Security update for flash-player SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2015:1137-1 Final 1 1 2014-11-14T12:52:02Z current 2014-11-14T12:52:02Z 2014-11-14T12:52:02Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for flash-player flash-player was updated to version 11.2.202.418 to fix 18 security issues: * Memory corruption vulnerabilities that could lead to code execution (CVE-2014-0576, CVE-2014-0581, CVE-2014-8440, CVE-2014-8441). * Use-after-free vulnerabilities that could lead to code execution (CVE-2014-0573, CVE-2014-0588, CVE-2014-8438). * A double free vulnerability that could lead to code execution (CVE-2014-0574). * Type confusion vulnerabilities that could lead to code execution (CVE-2014-0577, CVE-2014-0584, CVE-2014-0585, CVE-2014-0586, CVE-2014-0590). * Heap buffer overflow vulnerabilities that could lead to code execution (CVE-2014-0582, CVE-2014-0589). * An information disclosure vulnerability that could be exploited to disclose session tokens (CVE-2014-8437). * A heap buffer overflow vulnerability that could be exploited to perform privilege escalation from low to medium integrity level (CVE-2014-0583). * A permission issue that could be exploited to perform privilege escalation from low to medium integrity level (CVE-2014-8442). Further information can be found at http://helpx.adobe.com/security/products/flash-player/apsb14-24.html <http://helpx.adobe.com/security/products/flash-player/apsb14-24.html> . Security Issues: * CVE-2014-0576 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0576> * CVE-2014-0581 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0581> * CVE-2014-8440 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8440> * CVE-2014-8441 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8441> * CVE-2014-0573 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0573> * CVE-2014-0588 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0588> * CVE-2014-8438 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8438> * CVE-2014-0574 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0574> * CVE-2014-0577 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0577> * CVE-2014-0584 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0584> * CVE-2014-0585 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0585> * CVE-2014-0586 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0586> * CVE-2014-0590 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0590> * CVE-2014-0582 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0582> * CVE-2014-0589 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0589> * CVE-2014-8437 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8437> * CVE-2014-0583 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0583> * CVE-2014-8442 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8442> The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). sledsp3-flash-player Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2015/suse-su-20151137-1/ Link for SUSE-SU-2015:1137-1 https://lists.suse.com/pipermail/sle-security-updates/2015-June/001459.html E-Mail link for SUSE-SU-2015:1137-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/824512 SUSE Bug 824512 https://bugzilla.suse.com/828810 SUSE Bug 828810 https://bugzilla.suse.com/839897 SUSE Bug 839897 https://bugzilla.suse.com/850220 SUSE Bug 850220 https://bugzilla.suse.com/854881 SUSE Bug 854881 https://bugzilla.suse.com/856386 SUSE Bug 856386 https://bugzilla.suse.com/858822 SUSE Bug 858822 https://bugzilla.suse.com/862288 SUSE Bug 862288 https://bugzilla.suse.com/865021 SUSE Bug 865021 https://bugzilla.suse.com/867808 SUSE Bug 867808 https://bugzilla.suse.com/872692 SUSE Bug 872692 https://bugzilla.suse.com/875577 SUSE Bug 875577 https://bugzilla.suse.com/877649 SUSE Bug 877649 https://bugzilla.suse.com/882187 SUSE Bug 882187 https://bugzilla.suse.com/886472 SUSE Bug 886472 https://bugzilla.suse.com/891688 SUSE Bug 891688 https://bugzilla.suse.com/895856 SUSE Bug 895856 https://bugzilla.suse.com/901334 SUSE Bug 901334 https://bugzilla.suse.com/905032 SUSE Bug 905032 https://bugzilla.suse.com/907257 SUSE Bug 907257 https://bugzilla.suse.com/909219 SUSE Bug 909219 https://bugzilla.suse.com/913057 SUSE Bug 913057 https://bugzilla.suse.com/914333 SUSE Bug 914333 https://bugzilla.suse.com/914463 SUSE Bug 914463 https://bugzilla.suse.com/915918 SUSE Bug 915918 https://bugzilla.suse.com/922033 SUSE Bug 922033 https://bugzilla.suse.com/927089 SUSE Bug 927089 https://bugzilla.suse.com/930677 SUSE Bug 930677 https://bugzilla.suse.com/934088 SUSE Bug 934088 https://bugzilla.suse.com/935701 SUSE Bug 935701 https://www.suse.com/security/cve/CVE-2013-3343/ SUSE CVE CVE-2013-3343 page https://www.suse.com/security/cve/CVE-2013-3344/ SUSE CVE CVE-2013-3344 page https://www.suse.com/security/cve/CVE-2013-3345/ SUSE CVE CVE-2013-3345 page https://www.suse.com/security/cve/CVE-2013-3347/ SUSE CVE CVE-2013-3347 page https://www.suse.com/security/cve/CVE-2013-3361/ SUSE CVE CVE-2013-3361 page https://www.suse.com/security/cve/CVE-2013-3362/ SUSE CVE CVE-2013-3362 page https://www.suse.com/security/cve/CVE-2013-3363/ SUSE CVE CVE-2013-3363 page https://www.suse.com/security/cve/CVE-2013-5324/ SUSE CVE CVE-2013-5324 page https://www.suse.com/security/cve/CVE-2013-5329/ SUSE CVE CVE-2013-5329 page https://www.suse.com/security/cve/CVE-2013-5330/ SUSE CVE CVE-2013-5330 page https://www.suse.com/security/cve/CVE-2013-5331/ SUSE CVE CVE-2013-5331 page https://www.suse.com/security/cve/CVE-2013-5332/ SUSE CVE CVE-2013-5332 page https://www.suse.com/security/cve/CVE-2014-0491/ SUSE CVE CVE-2014-0491 page https://www.suse.com/security/cve/CVE-2014-0492/ SUSE CVE CVE-2014-0492 page https://www.suse.com/security/cve/CVE-2014-0497/ SUSE CVE CVE-2014-0497 page https://www.suse.com/security/cve/CVE-2014-0498/ SUSE CVE CVE-2014-0498 page https://www.suse.com/security/cve/CVE-2014-0499/ SUSE CVE CVE-2014-0499 page https://www.suse.com/security/cve/CVE-2014-0502/ SUSE CVE CVE-2014-0502 page https://www.suse.com/security/cve/CVE-2014-0503/ SUSE CVE CVE-2014-0503 page https://www.suse.com/security/cve/CVE-2014-0504/ SUSE CVE CVE-2014-0504 page https://www.suse.com/security/cve/CVE-2014-0506/ SUSE CVE CVE-2014-0506 page https://www.suse.com/security/cve/CVE-2014-0507/ SUSE CVE CVE-2014-0507 page https://www.suse.com/security/cve/CVE-2014-0508/ SUSE CVE CVE-2014-0508 page https://www.suse.com/security/cve/CVE-2014-0509/ SUSE CVE CVE-2014-0509 page https://www.suse.com/security/cve/CVE-2014-0510/ SUSE CVE CVE-2014-0510 page https://www.suse.com/security/cve/CVE-2014-0515/ SUSE CVE CVE-2014-0515 page https://www.suse.com/security/cve/CVE-2014-0516/ SUSE CVE CVE-2014-0516 page https://www.suse.com/security/cve/CVE-2014-0517/ SUSE CVE CVE-2014-0517 page https://www.suse.com/security/cve/CVE-2014-0518/ SUSE CVE CVE-2014-0518 page https://www.suse.com/security/cve/CVE-2014-0519/ SUSE CVE CVE-2014-0519 page https://www.suse.com/security/cve/CVE-2014-0520/ SUSE CVE CVE-2014-0520 page https://www.suse.com/security/cve/CVE-2014-0531/ SUSE CVE CVE-2014-0531 page https://www.suse.com/security/cve/CVE-2014-0532/ SUSE CVE CVE-2014-0532 page https://www.suse.com/security/cve/CVE-2014-0533/ SUSE CVE CVE-2014-0533 page https://www.suse.com/security/cve/CVE-2014-0534/ SUSE CVE CVE-2014-0534 page https://www.suse.com/security/cve/CVE-2014-0535/ SUSE CVE