09:08:38Z",
"details": "moderate"
}
],
"title": "CVE-2016-0966"
},
{
"cve": "CVE-2016-0967",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-0967"
}
],
"notes": [
{
"category": "general",
"text": "Adobe Flash Player before 18.0.0.329 and 19.x and 20.x before 20.0.0.306 on Windows and OS X and before 11.2.202.569 on Linux, Adobe AIR before 20.0.0.260, Adobe AIR SDK before 20.0.0.260, and Adobe AIR SDK \u0026 Compiler before 20.0.0.260 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-0964, CVE-2016-0965, CVE-2016-0966, CVE-2016-0968, CVE-2016-0969, CVE-2016-0970, CVE-2016-0972, CVE-2016-0976, CVE-2016-0977, CVE-2016-0978, CVE-2016-0979, CVE-2016-0980, and CVE-2016-0981.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.569-120.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-0967",
"url": "https://www.suse.com/security/cve/CVE-2016-0967"
},
{
"category": "external",
"summary": "SUSE Bug 965901 for CVE-2016-0967",
"url": "https://bugzilla.suse.com/965901"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.569-120.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.569-120.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-02-10T09:08:38Z",
"details": "moderate"
}
],
"title": "CVE-2016-0967"
},
{
"cve": "CVE-2016-0968",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-0968"
}
],
"notes": [
{
"category": "general",
"text": "Adobe Flash Player before 18.0.0.329 and 19.x and 20.x before 20.0.0.306 on Windows and OS X and before 11.2.202.569 on Linux, Adobe AIR before 20.0.0.260, Adobe AIR SDK before 20.0.0.260, and Adobe AIR SDK \u0026 Compiler before 20.0.0.260 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-0964, CVE-2016-0965, CVE-2016-0966, CVE-2016-0967, CVE-2016-0969, CVE-2016-0970, CVE-2016-0972, CVE-2016-0976, CVE-2016-0977, CVE-2016-0978, CVE-2016-0979, CVE-2016-0980, and CVE-2016-0981.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.569-120.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-0968",
"url": "https://www.suse.com/security/cve/CVE-2016-0968"
},
{
"category": "external",
"summary": "SUSE Bug 965901 for CVE-2016-0968",
"url": "https://bugzilla.suse.com/965901"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.569-120.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.569-120.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-02-10T09:08:38Z",
"details": "moderate"
}
],
"title": "CVE-2016-0968"
},
{
"cve": "CVE-2016-0969",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-0969"
}
],
"notes": [
{
"category": "general",
"text": "Adobe Flash Player before 18.0.0.329 and 19.x and 20.x before 20.0.0.306 on Windows and OS X and before 11.2.202.569 on Linux, Adobe AIR before 20.0.0.260, Adobe AIR SDK before 20.0.0.260, and Adobe AIR SDK \u0026 Compiler before 20.0.0.260 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-0964, CVE-2016-0965, CVE-2016-0966, CVE-2016-0967, CVE-2016-0968, CVE-2016-0970, CVE-2016-0972, CVE-2016-0976, CVE-2016-0977, CVE-2016-0978, CVE-2016-0979, CVE-2016-0980, and CVE-2016-0981.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.569-120.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-0969",
"url": "https://www.suse.com/security/cve/CVE-2016-0969"
},
{
"category": "external",
"summary": "SUSE Bug 965901 for CVE-2016-0969",
"url": "https://bugzilla.suse.com/965901"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.569-120.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.569-120.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-02-10T09:08:38Z",
"details": "moderate"
}
],
"title": "CVE-2016-0969"
},
{
"cve": "CVE-2016-0970",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-0970"
}
],
"notes": [
{
"category": "general",
"text": "Adobe Flash Player before 18.0.0.329 and 19.x and 20.x before 20.0.0.306 on Windows and OS X and before 11.2.202.569 on Linux, Adobe AIR before 20.0.0.260, Adobe AIR SDK before 20.0.0.260, and Adobe AIR SDK \u0026 Compiler before 20.0.0.260 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-0964, CVE-2016-0965, CVE-2016-0966, CVE-2016-0967, CVE-2016-0968, CVE-2016-0969, CVE-2016-0972, CVE-2016-0976, CVE-2016-0977, CVE-2016-0978, CVE-2016-0979, CVE-2016-0980, and CVE-2016-0981.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.569-120.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-0970",
"url": "https://www.suse.com/security/cve/CVE-2016-0970"
