SUSE-SU-2017:0523-1

type confusion vulnerability that could lead to code execution (CVE-2017-2995).
integer overflow vulnerability that could lead to code execution (CVE-2017-2987).
use-after-free vulnerabilities that could lead to code execution (CVE-2017-2982, CVE-2017-2985, CVE-2017-2993, CVE-2017-2994).
heap buffer overflow vulnerabilities that could lead to code execution (CVE-2017- 2984, CVE-2017-2986, CVE-2017-2992).
memory corruption vulnerabilities that could lead to code execution (CVE-2017-2988, CVE-2017-2990, CVE-2017-2991, CVE-2017-2996).

References

Affected packages

Name: flash-player
Purl: pkg:rpm/suse/flash-player&distro=SUSE%20Linux%20Enterprise%20Desktop%2012%20SP1

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

24.0.0.221-158.1

{
    "binaries": [
        {
            "flash-player": "24.0.0.221-158.1",
            "flash-player-gnome": "24.0.0.221-158.1"
        }
    ]
}

source

"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2017:0523-1.json"

Name: flash-player
Purl: pkg:rpm/suse/flash-player&distro=SUSE%20Linux%20Enterprise%20Workstation%20Extension%2012%20SP1

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

24.0.0.221-158.1

{
    "binaries": [
        {
            "flash-player": "24.0.0.221-158.1",
            "flash-player-gnome": "24.0.0.221-158.1"
        }
    ]
}

source

"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2017:0523-1.json"