CVE-2014-0535 page https://www.suse.com/security/cve/CVE-2014-0536/ SUSE CVE CVE-2014-0536 page https://www.suse.com/security/cve/CVE-2014-0537/ SUSE CVE CVE-2014-0537 page https://www.suse.com/security/cve/CVE-2014-0538/ SUSE CVE CVE-2014-0538 page https://www.suse.com/security/cve/CVE-2014-0539/ SUSE CVE CVE-2014-0539 page https://www.suse.com/security/cve/CVE-2014-0540/ SUSE CVE CVE-2014-0540 page https://www.suse.com/security/cve/CVE-2014-0541/ SUSE CVE CVE-2014-0541 page https://www.suse.com/security/cve/CVE-2014-0542/ SUSE CVE CVE-2014-0542 page https://www.suse.com/security/cve/CVE-2014-0543/ SUSE CVE CVE-2014-0543 page https://www.suse.com/security/cve/CVE-2014-0544/ SUSE CVE CVE-2014-0544 page https://www.suse.com/security/cve/CVE-2014-0545/ SUSE CVE CVE-2014-0545 page https://www.suse.com/security/cve/CVE-2014-0547/ SUSE CVE CVE-2014-0547 page https://www.suse.com/security/cve/CVE-2014-0548/ SUSE CVE CVE-2014-0548 page https://www.suse.com/security/cve/CVE-2014-0549/ SUSE CVE CVE-2014-0549 page https://www.suse.com/security/cve/CVE-2014-0550/ SUSE CVE CVE-2014-0550 page https://www.suse.com/security/cve/CVE-2014-0551/ SUSE CVE CVE-2014-0551 page https://www.suse.com/security/cve/CVE-2014-0552/ SUSE CVE CVE-2014-0552 page https://www.suse.com/security/cve/CVE-2014-0553/ SUSE CVE CVE-2014-0553 page https://www.suse.com/security/cve/CVE-2014-0554/ SUSE CVE CVE-2014-0554 page https://www.suse.com/security/cve/CVE-2014-0555/ SUSE CVE CVE-2014-0555 page https://www.suse.com/security/cve/CVE-2014-0556/ SUSE CVE CVE-2014-0556 page https://www.suse.com/security/cve/CVE-2014-0557/ SUSE CVE CVE-2014-0557 page https://www.suse.com/security/cve/CVE-2014-0558/ SUSE CVE CVE-2014-0558 page https://www.suse.com/security/cve/CVE-2014-0559/ SUSE CVE CVE-2014-0559 page https://www.suse.com/security/cve/CVE-2014-0564/ SUSE CVE CVE-2014-0564 page https://www.suse.com/security/cve/CVE-2014-0569/ SUSE CVE CVE-2014-0569 page https://www.suse.com/security/cve/CVE-2014-0573/ SUSE CVE CVE-2014-0573 page https://www.suse.com/security/cve/CVE-2014-0574/ SUSE CVE CVE-2014-0574 page https://www.suse.com/security/cve/CVE-2014-0576/ SUSE CVE CVE-2014-0576 page https://www.suse.com/security/cve/CVE-2014-0577/ SUSE CVE CVE-2014-0577 page https://www.suse.com/security/cve/CVE-2014-0580/ SUSE CVE CVE-2014-0580 page https://www.suse.com/security/cve/CVE-2014-0581/ SUSE CVE CVE-2014-0581 page https://www.suse.com/security/cve/CVE-2014-0582/ SUSE CVE CVE-2014-0582 page https://www.suse.com/security/cve/CVE-2014-0583/ SUSE CVE CVE-2014-0583 page https://www.suse.com/security/cve/CVE-2014-0584/ SUSE CVE CVE-2014-0584 page https://www.suse.com/security/cve/CVE-2014-0585/ SUSE CVE CVE-2014-0585 page https://www.suse.com/security/cve/CVE-2014-0586/ SUSE CVE CVE-2014-0586 page https://www.suse.com/security/cve/CVE-2014-0587/ SUSE CVE CVE-2014-0587 page https://www.suse.com/security/cve/CVE-2014-0588/ SUSE CVE CVE-2014-0588 page https://www.suse.com/security/cve/CVE-2014-0589/ SUSE CVE CVE-2014-0589 page https://www.suse.com/security/cve/CVE-2014-0590/ SUSE CVE CVE-2014-0590 page https://www.suse.com/security/cve/CVE-2014-4671/ SUSE CVE CVE-2014-4671 page https://www.suse.com/security/cve/CVE-2014-8437/ SUSE CVE CVE-2014-8437 page https://www.suse.com/security/cve/CVE-2014-8438/ SUSE CVE CVE-2014-8438 page https://www.suse.com/security/cve/CVE-2014-8439/ SUSE CVE CVE-2014-8439 page https://www.suse.com/security/cve/CVE-2014-8440/ SUSE CVE CVE-2014-8440 page https://www.suse.com/security/cve/CVE-2014-8441/ SUSE CVE CVE-2014-8441 page https://www.suse.com/security/cve/CVE-2014-8442/ SUSE CVE CVE-2014-8442 page https://www.suse.com/security/cve/CVE-2014-8443/ SUSE CVE CVE-2014-8443 page https://www.suse.com/security/cve/CVE-2014-9162/ SUSE CVE CVE-2014-9162 page https://www.suse.com/security/cve/CVE-2014-9163/ SUSE CVE CVE-2014-9163 page https://www.suse.com/security/cve/CVE-2014-9164/ SUSE CVE CVE-2014-9164 page https://www.suse.com/security/cve/CVE-2015-0301/ SUSE CVE CVE-2015-0301 page https://www.suse.com/security/cve/CVE-2015-0302/ SUSE CVE CVE-2015-0302 page https://www.suse.com/security/cve/CVE-2015-0303/ SUSE CVE CVE-2015-0303 page https://www.suse.com/security/cve/CVE-2015-0304/ SUSE CVE CVE-2015-0304 page https://www.suse.com/security/cve/CVE-2015-0305/ SUSE CVE CVE-2015-0305 page https://www.suse.com/security/cve/CVE-2015-0306/ SUSE CVE CVE-2015-0306 page https://www.suse.com/security/cve/CVE-2015-0307/ SUSE CVE CVE-2015-0307 page https://www.suse.com/security/cve/CVE-2015-0308/ SUSE CVE CVE-2015-0308 page https://www.suse.com/security/cve/CVE-2015-0309/ SUSE CVE CVE-2015-0309 page https://www.suse.com/security/cve/CVE-2015-0310/ SUSE CVE CVE-2015-0310 page https://www.suse.com/security/cve/CVE-2015-0311/ SUSE CVE CVE-2015-0311 page https://www.suse.com/security/cve/CVE-2015-0313/ SUSE CVE CVE-2015-0313 page https://www.suse.com/security/cve/CVE-2015-0314/ SUSE CVE CVE-2015-0314 page https://www.suse.com/security/cve/CVE-2015-0315/ SUSE CVE CVE-2015-0315 page https://www.suse.com/security/cve/CVE-2015-0316/ SUSE CVE CVE-2015-0316 page https://www.suse.com/security/cve/CVE-2015-0317/ SUSE CVE CVE-2015-0317 page https://www.suse.com/security/cve/CVE-2015-0318/ SUSE CVE CVE-2015-0318 page https://www.suse.com/security/cve/CVE-2015-0319/ SUSE CVE CVE-2015-0319 page https://www.suse.com/security/cve/CVE-2015-0320/ SUSE CVE CVE-2015-0320 page https://www.suse.com/security/cve/CVE-2015-0321/ SUSE CVE CVE-2015-0321 page https://www.suse.com/security/cve/CVE-2015-0322/ SUSE CVE CVE-2015-0322 page https://www.suse.com/security/cve/CVE-2015-0323/ SUSE CVE CVE-2015-0323 page https://www.suse.com/security/cve/CVE-2015-0324/ SUSE CVE CVE-2015-0324 page https://www.suse.com/security/cve/CVE-2015-0325/ SUSE CVE CVE-2015-0325 page https://www.suse.com/security/cve/CVE-2015-0326/ SUSE CVE CVE-2015-0326 page https://www.suse.com/security/cve/CVE-2015-0327/ SUSE CVE CVE-2015-0327 page https://www.suse.com/security/cve/CVE-2015-0328/ SUSE CVE CVE-2015-0328 page https://www.suse.com/security/cve/CVE-2015-0329/ SUSE CVE CVE-2015-0329 page https://www.suse.com/security/cve/CVE-2015-0330/ SUSE CVE CVE-2015-0330 page https://www.suse.com/security/cve/CVE-2015-0332/ SUSE CVE CVE-2015-0332 page https://www.suse.com/security/cve/CVE-2015-0333/ SUSE CVE CVE-2015-0333 page https://www.suse.com/security/cve/CVE-2015-0334/ SUSE CVE CVE-2015-0334 page https://www.suse.com/security/cve/CVE-2015-0335/ SUSE CVE CVE-2015-0335 page https://www.suse.com/security/cve/CVE-2015-0336/ SUSE CVE CVE-2015-0336 page https://www.suse.com/security/cve/CVE-2015-0337/ SUSE CVE CVE-2015-0337 page https://www.suse.com/security/cve/CVE-2015-0338/ SUSE CVE CVE-2015-0338 page https://www.suse.com/security/cve/CVE-2015-0339/ SUSE CVE CVE-2015-0339 page https://www.suse.com/security/cve/CVE-2015-0340/ SUSE CVE CVE-2015-0340 page https://www.suse.com/security/cve/CVE-2015-0341/ SUSE CVE CVE-2015-0341 page https://www.suse.com/security/cve/CVE-2015-0342/ SUSE CVE CVE-2015-0342 page https://www.suse.com/security/cve/CVE-2015-0346/ SUSE CVE CVE-2015-0346 page https://www.suse.com/security/cve/CVE-2015-0347/ SUSE CVE CVE-2015-0347 page https://www.suse.com/security/cve/CVE-2015-0348/ SUSE CVE CVE-2015-0348 page https://www.suse.com/security/cve/CVE-2015-0349/ SUSE CVE CVE-2015-0349 page https://www.suse.com/security/cve/CVE-2015-0350/ SUSE CVE CVE-2015-0350 page https://www.suse.com/security/cve/CVE-2015-0351/ SUSE CVE CVE-2015-0351 page https://www.suse.com/security/cve/CVE-2015-0352/ SUSE CVE CVE-2015-0352 page https://www.suse.com/security/cve/CVE-2015-0353/ SUSE CVE CVE-2015-0353 page https://www.suse.com/security/cve/CVE-2015-0354/ SUSE CVE CVE-2015-0354 page https://www.suse.com/security/cve/CVE-2015-0355/ SUSE CVE CVE-2015-0355 page https://www.suse.com/security/cve/CVE-2015-0356/ SUSE CVE CVE-2015-0356 page https://www.suse.com/security/cve/CVE-2015-0357/ SUSE CVE CVE-2015-0357 page https://www.suse.com/security/cve/CVE-2015-0358/ SUSE CVE CVE-2015-0358 page https://www.suse.com/security/cve/CVE-2015-0359/ SUSE CVE CVE-2015-0359 page https://www.suse.com/security/cve/CVE-2015-0360/ SUSE CVE CVE-2015-0360 page https://www.suse.com/security/cve/CVE-2015-3038/ SUSE CVE CVE-2015-3038 page https://www.suse.com/security/cve/CVE-2015-3039/ SUSE CVE CVE-2015-3039 page https://www.suse.com/security/cve/CVE-2015-3040/ SUSE CVE CVE-2015-3040 page https://www.suse.com/security/cve/CVE-2015-3041/ SUSE CVE CVE-2015-3041 page https://www.suse.com/security/cve/CVE-2015-3042/ SUSE CVE CVE-2015-3042 page https://www.suse.com/security/cve/CVE-2015-3043/ SUSE CVE CVE-2015-3043 page https://www.suse.com/security/cve/CVE-2015-3044/ SUSE CVE CVE-2015-3044 page https://www.suse.com/security/cve/CVE-2015-3077/ SUSE CVE CVE-2015-3077 page https://www.suse.com/security/cve/CVE-2015-3078/ SUSE CVE CVE-2015-3078 page https://www.suse.com/security/cve/CVE-2015-3079/ SUSE CVE CVE-2015-3079 page https://www.suse.com/security/cve/CVE-2015-3080/ SUSE CVE CVE-2015-3080 page https://www.suse.com/security/cve/CVE-2015-3081/ SUSE CVE CVE-2015-3081 page https://www.suse.com/security/cve/CVE-2015-3082/ SUSE CVE CVE-2015-3082 page https://www.suse.com/security/cve/CVE-2015-3083/ SUSE CVE CVE-2015-3083 page https://www.suse.com/security/cve/CVE-2015-3084/ SUSE CVE CVE-2015-3084 page https://www.suse.com/security/cve/CVE-2015-3085/ SUSE CVE CVE-2015-3085 page https://www.suse.com/security/cve/CVE-2015-3086/ SUSE CVE CVE-2015-3086 page https://www.suse.com/security/cve/CVE-2015-3087/ SUSE CVE CVE-2015-3087 page https://www.suse.com/security/cve/CVE-2015-3088/ SUSE CVE CVE-2015-3088 page https://www.suse.com/security/cve/CVE-2015-3089/ SUSE CVE CVE-2015-3089 page https://www.suse.com/security/cve/CVE-2015-3090/ SUSE CVE CVE-2015-3090 page https://www.suse.com/security/cve/CVE-2015-3091/ SUSE CVE CVE-2015-3091 page https://www.suse.com/security/cve/CVE-2015-3092/ SUSE CVE CVE-2015-3092 page https://www.suse.com/security/cve/CVE-2015-3093/ SUSE CVE CVE-2015-3093 page https://www.suse.com/security/cve/CVE-2015-3096/ SUSE CVE CVE-2015-3096 page https://www.suse.com/security/cve/CVE-2015-3098/ SUSE CVE CVE-2015-3098 page https://www.suse.com/security/cve/CVE-2015-3099/ SUSE CVE CVE-2015-3099 page https://www.suse.com/security/cve/CVE-2015-3100/ SUSE CVE CVE-2015-3100 page https://www.suse.com/security/cve/CVE-2015-3102/ SUSE CVE CVE-2015-3102 page https://www.suse.com/security/cve/CVE-2015-3103/ SUSE CVE CVE-2015-3103 page https://www.suse.com/security/cve/CVE-2015-3106/ SUSE CVE CVE-2015-3106 page https://www.suse.com/security/cve/CVE-2015-3107/ SUSE CVE CVE-2015-3107 page https://www.suse.com/security/cve/CVE-2015-3108/ SUSE CVE CVE-2015-3108 page https://www.suse.com/security/cve/CVE-2015-3113/ SUSE CVE CVE-2015-3113 page SUSE Linux Enterprise Desktop 11 SP3 flash-player-11.2.202.418-0.3.1 flash-player-gnome-11.2.202.418-0.3.1 flash-player-kde4-11.2.202.418-0.3.1 flash-player-11.2.202.418-0.3.1 as a component of SUSE Linux Enterprise Desktop 11 SP3 flash-player-gnome-11.2.202.418-0.3.1 as a component of SUSE Linux Enterprise Desktop 11 SP3 flash-player-kde4-11.2.202.418-0.3.1 as a component of SUSE Linux Enterprise Desktop 11 SP3 Adobe Flash Player before 10.3.183.90 and 11.x before 11.7.700.224 on Windows, before 10.3.183.90 and 11.x before 11.7.700.225 on Mac OS X, before 10.3.183.90 and 11.x before 11.2.202.291 on Linux, before 11.1.111.59 on Android 2.x and 3.x, and before 11.1.115.63 on Android 4.x; Adobe AIR before 3.7.0.2090 on Windows and Android and before 3.7.0.2100 on Mac OS X; and Adobe AIR SDK & Compiler before 3.7.0.2090 on Windows and before 3.7.0.2100 on Mac OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors. CVE-2013-3343 SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1 SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1 SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1 critical To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151137-1/ https://www.suse.com/security/cve/CVE-2013-3343.html CVE-2013-3343 https://bugzilla.suse.com/824512 SUSE Bug 824512 Heap-based buffer overflow in Adobe Flash Player before 11.7.700.232 and 11.8.x before 11.8.800.94 on Windows and Mac OS X, before 11.2.202.297 on Linux, before 11.1.111.64 on Android 2.x and 3.x, and before 11.1.115.69 on Android 4.x allows attackers to execute arbitrary code via unspecified vectors. CVE-2013-3344 SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1 SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1 SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1 critical To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151137-1/ https://www.suse.com/security/cve/CVE-2013-3344.html CVE-2013-3344 https://bugzilla.suse.com/828810 SUSE Bug 828810 Adobe Flash Player before 11.7.700.232 and 11.8.x before 11.8.800.94 on Windows and Mac OS X, before 11.2.202.297 on Linux, before 11.1.111.64 on Android 2.x and 3.x, and before 11.1.115.69 on Android 4.x allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors. CVE-2013-3345 SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1 SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1 SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1 low To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151137-1/ https://www.suse.com/security/cve/CVE-2013-3345.html CVE-2013-3345 https://bugzilla.suse.com/828810 SUSE Bug 828810 Integer overflow in Adobe Flash Player before 11.7.700.232 and 11.8.x before 11.8.800.94 on Windows and Mac OS X, before 11.2.202.297 on Linux, before 11.1.111.64 on Android 2.x and 3.x, and before 11.1.115.69 on Android 4.x allows attackers to execute arbitrary code via PCM data that is not properly handled during resampling. CVE-2013-3347 SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1 SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1 SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1 critical To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151137-1/ https://www.suse.com/security/cve/CVE-2013-3347.html CVE-2013-3347 https://bugzilla.suse.com/828810 SUSE Bug 828810 Adobe Flash Player before 11.7.700.242 and 11.8.x before 11.8.800.168 on Windows and Mac OS X, before 11.2.202.310 on Linux, before 11.1.111.73 on Android 2.x and 3.x, and before 11.1.115.81 on Android 4.x; Adobe AIR before 3.8.0.1430; and Adobe AIR SDK & Compiler before 3.8.0.1430 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2013-3362, CVE-2013-3363, and CVE-2013-5324. CVE-2013-3361 SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1 SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1 SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1 critical To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151137-1/ https://www.suse.com/security/cve/CVE-2013-3361.html CVE-2013-3361 https://bugzilla.suse.com/839897 SUSE Bug 839897 Adobe Flash Player before 11.7.700.242 and 11.8.x before 11.8.800.168 on Windows and Mac OS X, before 11.2.202.310 on Linux, before 11.1.111.73 on Android 2.x and 3.x, and before 11.1.115.81 on Android 4.x; Adobe AIR before 3.8.0.1430; and Adobe AIR SDK & Compiler before 3.8.0.1430 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2013-3361, CVE-2013-3363, and CVE-2013-5324. CVE-2013-3362 SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1 SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1 SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1 critical To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151137-1/ https://www.suse.com/security/cve/CVE-2013-3362.html CVE-2013-3362 https://bugzilla.suse.com/839897 SUSE Bug 839897 Adobe Flash Player before 11.7.700.242 and 11.8.x before 11.8.800.168 on Windows and Mac OS X, before 11.2.202.310 on Linux, before 11.1.111.73 on Android 2.x and 3.x, and before 11.1.115.81 on Android 4.x; Adobe AIR before 3.8.0.1430; and Adobe AIR SDK & Compiler before 3.8.0.1430 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2013-3361, CVE-2013-3362, and CVE-2013-5324. CVE-2013-3363 SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1 SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1 SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1 critical To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151137-1/ https://www.suse.com/security/cve/CVE-2013-3363.html CVE-2013-3363 https://bugzilla.suse.com/839897 SUSE Bug 839897 Adobe Flash Player before 11.7.700.242 and 11.8.x before 11.8.800.168 on Windows and Mac OS X, before 11.2.202.310 on Linux, before 11.1.111.73 on Android 2.x and 3.x, and before 11.1.115.81 on Android 4.x; Adobe AIR before 3.8.0.1430; and Adobe AIR SDK & Compiler before 3.8.0.1430 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2013-3361, CVE-2013-3362, and CVE-2013-3363. CVE-2013-5324 SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1 SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1 SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1 critical To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151137-1/ https://www.suse.com/security/cve/CVE-2013-5324.html CVE-2013-5324 https://bugzilla.suse.com/839897 SUSE Bug 839897 Adobe Flash Player before 11.7.700.252 and 11.8.x and 11.9.x before 11.9.900.152 on Windows and Mac OS X and before 11.2.202.327 on Linux, Adobe AIR before 3.9.0.1210, Adobe AIR SDK before 3.9.0.1210, and Adobe AIR SDK & Compiler before 3.9.0.1210 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2013-5330. CVE-2013-5329 SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1 SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1 SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151137-1/ https://www.suse.com/security/cve/CVE-2013-5329.html CVE-2013-5329 https://bugzilla.suse.com/850220 SUSE Bug 850220 Adobe Flash Player before 11.7.700.252 and 11.8.x and 11.9.x before 11.9.900.152 on Windows and Mac OS X and before 11.2.202.327 on Linux, Adobe AIR before 3.9.0.1210, Adobe AIR SDK before 3.9.0.1210, and Adobe AIR SDK & Compiler before 3.9.0.1210 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2013-5329. CVE-2013-5330 SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1 SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1 SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151137-1/ https://www.suse.com/security/cve/CVE-2013-5330.html CVE-2013-5330 https://bugzilla.suse.com/850220 SUSE Bug 850220 Adobe Flash Player before 11.7.700.257 and 11.8.x and 11.9.x before 11.9.900.170 on Windows and Mac OS X and before 11.2.202.332 on Linux, Adobe AIR before 3.9.0.1380, Adobe AIR SDK before 3.9.0.1380, and Adobe AIR SDK & Compiler before 3.9.0.1380 allow remote attackers to execute arbitrary code via crafted .swf content that leverages an unspecified "type confusion," as exploited in the wild in December 2013. CVE-2013-5331 SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1 SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1 SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1 critical To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151137-1/ https://www.suse.com/security/cve/CVE-2013-5331.html CVE-2013-5331 https://bugzilla.suse.com/854881 SUSE Bug 854881 Adobe Flash Player before 11.7.700.257 and 11.8.x and 11.9.x before 11.9.900.170 on Windows and Mac OS X and before 11.2.202.332 on Linux, Adobe AIR before 3.9.0.1380, Adobe AIR SDK before 3.9.0.1380, and Adobe AIR SDK & Compiler before 3.9.0.1380 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors. CVE-2013-5332 SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1 SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1 SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1 critical To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151137-1/ https://www.suse.com/security/cve/CVE-2013-5332.html CVE-2013-5332 https://bugzilla.suse.com/854881 SUSE Bug 854881 Adobe Flash Player before 11.7.700.260 and 11.8.x and 11.9.x before 12.0.0.38 on Windows and Mac OS X and before 11.2.202.335 on Linux, Adobe AIR before 4.0.0.1390, Adobe AIR SDK before 4.0.0.1390, and Adobe AIR SDK & Compiler before 4.0.0.1390 allow attackers to bypass unspecified protection mechanisms via unknown vectors. CVE-2014-0491 SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1 SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1 SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1 critical To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151137-1/ https://www.suse.com/security/cve/CVE-2014-0491.html CVE-2014-0491 https://bugzilla.suse.com/858822 SUSE Bug 858822 Adobe Flash Player before 11.7.700.260 and 11.8.x and 11.9.x before 12.0.0.38 on Windows and Mac OS X and before 11.2.202.335 on Linux, Adobe AIR before 4.0.0.1390, Adobe AIR SDK before 4.0.0.1390, and Adobe AIR SDK & Compiler before 4.0.0.1390 allow attackers to defeat the ASLR protection mechanism by leveraging an "address leak." CVE-2014-0492 SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1 SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1 SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1 critical To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151137-1/ https://www.suse.com/security/cve/CVE-2014-0492.html CVE-2014-0492 https://bugzilla.suse.com/858822 SUSE Bug 858822 Integer underflow in Adobe Flash Player before 11.7.700.261 and 11.8.x through 12.0.x before 12.0.0.44 on Windows and Mac OS X, and before 11.2.202.336 on Linux, allows remote attackers to execute arbitrary code via unspecified vectors. CVE-2014-0497 SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1 SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1 SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1 critical To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151137-1/ https://www.suse.com/security/cve/CVE-2014-0497.html CVE-2014-0497 https://bugzilla.suse.com/862288 SUSE Bug 862288 Stack-based buffer overflow in Adobe Flash Player before 11.7.700.269 and 11.8.x through 12.0.x before 12.0.0.70 on Windows and Mac OS X and before 11.2.202.341 on Linux, Adobe AIR before 4.0.0.1628 on Android, Adobe AIR SDK before 4.0.0.1628, and Adobe AIR SDK & Compiler before 4.0.0.1628 