},
{
"category": "external",
"summary": "SUSE Bug 965901 for CVE-2016-0970",
"url": "https://bugzilla.suse.com/965901"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.569-120.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.569-120.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-02-10T09:08:38Z",
"details": "moderate"
}
],
"title": "CVE-2016-0970"
},
{
"cve": "CVE-2016-0971",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-0971"
}
],
"notes": [
{
"category": "general",
"text": "Heap-based buffer overflow in Adobe Flash Player before 18.0.0.329 and 19.x and 20.x before 20.0.0.306 on Windows and OS X and before 11.2.202.569 on Linux, Adobe AIR before 20.0.0.260, Adobe AIR SDK before 20.0.0.260, and Adobe AIR SDK \u0026 Compiler before 20.0.0.260 allows attackers to execute arbitrary code via unspecified vectors.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.569-120.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-0971",
"url": "https://www.suse.com/security/cve/CVE-2016-0971"
},
{
"category": "external",
"summary": "SUSE Bug 965901 for CVE-2016-0971",
"url": "https://bugzilla.suse.com/965901"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.569-120.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.569-120.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-02-10T09:08:38Z",
"details": "moderate"
}
],
"title": "CVE-2016-0971"
},
{
"cve": "CVE-2016-0972",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-0972"
}
],
"notes": [
{
"category": "general",
"text": "Adobe Flash Player before 18.0.0.329 and 19.x and 20.x before 20.0.0.306 on Windows and OS X and before 11.2.202.569 on Linux, Adobe AIR before 20.0.0.260, Adobe AIR SDK before 20.0.0.260, and Adobe AIR SDK \u0026 Compiler before 20.0.0.260 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-0964, CVE-2016-0965, CVE-2016-0966, CVE-2016-0967, CVE-2016-0968, CVE-2016-0969, CVE-2016-0970, CVE-2016-0976, CVE-2016-0977, CVE-2016-0978, CVE-2016-0979, CVE-2016-0980, and CVE-2016-0981.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.569-120.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-0972",
"url": "https://www.suse.com/security/cve/CVE-2016-0972"
},
{
"category": "external",
"summary": "SUSE Bug 965901 for CVE-2016-0972",
"url": "https://bugzilla.suse.com/965901"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.569-120.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.569-120.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-02-10T09:08:38Z",
"details": "moderate"
}
],
"title": "CVE-2016-0972"
},
{
"cve": "CVE-2016-0973",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-0973"
}
],
"notes": [
{
"category": "general",
"text": "Use-after-free vulnerability in the URLRequest object implementation in Adobe Flash Player before 18.0.0.329 and 19.x and 20.x before 20.0.0.306 on Windows and OS X and before 11.2.202.569 on Linux, Adobe AIR before 20.0.0.260, Adobe AIR SDK before 20.0.0.260, and Adobe AIR SDK \u0026 Compiler before 20.0.0.260 allows attackers to execute arbitrary code via a URLLoader.load call, a different vulnerability than CVE-2016-0974, CVE-2016-0975, CVE-2016-0982, CVE-2016-0983, and CVE-2016-0984.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.569-120.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-0973",
"url": "https://www.suse.com/security/cve/CVE-2016-0973"
},
{
"category": "external",
"summary": "SUSE Bug 965901 for CVE-2016-0973",
"url": "https://bugzilla.suse.com/965901"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.569-120.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.569-120.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-02-10T09:08:38Z",
"details": "moderate"
}
],
"title": "CVE-2016-0973"
},
{
"cve": "CVE-2016-0974",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-0974"
}
],
"notes": [
{
"category": "general",
"text": "Use-after-free vulnerability in Adobe Flash Player before 18.0.0.329 and 19.x and 20.x before 20.0.0.306 on Windows and OS X and before 11.2.202.569 on Linux, Adobe AIR before 20.0.0.260, Adobe AIR SDK before 20.0.0.260, and Adobe AIR SDK \u0026 Compiler before 20.0.0.260 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2016-0973, CVE-2016-0975, CVE-2016-0982, CVE-2016-0983, and CVE-2016-0984.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.569-120.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-0974",
