Red Hat Bugzilla – Bug 873818
flash-plugin: multiple code-execution flaws (APSB12-24)
Last modified: 2015-11-24 10:20:30 EST
Adobe security bulletin APSB12-24 describes several security flaws that could cause Adobe Flash Player to crash and potentially allow an attacker to take control of the affected system:
These updates resolve buffer overflow vulnerabilities that could lead to code execution (CVE-2012-5274, CVE-2012-5275, CVE-2012-5276, CVE-2012-5277, CVE-2012-5280).
These updates resolve memory corruption vulnerabilities that could lead to code execution (CVE-2012-5279).
These updates resolve a security bypass vulnerability that could lead to code execution (CVE-2012-5278).
This issue has been addressed in following products:
Supplementary for Red Hat Enterprise Linux 5
Supplementary for Red Hat Enterprise Linux 6
Via RHSA-2012:1431 https://rhn.redhat.com/errata/RHSA-2012-1431.html