allows attackers to execute arbitrary code via unspecified vectors. CVE-2014-0498 SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1 SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1 SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1 critical To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151137-1/ https://www.suse.com/security/cve/CVE-2014-0498.html CVE-2014-0498 https://bugzilla.suse.com/865021 SUSE Bug 865021 Adobe Flash Player before 11.7.700.269 and 11.8.x through 12.0.x before 12.0.0.70 on Windows and Mac OS X and before 11.2.202.341 on Linux, Adobe AIR before 4.0.0.1628 on Android, Adobe AIR SDK before 4.0.0.1628, and Adobe AIR SDK & Compiler before 4.0.0.1628 do not prevent access to address information, which makes it easier for attackers to bypass the ASLR protection mechanism via unspecified vectors. CVE-2014-0499 SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1 SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1 SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1 critical To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151137-1/ https://www.suse.com/security/cve/CVE-2014-0499.html CVE-2014-0499 https://bugzilla.suse.com/865021 SUSE Bug 865021 Double free vulnerability in Adobe Flash Player before 11.7.700.269 and 11.8.x through 12.0.x before 12.0.0.70 on Windows and Mac OS X and before 11.2.202.341 on Linux, Adobe AIR before 4.0.0.1628 on Android, Adobe AIR SDK before 4.0.0.1628, and Adobe AIR SDK & Compiler before 4.0.0.1628 allows remote attackers to execute arbitrary code via unspecified vectors, as exploited in the wild in February 2014. CVE-2014-0502 SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1 SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1 SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1 critical To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151137-1/ https://www.suse.com/security/cve/CVE-2014-0502.html CVE-2014-0502 https://bugzilla.suse.com/865021 SUSE Bug 865021 Adobe Flash Player before 11.7.700.272 and 11.8.x through 12.0.x before 12.0.0.77 on Windows and OS X, and before 11.2.202.346 on Linux, allows remote attackers to bypass the Same Origin Policy via unspecified vectors. CVE-2014-0503 SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1 SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1 SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1 critical To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151137-1/ https://www.suse.com/security/cve/CVE-2014-0503.html CVE-2014-0503 https://bugzilla.suse.com/867808 SUSE Bug 867808 Adobe Flash Player before 11.7.700.272 and 11.8.x through 12.0.x before 12.0.0.77 on Windows and OS X, and before 11.2.202.346 on Linux, allows attackers to read the clipboard via unspecified vectors. CVE-2014-0504 SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1 SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1 SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1 critical To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151137-1/ https://www.suse.com/security/cve/CVE-2014-0504.html CVE-2014-0504 https://bugzilla.suse.com/867808 SUSE Bug 867808 Use-after-free vulnerability in Adobe Flash Player before 11.7.700.275 and 11.8.x through 13.0.x before 13.0.0.182 on Windows and OS X and before 11.2.202.350 on Linux, Adobe AIR before 13.0.0.83 on Android, Adobe AIR SDK before 13.0.0.83, and Adobe AIR SDK & Compiler before 13.0.0.83 allows remote attackers to execute arbitrary code, and possibly bypass an Internet Explorer sandbox protection mechanism, via unspecified vectors, as demonstrated by VUPEN during a Pwn2Own competition at CanSecWest 2014. CVE-2014-0506 SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1 SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1 SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1 critical To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151137-1/ https://www.suse.com/security/cve/CVE-2014-0506.html CVE-2014-0506 https://bugzilla.suse.com/872692 SUSE Bug 872692 Buffer overflow in Adobe Flash Player before 11.7.700.275 and 11.8.x through 13.0.x before 13.0.0.182 on Windows and OS X and before 11.2.202.350 on Linux, Adobe AIR before 13.0.0.83 on Android, Adobe AIR SDK before 13.0.0.83, and Adobe AIR SDK & Compiler before 13.0.0.83 allows attackers to execute arbitrary code via unspecified vectors. CVE-2014-0507 SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1 SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1 SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1 critical To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151137-1/ https://www.suse.com/security/cve/CVE-2014-0507.html CVE-2014-0507 https://bugzilla.suse.com/872692 SUSE Bug 872692 Adobe Flash Player before 11.7.700.275 and 11.8.x through 13.0.x before 13.0.0.182 on Windows and OS X and before 11.2.202.350 on Linux, Adobe AIR before 13.0.0.83 on Android, Adobe AIR SDK before 13.0.0.83, and Adobe AIR SDK & Compiler before 13.0.0.83 allow attackers to bypass intended access restrictions and obtain sensitive information via unspecified vectors. CVE-2014-0508 SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1 SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1 SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151137-1/ https://www.suse.com/security/cve/CVE-2014-0508.html CVE-2014-0508 https://bugzilla.suse.com/872692 SUSE Bug 872692 Cross-site scripting (XSS) vulnerability in Adobe Flash Player before 11.7.700.275 and 11.8.x through 13.0.x before 13.0.0.182 on Windows and OS X and before 11.2.202.350 on Linux, Adobe AIR before 13.0.0.83 on Android, Adobe AIR SDK before 13.0.0.83, and Adobe AIR SDK & Compiler before 13.0.0.83 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. CVE-2014-0509 SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1 SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1 SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151137-1/ https://www.suse.com/security/cve/CVE-2014-0509.html CVE-2014-0509 https://bugzilla.suse.com/872692 SUSE Bug 872692 Heap-based buffer overflow in Adobe Flash Player 12.0.0.77 allows remote attackers to execute arbitrary code and bypass a sandbox protection mechanism via unspecified vectors, as demonstrated by Zeguang Zhao and Liang Chen during a Pwn2Own competition at CanSecWest 2014. CVE-2014-0510 SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1 SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1 SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1 critical To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151137-1/ https://www.suse.com/security/cve/CVE-2014-0510.html CVE-2014-0510 Buffer overflow in Adobe Flash Player before 11.7.700.279 and 11.8.x through 13.0.x before 13.0.0.206 on Windows and OS X, and before 11.2.202.356 on Linux, allows remote attackers to execute arbitrary code via unspecified vectors, as exploited in the wild in April 2014. CVE-2014-0515 SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1 SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1 SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1 critical To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151137-1/ https://www.suse.com/security/cve/CVE-2014-0515.html CVE-2014-0515 https://bugzilla.suse.com/875577 SUSE Bug 875577 https://bugzilla.suse.com/886454 SUSE Bug 886454 Adobe