"url": "https://www.suse.com/security/cve/CVE-2016-0974"
},
{
"category": "external",
"summary": "SUSE Bug 965901 for CVE-2016-0974",
"url": "https://bugzilla.suse.com/965901"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.569-120.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.569-120.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-02-10T09:08:38Z",
"details": "moderate"
}
],
"title": "CVE-2016-0974"
},
{
"cve": "CVE-2016-0975",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-0975"
}
],
"notes": [
{
"category": "general",
"text": "Use-after-free vulnerability in the instanceof function in Adobe Flash Player before 18.0.0.329 and 19.x and 20.x before 20.0.0.306 on Windows and OS X and before 11.2.202.569 on Linux, Adobe AIR before 20.0.0.260, Adobe AIR SDK before 20.0.0.260, and Adobe AIR SDK \u0026 Compiler before 20.0.0.260 allows attackers to execute arbitrary code by leveraging improper reference handling, a different vulnerability than CVE-2016-0973, CVE-2016-0974, CVE-2016-0982, CVE-2016-0983, and CVE-2016-0984.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.569-120.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-0975",
"url": "https://www.suse.com/security/cve/CVE-2016-0975"
},
{
"category": "external",
"summary": "SUSE Bug 965901 for CVE-2016-0975",
"url": "https://bugzilla.suse.com/965901"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.569-120.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.569-120.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-02-10T09:08:38Z",
"details": "moderate"
}
],
"title": "CVE-2016-0975"
},
{
"cve": "CVE-2016-0976",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-0976"
}
],
"notes": [
{
"category": "general",
"text": "Adobe Flash Player before 18.0.0.329 and 19.x and 20.x before 20.0.0.306 on Windows and OS X and before 11.2.202.569 on Linux, Adobe AIR before 20.0.0.260, Adobe AIR SDK before 20.0.0.260, and Adobe AIR SDK \u0026 Compiler before 20.0.0.260 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-0964, CVE-2016-0965, CVE-2016-0966, CVE-2016-0967, CVE-2016-0968, CVE-2016-0969, CVE-2016-0970, CVE-2016-0972, CVE-2016-0977, CVE-2016-0978, CVE-2016-0979, CVE-2016-0980, and CVE-2016-0981.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.569-120.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-0976",
"url": "https://www.suse.com/security/cve/CVE-2016-0976"
},
{
"category": "external",
"summary": "SUSE Bug 965901 for CVE-2016-0976",
"url": "https://bugzilla.suse.com/965901"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.569-120.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.569-120.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-02-10T09:08:38Z",
"details": "moderate"
}
],
"title": "CVE-2016-0976"
},
{
"cve": "CVE-2016-0977",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-0977"
}
],
"notes": [
{
"category": "general",
"text": "Adobe Flash Player before 18.0.0.329 and 19.x and 20.x before 20.0.0.306 on Windows and OS X and before 11.2.202.569 on Linux, Adobe AIR before 20.0.0.260, Adobe AIR SDK before 20.0.0.260, and Adobe AIR SDK \u0026 Compiler before 20.0.0.260 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-0964, CVE-2016-0965, CVE-2016-0966, CVE-2016-0967, CVE-2016-0968, CVE-2016-0969, CVE-2016-0970, CVE-2016-0972, CVE-2016-0976, CVE-2016-0978, CVE-2016-0979, CVE-2016-0980, and CVE-2016-0981.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.569-120.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-0977",
"url": "https://www.suse.com/security/cve/CVE-2016-0977"
},
{
"category": "external",
"summary": "SUSE Bug 965901 for CVE-2016-0977",
"url": "https://bugzilla.suse.com/965901"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.569-120.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.569-120.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-02-10T09:08:38Z",
"details": "moderate"
}
],
"title": "CVE-2016-0977"
},
{
"cve": "CVE-2016-0978",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-0978"
}
],
"notes": [
{
"category": "general",
