Bug 676226 (CVE-2011-0558, CVE-2011-0559, CVE-2011-0560, CVE-2011-0561, CVE-2011-0571, CVE-2011-0572, CVE-2011-0573, CVE-2011-0574, CVE-2011-0575, CVE-2011-0577, CVE-2011-0578, CVE-2011-0607, CVE-2011-0608)

Summary:	CVE-2011-0558 CVE-2011-0559 CVE-2011-0560 CVE-2011-0561 CVE-2011-0571 CVE-2011-0572 CVE-2011-0573 CVE-2011-0574 CVE-2011-0575 CVE-2011-0577 CVE-2011-0578 CVE-2011-0607 CVE-2011-0608 flash-plugin: multiple code execution flaws (APSB11-02)
Product:	[Other] Security Response	Reporter:	Vincent Danen <vdanen>
Component:	vulnerability	Assignee:	Red Hat Product Security <security-response-team>
Status:	CLOSED ERRATA	QA Contact:
Severity:	urgent	Docs Contact:
Priority:	urgent
Version:	unspecified	CC:	ed.costello, emhuang, jrb, mmelanso, mtilburg, stransky
Target Milestone:	---	Keywords:	Security
Target Release:	---
Hardware:	All
OS:	Linux
Whiteboard:
Fixed In Version:		Doc Type:	Bug Fix
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2012-06-20 15:49:32 UTC	Type:	---
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:
Bug Depends On:	676227, 676228, 676229, 685072
Bug Blocks:

Description Vincent Danen 2011-02-09 06:01:43 UTC

Adobe security bulletin APSB11-02 describes multiple security flaws that can lead to arbitrary code execution when a malicious flash file is opened by Adobe Flash Player.

http://www.adobe.com/support/security/bulletins/apsb11-02.html

This update resolves an integer overflow vulnerability that could lead to code execution (CVE-2011-0558).

This update resolves a memory corruption vulnerability that could lead to code execution (CVE-2011-0559).

This update resolves a memory corruption vulnerability that could lead to code execution (CVE-2011-0560, CVE-2011-0561).

This update resolves multiple memory corruption vulnerabilities that could lead to code execution (CVE-2011-0571, CVE-2011-0572, CVE-2011-0573, CVE-2011-0574).

This update resolves a library-loading vulnerability that could lead to code execution (CVE-2011-0575).

This update resolves a font-parsing vulnerability that could lead to code execution (CVE-2011-0577).

This update resolves a memory corruption vulnerability that could lead to code execution (CVE-2011-0578).

This update resolves a memory corruption vulnerability that could lead to code execution (CVE-2011-0607).

This update resolves a memory corruption vulnerability that could lead to code execution (CVE-2011-0608).


These flaws were corrected in Adobe Flash Plugin 10.2.152.26.

Comment 3 errata-xmlrpc 2011-02-09 17:57:52 UTC

This issue has been addressed in following products:

  Extras for Red Hat Enterprise Linux 5
  Extras for Red Hat Enterprise Linux 6

Via RHSA-2011:0206 https://rhn.redhat.com/errata/RHSA-2011-0206.html

Comment 4 errata-xmlrpc 2011-02-15 19:33:18 UTC

This issue has been addressed in following products:

  Extras for RHEL 4

Via RHSA-2011:0259 https://rhn.redhat.com/errata/RHSA-2011-0259.html

Comment 6 errata-xmlrpc 2011-03-21 16:31:40 UTC

This issue has been addressed in following products:

  Extras for RHEL 4

Via RHSA-2011:0368 https://rhn.redhat.com/errata/RHSA-2011-0368.html