Flash Player before 13.0.0.214 on Windows and OS X and before 11.2.202.359 on Linux, Adobe AIR SDK before 13.0.0.111, and Adobe AIR SDK & Compiler before 13.0.0.111 allow remote attackers to bypass the Same Origin Policy via unspecified vectors. CVE-2014-0516 SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1 SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1 SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151137-1/ https://www.suse.com/security/cve/CVE-2014-0516.html CVE-2014-0516 https://bugzilla.suse.com/877649 SUSE Bug 877649 Adobe Flash Player before 13.0.0.214 on Windows and OS X and before 11.2.202.359 on Linux, Adobe AIR SDK before 13.0.0.111, and Adobe AIR SDK & Compiler before 13.0.0.111 allow attackers to bypass intended access restrictions via unspecified vectors, a different vulnerability than CVE-2014-0518, CVE-2014-0519, and CVE-2014-0520. CVE-2014-0517 SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1 SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1 SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151137-1/ https://www.suse.com/security/cve/CVE-2014-0517.html CVE-2014-0517 https://bugzilla.suse.com/877649 SUSE Bug 877649 Adobe Flash Player before 13.0.0.214 on Windows and OS X and before 11.2.202.359 on Linux, Adobe AIR SDK before 13.0.0.111, and Adobe AIR SDK & Compiler before 13.0.0.111 allow attackers to bypass intended access restrictions via unspecified vectors, a different vulnerability than CVE-2014-0517, CVE-2014-0519, and CVE-2014-0520. CVE-2014-0518 SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1 SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1 SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151137-1/ https://www.suse.com/security/cve/CVE-2014-0518.html CVE-2014-0518 https://bugzilla.suse.com/877649 SUSE Bug 877649 Adobe Flash Player before 13.0.0.214 on Windows and OS X and before 11.2.202.359 on Linux, Adobe AIR SDK before 13.0.0.111, and Adobe AIR SDK & Compiler before 13.0.0.111 allow attackers to bypass intended access restrictions via unspecified vectors, a different vulnerability than CVE-2014-0517, CVE-2014-0518, and CVE-2014-0520. CVE-2014-0519 SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1 SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1 SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151137-1/ https://www.suse.com/security/cve/CVE-2014-0519.html CVE-2014-0519 https://bugzilla.suse.com/877649 SUSE Bug 877649 Adobe Flash Player before 13.0.0.214 on Windows and OS X and before 11.2.202.359 on Linux, Adobe AIR SDK before 13.0.0.111, and Adobe AIR SDK & Compiler before 13.0.0.111 allow attackers to bypass intended access restrictions via unspecified vectors, a different vulnerability than CVE-2014-0517, CVE-2014-0518, and CVE-2014-0519. CVE-2014-0520 SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1 SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1 SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151137-1/ https://www.suse.com/security/cve/CVE-2014-0520.html CVE-2014-0520 https://bugzilla.suse.com/877649 SUSE Bug 877649 Cross-site scripting (XSS) vulnerability in Adobe Flash Player before 13.0.0.223 and 14.x before 14.0.0.125 on Windows and OS X and before 11.2.202.378 on Linux, Adobe AIR before 14.0.0.110, Adobe AIR SDK before 14.0.0.110, and Adobe AIR SDK & Compiler before 14.0.0.110 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2014-0532 and CVE-2014-0533. CVE-2014-0531 SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1 SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1 SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1 critical To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151137-1/ https://www.suse.com/security/cve/CVE-2014-0531.html CVE-2014-0531 https://bugzilla.suse.com/882187 SUSE Bug 882187 Cross-site scripting (XSS) vulnerability in Adobe Flash Player before 13.0.0.223 and 14.x before 14.0.0.125 on Windows and OS X and before 11.2.202.378 on Linux, Adobe AIR before 14.0.0.110, Adobe AIR SDK before 14.0.0.110, and Adobe AIR SDK & Compiler before 14.0.0.110 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2014-0531 and CVE-2014-0533. CVE-2014-0532 SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1 SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1 SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1 critical To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151137-1/ https://www.suse.com/security/cve/CVE-2014-0532.html CVE-2014-0532 https://bugzilla.suse.com/882187 SUSE Bug 882187 Cross-site scripting (XSS) vulnerability in Adobe Flash Player before 13.0.0.223 and 14.x before 14.0.0.125 on Windows and OS X and before 11.2.202.378 on Linux, Adobe AIR before 14.0.0.110, Adobe AIR SDK before 14.0.0.110, and Adobe AIR SDK & Compiler before 14.0.0.110 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2014-0531 and CVE-2014-0532. CVE-2014-0533 SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1 SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1 SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1 critical To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151137-1/ https://www.suse.com/security/cve/CVE-2014-0533.html CVE-2014-0533 https://bugzilla.suse.com/882187 SUSE Bug 882187 Adobe Flash Player before 13.0.0.223 and 14.x before 14.0.0.125 on Windows and OS X and before 11.2.202.378 on Linux, Adobe AIR before 14.0.0.110, Adobe AIR SDK before 14.0.0.110, and Adobe AIR SDK & Compiler before 14.0.0.110 allow attackers to bypass intended access restrictions via unspecified vectors, a different vulnerability than CVE-2014-0535. CVE-2014-0534 SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1 SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1 SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1 critical To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151137-1/ https://www.suse.com/security/cve/CVE-2014-0534.html CVE-2014-0534 https://bugzilla.suse.com/882187 SUSE Bug 882187 Adobe Flash Player before 13.0.0.223 and 14.x before 14.0.0.125 on Windows and OS X and before 11.2.202.378 on Linux, Adobe AIR before 14.0.0.110, Adobe AIR SDK before 14.0.0.110, and Adobe AIR SDK & Compiler before 14.0.0.110 allow attackers to bypass intended access restrictions via unspecified vectors, a different vulnerability than CVE-2014-0534. CVE-2014-0535 SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1 SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1 SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1 critical To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151137-1/ https://www.suse.com/security/cve/CVE-2014-0535.html CVE-2014-0535 https://bugzilla.suse.com/882187 SUSE Bug 882187 Adobe Flash Player before 13.0.0.223 and 14.x before 14.0.0.125 on Windows and OS X and before 11.2.202.378 on Linux, Adobe AIR before 14.0.0.110, Adobe AIR SDK before 14.0.0.110, and Adobe AIR SDK & Compiler before 14.0.0.110 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors. CVE-2014-0536 SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1 SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1 SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1 critical To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151137-1/ https://www.suse.com/security/cve/CVE-2014-0536.html CVE-2014-0536 https://bugzilla.suse.com/882187 SUSE Bug 