"text": "Adobe Flash Player before 18.0.0.329 and 19.x and 20.x before 20.0.0.306 on Windows and OS X and before 11.2.202.569 on Linux, Adobe AIR before 20.0.0.260, Adobe AIR SDK before 20.0.0.260, and Adobe AIR SDK \u0026 Compiler before 20.0.0.260 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-0964, CVE-2016-0965, CVE-2016-0966, CVE-2016-0967, CVE-2016-0968, CVE-2016-0969, CVE-2016-0970, CVE-2016-0972, CVE-2016-0976, CVE-2016-0977, CVE-2016-0979, CVE-2016-0980, and CVE-2016-0981.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.569-120.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-0978",
"url": "https://www.suse.com/security/cve/CVE-2016-0978"
},
{
"category": "external",
"summary": "SUSE Bug 965901 for CVE-2016-0978",
"url": "https://bugzilla.suse.com/965901"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.569-120.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.569-120.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-02-10T09:08:38Z",
"details": "moderate"
}
],
"title": "CVE-2016-0978"
},
{
"cve": "CVE-2016-0979",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-0979"
}
],
"notes": [
{
"category": "general",
"text": "Adobe Flash Player before 18.0.0.329 and 19.x and 20.x before 20.0.0.306 on Windows and OS X and before 11.2.202.569 on Linux, Adobe AIR before 20.0.0.260, Adobe AIR SDK before 20.0.0.260, and Adobe AIR SDK \u0026 Compiler before 20.0.0.260 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-0964, CVE-2016-0965, CVE-2016-0966, CVE-2016-0967, CVE-2016-0968, CVE-2016-0969, CVE-2016-0970, CVE-2016-0972, CVE-2016-0976, CVE-2016-0977, CVE-2016-0978, CVE-2016-0980, and CVE-2016-0981.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.569-120.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-0979",
"url": "https://www.suse.com/security/cve/CVE-2016-0979"
},
{
"category": "external",
"summary": "SUSE Bug 965901 for CVE-2016-0979",
"url": "https://bugzilla.suse.com/965901"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.569-120.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.569-120.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-02-10T09:08:38Z",
"details": "moderate"
}
],
"title": "CVE-2016-0979"
},
{
"cve": "CVE-2016-0980",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-0980"
}
],
"notes": [
{
"category": "general",
"text": "Adobe Flash Player before 18.0.0.329 and 19.x and 20.x before 20.0.0.306 on Windows and OS X and before 11.2.202.569 on Linux, Adobe AIR before 20.0.0.260, Adobe AIR SDK before 20.0.0.260, and Adobe AIR SDK \u0026 Compiler before 20.0.0.260 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-0964, CVE-2016-0965, CVE-2016-0966, CVE-2016-0967, CVE-2016-0968, CVE-2016-0969, CVE-2016-0970, CVE-2016-0972, CVE-2016-0976, CVE-2016-0977, CVE-2016-0978, CVE-2016-0979, and CVE-2016-0981.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.569-120.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-0980",
"url": "https://www.suse.com/security/cve/CVE-2016-0980"
},
{
"category": "external",
"summary": "SUSE Bug 965901 for CVE-2016-0980",
"url": "https://bugzilla.suse.com/965901"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.569-120.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.569-120.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-02-10T09:08:38Z",
"details": "important"
}
],
"title": "CVE-2016-0980"
},
{
"cve": "CVE-2016-0981",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-0981"
}
],
"notes": [
{
"category": "general",
"text": "Adobe Flash Player before 18.0.0.329 and 19.x and 20.x before 20.0.0.306 on Windows and OS X and before 11.2.202.569 on Linux, Adobe AIR before 20.0.0.260, Adobe AIR SDK before 20.0.0.260, and Adobe AIR SDK \u0026 Compiler before 20.0.0.260 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-0964, CVE-2016-0965, CVE-2016-0966, CVE-2016-0967, CVE-2016-0968, CVE-2016-0969, CVE-2016-0970, CVE-2016-0972, CVE-2016-0976, CVE-2016-0977, CVE-2016-0978, CVE-2016-0979, and CVE-2016-0980.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.569-120.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-0981",
"url": "https://www.suse.com/security/cve/CVE-2016-0981"
},
{
"category": "external",
"summary": "SUSE Bug 965901 for CVE-2016-0981",
"url": "https://bugzilla.suse.com/965901"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.569-120.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.569-120.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-02-10T09:08:38Z",
"details": "important"
}
],
"title": "CVE-2016-0981"
},
{
