From 31e6d993d82ef5b0f1a272bc95e82111f256ae09 Mon Sep 17 00:00:00 2001 From: junovitch Date: Sat, 16 Jul 2016 00:59:10 +0000 Subject: Document Flash vulnerabilities in Adobe Security Bulletins APSB16-25 Security: CVE-2016-4172 Security: CVE-2016-4173 Security: CVE-2016-4174 Security: CVE-2016-4175 Security: CVE-2016-4176 Security: CVE-2016-4177 Security: CVE-2016-4178 Security: CVE-2016-4179 Security: CVE-2016-4180 Security: CVE-2016-4181 Security: CVE-2016-4182 Security: CVE-2016-4183 Security: CVE-2016-4184 Security: CVE-2016-4185 Security: CVE-2016-4186 Security: CVE-2016-4187 Security: CVE-2016-4188 Security: CVE-2016-4189 Security: CVE-2016-4190 Security: CVE-2016-4217 Security: CVE-2016-4218 Security: CVE-2016-4219 Security: CVE-2016-4220 Security: CVE-2016-4221 Security: CVE-2016-4222 Security: CVE-2016-4223 Security: CVE-2016-4224 Security: CVE-2016-4225 Security: CVE-2016-4226 Security: CVE-2016-4227 Security: CVE-2016-4228 Security: CVE-2016-4229 Security: CVE-2016-4230 Security: CVE-2016-4231 Security: CVE-2016-4232 Security: CVE-2016-4233 Security: CVE-2016-4234 Security: CVE-2016-4235 Security: CVE-2016-4236 Security: CVE-2016-4237 Security: CVE-2016-4238 Security: CVE-2016-4239 Security: CVE-2016-4240 Security: CVE-2016-4241 Security: CVE-2016-4242 Security: CVE-2016-4243 Security: CVE-2016-4244 Security: CVE-2016-4245 Security: CVE-2016-4246 Security: CVE-2016-4247 Security: CVE-2016-4248 Security: CVE-2016-4249 Security: https://vuxml.FreeBSD.org/freebsd/a522d6ac-4aed-11e6-97ea-002590263bf5.html --- security/vuxml/vuln.xml | 105 ++++++++++++++++++++++++++++++++++++++++++++++++ 1 file changed, 105 insertions(+) (limited to 'security') diff --git a/security/vuxml/vuln.xml b/security/vuxml/vuln.xml index 1dde4717b79..4cfb3c378bd 100644 --- a/security/vuxml/vuln.xml +++ b/security/vuxml/vuln.xml @@ -58,6 +58,111 @@ Notes: * Do not forget port variants (linux-f10-libxml2, libxml2, etc.) --> + + flash -- multiple vulnerabilities + + + linux-c6-flashplugin + linux-c6_64-flashplugin + linux-f10-flashplugin + 11.2r202.632 + + + + +

Adobe reports:

+
These updates resolve a race condition vulnerability that could + lead to information disclosure (CVE-2016-4247).
+
These updates resolve type confusion vulnerabilities that could + lead to code execution (CVE-2016-4223, CVE-2016-4224, + CVE-2016-4225).
+
These updates resolve use-after-free vulnerabilities that could + lead to code execution (CVE-2016-4173, CVE-2016-4174, CVE-2016-4222, + CVE-2016-4226, CVE-2016-4227, CVE-2016-4228, CVE-2016-4229, + CVE-2016-4230, CVE-2016-4231, CVE-2016-4248).
+
These updates resolve a heap buffer overflow vulnerability that + could lead to code execution (CVE-2016-4249).
+
These updates resolve memory corruption vulnerabilities that could + lead to code execution (CVE-2016-4172, CVE-2016-4175, CVE-2016-4179, + CVE-2016-4180, CVE-2016-4181, CVE-2016-4182, CVE-2016-4183, + CVE-2016-4184, CVE-2016-4185, CVE-2016-4186, CVE-2016-4187, + CVE-2016-4188, CVE-2016-4189, CVE-2016-4190, CVE-2016-4217, + CVE-2016-4218, CVE-2016-4219, CVE-2016-4220, CVE-2016-4221, + CVE-2016-4233, CVE-2016-4234, CVE-2016-4235, CVE-2016-4236, + CVE-2016-4237, CVE-2016-4238, CVE-2016-4239, CVE-2016-4240, + CVE-2016-4241, CVE-2016-4242, CVE-2016-4243, CVE-2016-4244, + CVE-2016-4245, CVE-2016-4246).
+
These updates resolve a memory leak vulnerability (CVE-2016-4232). +
+
These updates resolve stack corruption vulnerabilities that could + lead to code execution (CVE-2016-4176, CVE-2016-4177).
+
These updates resolve a security bypass vulnerability that could + lead to information disclosure (CVE-2016-4178).
+

+ + + + CVE-2016-4172 + CVE-2016-4173 + CVE-2016-4174 + CVE-2016-4175 + CVE-2016-4176 + CVE-2016-4177 + CVE-2016-4178 + CVE-2016-4179 + CVE-2016-4180 + CVE-2016-4181 + CVE-2016-4182 + CVE-2016-4183 + CVE-2016-4184 + CVE-2016-4185 + CVE-2016-4186 + CVE-2016-4187 + CVE-2016-4188 + CVE-2016-4189 + CVE-2016-4190 + CVE-2016-4217 + CVE-2016-4218 + CVE-2016-4219 + CVE-2016-4220 + CVE-2016-4221 + CVE-2016-4222 + CVE-2016-4223 + CVE-2016-4224 + CVE-2016-4225 + CVE-2016-4226 + CVE-2016-4227 + CVE-2016-4228 + CVE-2016-4229 + CVE-2016-4230 + CVE-2016-4231 + CVE-2016-4232 + CVE-2016-4233 + CVE-2016-4234 + CVE-2016-4235 + CVE-2016-4236 + CVE-2016-4237 + CVE-2016-4238 + CVE-2016-4239 + CVE-2016-4240 + CVE-2016-4241 + CVE-2016-4242 + CVE-2016-4243 + CVE-2016-4244 + CVE-2016-4245 + CVE-2016-4246 + CVE-2016-4247 + CVE-2016-4248 + CVE-2016-4249 + https://helpx.adobe.com/security/products/flash-player/apsb16-25.html + + + 2016-07-12 + 2016-07-16 + + + Apache Commons FileUpload -- denial of service -- cgit