Adobe Security Bulletin APSA15-05 for Adobe Flash Player describes a flaw that can possibly lead to code execution when Flash Player is used to play a specially crafted SWF file: A critical vulnerability (CVE-2015-7645) has been identified in Adobe Flash Player 19.0.0.207 and earlier versions for Windows, Macintosh and Linux. Successful exploitation could cause a crash and potentially allow an attacker to take control of the affected system. Adobe is aware of a report that an exploit for this vulnerability is being used in limited, targeted attacks. Adobe expects to make an update available during the week of October 19. https://helpx.adobe.com/security/products/flash-player/apsa15-05.html
Availability of fixes was now announced via APSB15-27. Fixed Linux version is 11.2.202.540. https://helpx.adobe.com/security/products/flash-player/apsb15-27.html Two additional issues are fixed in this update. Security fixes are described in the Adobe Bulletin as: These updates resolve type confusion vulnerabilities that could lead to code execution (CVE-2015-7645, CVE-2015-7647, CVE-2015-7648).
External References: https://helpx.adobe.com/security/products/flash-player/apsb15-27.html https://helpx.adobe.com/security/products/flash-player/apsa15-05.html
This issue has been addressed in the following products: Supplementary for Red Hat Enterprise Linux 6 Via RHSA-2015:1913 https://rhn.redhat.com/errata/RHSA-2015-1913.html
This issue has been addressed in the following products: Supplementary for Red Hat Enterprise Linux 5 Via RHSA-2015:2024 https://rhn.redhat.com/errata/RHSA-2015-2024.html