"cve": "CVE-2016-0982",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-0982"
}
],
"notes": [
{
"category": "general",
"text": "Use-after-free vulnerability in Adobe Flash Player before 18.0.0.329 and 19.x and 20.x before 20.0.0.306 on Windows and OS X and before 11.2.202.569 on Linux, Adobe AIR before 20.0.0.260, Adobe AIR SDK before 20.0.0.260, and Adobe AIR SDK \u0026 Compiler before 20.0.0.260 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2016-0973, CVE-2016-0974, CVE-2016-0975, CVE-2016-0983, and CVE-2016-0984.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.569-120.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-0982",
"url": "https://www.suse.com/security/cve/CVE-2016-0982"
},
{
"category": "external",
"summary": "SUSE Bug 965901 for CVE-2016-0982",
"url": "https://bugzilla.suse.com/965901"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.569-120.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.569-120.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-02-10T09:08:38Z",
"details": "important"
}
],
"title": "CVE-2016-0982"
},
{
"cve": "CVE-2016-0983",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-0983"
}
],
"notes": [
{
"category": "general",
"text": "Use-after-free vulnerability in Adobe Flash Player before 18.0.0.329 and 19.x and 20.x before 20.0.0.306 on Windows and OS X and before 11.2.202.569 on Linux, Adobe AIR before 20.0.0.260, Adobe AIR SDK before 20.0.0.260, and Adobe AIR SDK \u0026 Compiler before 20.0.0.260 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2016-0973, CVE-2016-0974, CVE-2016-0975, CVE-2016-0982, and CVE-2016-0984.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.569-120.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-0983",
"url": "https://www.suse.com/security/cve/CVE-2016-0983"
},
{
"category": "external",
"summary": "SUSE Bug 965901 for CVE-2016-0983",
"url": "https://bugzilla.suse.com/965901"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.569-120.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.569-120.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-02-10T09:08:38Z",
"details": "important"
}
],
"title": "CVE-2016-0983"
},
{
"cve": "CVE-2016-0984",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-0984"
}
],
"notes": [
{
"category": "general",
"text": "Use-after-free vulnerability in Adobe Flash Player before 18.0.0.329 and 19.x and 20.x before 20.0.0.306 on Windows and OS X and before 11.2.202.569 on Linux, Adobe AIR before 20.0.0.260, Adobe AIR SDK before 20.0.0.260, and Adobe AIR SDK \u0026 Compiler before 20.0.0.260 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2016-0973, CVE-2016-0974, CVE-2016-0975, CVE-2016-0982, and CVE-2016-0983.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.569-120.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-0984",
"url": "https://www.suse.com/security/cve/CVE-2016-0984"
},
{
"category": "external",
"summary": "SUSE Bug 965901 for CVE-2016-0984",
"url": "https://bugzilla.suse.com/965901"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.569-120.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.569-120.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-02-10T09:08:38Z",
"details": "important"
}
],
"title": "CVE-2016-0984"
},
{
"cve": "CVE-2016-0985",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-0985"
}
],
"notes": [
{
"category": "general",
"text": "Adobe Flash Player before 18.0.0.329 and 19.x and 20.x before 20.0.0.306 on Windows and OS X and before 11.2.202.569 on Linux, Adobe AIR before 20.0.0.260, Adobe AIR SDK before 20.0.0.260, and Adobe AIR SDK \u0026 Compiler before 20.0.0.260 allow attackers to execute arbitrary code by leveraging an unspecified \"type confusion.\"",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.569-120.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-0985",
"url": "https://www.suse.com/security/cve/CVE-2016-0985"
},
{
"category": "external",
"summary": "SUSE Bug 965901 for CVE-2016-0985",
"url": "https://bugzilla.suse.com/965901"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.569-120.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.569-120.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.569-120.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-02-10T09:08:38Z",
"details": "important"
}
],
"title": "CVE-2016-0985"
}
]
}
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.