Bug 476172 (CVE-2008-5499) - CVE-2008-5499 flash-plugin: Linux-specific code execution flaw via crafted SWF file
Summary: CVE-2008-5499 flash-plugin: Linux-specific code execution flaw via crafted SW...
Keywords:
Status: CLOSED ERRATA
Alias: CVE-2008-5499
Product: Security Response
Classification: Other
Component: vulnerability
Version: unspecified
Hardware: All
OS: Linux
urgent
urgent
Target Milestone: ---
Assignee: Red Hat Product Security
QA Contact:
URL:
Whiteboard:
Depends On: 476173 476174 476175
Blocks:
TreeView+ depends on / blocked
 
Reported: 2008-12-12 08:20 UTC by Tomas Hoger
Modified: 2019-09-29 12:28 UTC (History)
5 users (show)

Fixed In Version:
Doc Type: Bug Fix
Doc Text:
Clone Of:
Environment:
Last Closed: 2008-12-19 19:31:40 UTC
Embargoed:

Attachments (Terms of Use)


Links
System ID Private Priority Status Summary Last Updated
Red Hat Product Errata RHSA-2008:1047 0 normal SHIPPED_LIVE Critical: flash-plugin security update 2008-12-19 17:52:50 UTC

Description Tomas Hoger 2008-12-12 08:20:35 UTC 
A security flaw was discovered in the Adobe Flash Player for Linux 10.0.12.36 and 9.0.151.0 that could allow attacker to run arbitrary code on the user's system when crafted SWF file was opened by a victim.
Comment 2 Mark J. Cox 2008-12-18 08:19:25 UTC 
Public, removing embargo:
http://www.adobe.com/support/security/bulletins/apsb08-24.html
Comment 4 Red Hat Product Security 2008-12-19 19:31:40 UTC 
This issue was addressed in:

Red Hat Enterprise Linux Extras:
  http://rhn.redhat.com/errata/RHSA-2008-1047.html
Comment 5 Tomas Hoger 2009-01-03 11:10:53 UTC 
Further technical details about this flaw in the Bas Alberts' blog post:
http://basonbugs.blogspot.com/2008/12/you-can-only-sit-down-if-you-are-human.html
Note You need to log in before you can comment on or make changes to this bug.