882187 Adobe Flash Player before 13.0.0.231 and 14.x before 14.0.0.145 on Windows and OS X and before 11.2.202.394 on Linux, Adobe AIR before 14.0.0.137 on Android, Adobe AIR SDK before 14.0.0.137, and Adobe AIR SDK & Compiler before 14.0.0.137 allow attackers to bypass intended access restrictions via unspecified vectors, a different vulnerability than CVE-2014-0539. CVE-2014-0537 SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1 SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1 SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1 critical To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151137-1/ https://www.suse.com/security/cve/CVE-2014-0537.html CVE-2014-0537 https://bugzilla.suse.com/886454 SUSE Bug 886454 https://bugzilla.suse.com/886472 SUSE Bug 886472 Use-after-free vulnerability in Adobe Flash Player before 13.0.0.241 and 14.x before 14.0.0.176 on Windows and OS X and before 11.2.202.400 on Linux, Adobe AIR before 14.0.0.178 on Windows and OS X and before 14.0.0.179 on Android, Adobe AIR SDK before 14.0.0.178, and Adobe AIR SDK & Compiler before 14.0.0.178 allows attackers to execute arbitrary code via unspecified vectors. CVE-2014-0538 SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1 SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1 SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1 critical To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151137-1/ https://www.suse.com/security/cve/CVE-2014-0538.html CVE-2014-0538 https://bugzilla.suse.com/891688 SUSE Bug 891688 Adobe Flash Player before 13.0.0.231 and 14.x before 14.0.0.145 on Windows and OS X and before 11.2.202.394 on Linux, Adobe AIR before 14.0.0.137 on Android, Adobe AIR SDK before 14.0.0.137, and Adobe AIR SDK & Compiler before 14.0.0.137 allow attackers to bypass intended access restrictions via unspecified vectors, a different vulnerability than CVE-2014-0537. CVE-2014-0539 SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1 SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1 SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1 critical To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151137-1/ https://www.suse.com/security/cve/CVE-2014-0539.html CVE-2014-0539 https://bugzilla.suse.com/886454 SUSE Bug 886454 https://bugzilla.suse.com/886472 SUSE Bug 886472 Adobe Flash Player before 13.0.0.241 and 14.x before 14.0.0.176 on Windows and OS X and before 11.2.202.400 on Linux, Adobe AIR before 14.0.0.178 on Windows and OS X and before 14.0.0.179 on Android, Adobe AIR SDK before 14.0.0.178, and Adobe AIR SDK & Compiler before 14.0.0.178 do not properly restrict discovery of memory addresses, which allows attackers to bypass the ASLR protection mechanism via unspecified vectors, a different vulnerability than CVE-2014-0542, CVE-2014-0543, CVE-2014-0544, and CVE-2014-0545. CVE-2014-0540 SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1 SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1 SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1 critical To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151137-1/ https://www.suse.com/security/cve/CVE-2014-0540.html CVE-2014-0540 https://bugzilla.suse.com/891688 SUSE Bug 891688 Adobe Flash Player before 13.0.0.241 and 14.x before 14.0.0.176 on Windows and OS X and before 11.2.202.400 on Linux, Adobe AIR before 14.0.0.178 on Windows and OS X and before 14.0.0.179 on Android, Adobe AIR SDK before 14.0.0.178, and Adobe AIR SDK & Compiler before 14.0.0.178 allow attackers to bypass intended access restrictions via unspecified vectors. CVE-2014-0541 SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1 SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1 SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1 critical To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151137-1/ https://www.suse.com/security/cve/CVE-2014-0541.html CVE-2014-0541 https://bugzilla.suse.com/891688 SUSE Bug 891688 Adobe Flash Player before 13.0.0.241 and 14.x before 14.0.0.176 on Windows and OS X and before 11.2.202.400 on Linux, Adobe AIR before 14.0.0.178 on Windows and OS X and before 14.0.0.179 on Android, Adobe AIR SDK before 14.0.0.178, and Adobe AIR SDK & Compiler before 14.0.0.178 do not properly restrict discovery of memory addresses, which allows attackers to bypass the ASLR protection mechanism via unspecified vectors, a different vulnerability than CVE-2014-0540, CVE-2014-0543, CVE-2014-0544, and CVE-2014-0545. CVE-2014-0542 SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1 SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1 SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1 critical To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151137-1/ https://www.suse.com/security/cve/CVE-2014-0542.html CVE-2014-0542 https://bugzilla.suse.com/891688 SUSE Bug 891688 Adobe Flash Player before 13.0.0.241 and 14.x before 14.0.0.176 on Windows and OS X and before 11.2.202.400 on Linux, Adobe AIR before 14.0.0.178 on Windows and OS X and before 14.0.0.179 on Android, Adobe AIR SDK before 14.0.0.178, and Adobe AIR SDK & Compiler before 14.0.0.178 do not properly restrict discovery of memory addresses, which allows attackers to bypass the ASLR protection mechanism via unspecified vectors, a different vulnerability than CVE-2014-0540, CVE-2014-0542, CVE-2014-0544, and CVE-2014-0545. CVE-2014-0543 SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1 SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1 SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1 critical To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151137-1/ https://www.suse.com/security/cve/CVE-2014-0543.html CVE-2014-0543 https://bugzilla.suse.com/891688 SUSE Bug 891688 Adobe Flash Player before 13.0.0.241 and 14.x before 14.0.0.176 on Windows and OS X and before 11.2.202.400 on Linux, Adobe AIR before 14.0.0.178 on Windows and OS X and before 14.0.0.179 on Android, Adobe AIR SDK before 14.0.0.178, and Adobe AIR SDK & Compiler before 14.0.0.178 do not properly restrict discovery of memory addresses, which allows attackers to bypass the ASLR protection mechanism via unspecified vectors, a different vulnerability than CVE-2014-0540, CVE-2014-0542, CVE-2014-0543, and CVE-2014-0545. CVE-2014-0544 SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1 SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1 SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1 critical To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151137-1/ https://www.suse.com/security/cve/CVE-2014-0544.html CVE-2014-0544 https://bugzilla.suse.com/891688 SUSE Bug 891688 Adobe Flash Player before 13.0.0.241 and 14.x before 14.0.0.176 on Windows and OS X and before 11.2.202.400 on Linux, Adobe AIR before 14.0.0.178 on Windows and OS X and before 14.0.0.179 on Android, Adobe AIR SDK before 14.0.0.178, and Adobe AIR SDK & Compiler before 14.0.0.178 do not properly restrict discovery of memory addresses, which allows attackers to bypass the ASLR protection mechanism via unspecified vectors, a different vulnerability than CVE-2014-0540, CVE-2014-0542, CVE-2014-0543, and CVE-2014-0544. CVE-2014-0545 SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1 SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1 SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1 critical To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151137-1/ https://www.suse.com/security/cve/CVE-2014-0545.html CVE-2014-0545 https://bugzilla.suse.com/891688 SUSE Bug 891688 Adobe Flash Player before 13.0.0.244 and 14.x and 15.x before 15.0.0.152 on Windows and OS X and before 11.2.202.406 on Linux, Adobe AIR before 15.0.0.249 on Windows and OS X and before 15.0.0.252 on Android, Adobe AIR SDK before 15.0.0.249, and Adobe AIR SDK & Compiler before 15.0.0.249 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2014-0549, CVE-2014-0550, CVE-2014-0551, CVE-2014-0552, and CVE-2014-0555. CVE-2014-0547 SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1 SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1 SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1 critical To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151137-1/ https://www.suse.com/security/cve/CVE-2014-0547.html CVE-2014-0547 https://bugzilla.suse.com/895856 SUSE Bug 895856 Adobe Flash Player before 13.0.0.244 and 14.x and 15.x before 15.0.0.152 on Windows and OS X and before 11.2.202.406 on Linux, Adobe AIR before 15.0.0.249 on Windows and OS X and before 15.0.0.252 on Android, Adobe AIR SDK before 15.0.0.249, and Adobe AIR SDK & Compiler before 15.0.0.249 allow remote attackers to bypass the Same Origin Policy via unspecified vectors. CVE-2014-0548 SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1 SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1 SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1 critical To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151137-1/ https://www.suse.com/security/cve/CVE-2014-0548.html CVE-2014-0548 https://bugzilla.suse.com/895856 SUSE Bug 895856 Adobe Flash Player before 13.0.0.244 and 14.x and 15.x before 15.0.0.152 on Windows and OS X and before 11.2.202.406 on Linux, Adobe AIR before 15.0.0.249 on Windows and OS X and before 15.0.0.252 on Android, Adobe AIR SDK before 15.0.0.249, and Adobe AIR SDK & Compiler before 15.0.0.249 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2014-0547, CVE-2014-0550, CVE-2014-0551, CVE-2014-0552, and CVE-2014-0555. CVE-2014-0549 SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1 SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1 SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1 critical To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151137-1/ https://www.suse.com/security/cve/CVE-2014-0549.html CVE-2014-0549 https://bugzilla.suse.com/895856 SUSE Bug 895856 Adobe Flash Player before 13.0.0.244 and 14.x and 15.x before 15.0.0.152 on Windows and OS X and before 11.2.202.406 on Linux, Adobe AIR before 15.0.0.249 on Windows and OS X and before 15.0.0.252 on Android, Adobe AIR SDK before 15.0.0.249, and Adobe AIR SDK & Compiler before 15.0.0.249 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2014-0547, CVE-2014-0549, CVE-2014-0551, CVE-2014-0552, and CVE-2014-0555. CVE-2014-0550 SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1 SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1 SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1 critical To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151137-1/ https://www.suse.com/security/cve/CVE-2014-0550.html CVE-2014-0550 https://bugzilla.suse.com/895856 SUSE Bug 895856 Adobe Flash Player before 13.0.0.244 and 14.x and 15.x before 15.0.0.152 on Windows and OS X and before 11.2.202.406 on Linux, Adobe AIR before 15.0.0.249 on Windows and OS X and before 15.0.0.252 on Android, Adobe AIR SDK before 15.0.0.249, and Adobe AIR SDK & Compiler before 15.0.0.249 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2014-0547, CVE-2014-0549, CVE-2014-0550, CVE-2014-0552, and CVE-2014-0555. CVE-2014-0551 SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1 SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1 SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1 critical To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151137-1/ https://www.suse.com/security/cve/CVE-2014-0551.html CVE-2014-0551 https://bugzilla.suse.com/895856 SUSE Bug 895856 Adobe Flash Player before 13.0.0.244 and 14.x and 15.x before 15.0.0.152 on Windows and OS X and before 11.2.202.406 on Linux, Adobe AIR before 15.0.0.249 on Windows and OS X and before 15.0.0.252 on Android, Adobe AIR SDK before 15.0.0.249, and Adobe AIR SDK & Compiler before 15.0.0.249 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2014-0547, CVE-2014-0549, CVE-2014-0550, CVE-2014-0551, and CVE-2014-0555. CVE-2014-0552 SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1 SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1 SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1 critical To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151137-1/ https://www.suse.com/security/cve/CVE-2014-0552.html CVE-2014-0552 https://bugzilla.suse.com/895856 SUSE Bug 895856 Use-after-free vulnerability in Adobe Flash Player before 13.0.0.244 and 14.x and 15.x before 15.0.0.152 on Windows and OS X and before 11.2.202.406 on Linux, Adobe AIR before 15.0.0.249 on Windows and OS X and before 15.0.0.252 on Android, Adobe AIR SDK before 15.0.0.249, and Adobe AIR SDK & Compiler before 15.0.0.249 allows attackers to execute arbitrary code via unspecified vectors. CVE-2014-0553 SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1 SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1 SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1 critical To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151137-1/ https://www.suse.com/security/cve/CVE-2014-0553.html CVE-2014-0553 https://bugzilla.suse.com/895856 SUSE Bug 895856 Adobe Flash Player before 13.0.0.244 and 14.x and 15.x before 15.0.0.152 on Windows and OS X and before 11.2.202.406 on Linux, Adobe AIR before 15.0.0.249 on Windows and OS X and before 15.0.0.252 on Android, Adobe AIR SDK before 15.0.0.249, and Adobe AIR SDK & Compiler before 15.0.0.249 allow attackers to bypass intended access restrictions via unspecified vectors. CVE-2014-0554 SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1 SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1 SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1 critical To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151137-1/ https://www.suse.com/security/cve/CVE-2014-0554.html CVE-2014-0554 https://bugzilla.suse.com/895856 SUSE Bug 895856 Adobe Flash Player before 13.0.0.244 and 14.x and 15.x before 15.0.0.152 on Windows and OS X and before 11.2.202.406 on Linux, Adobe AIR before 15.0.0.249 on Windows and OS X and before 15.0.0.252 on Android, Adobe AIR SDK before 15.0.0.249, and Adobe AIR SDK & Compiler before 15.0.0.249 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2014-0547, CVE-2014-0549, CVE-2014-0550, CVE-2014-0551, and CVE-2014-0552. CVE-2014-0555 SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1 SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1 SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1 critical To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151137-1/ https://www.suse.com/security/cve/CVE-2014-0555.html CVE-2014-0555 https://bugzilla.suse.com/895856 SUSE Bug 895856 Heap-based buffer overflow in Adobe Flash Player before 13.0.0.244 and 14.x and 15.x before 15.0.0.152 on Windows and OS X and before 11.2.202.406 on Linux, Adobe AIR before 15.0.0.249 on Windows and OS X and before 15.0.0.252 on Android, Adobe AIR SDK before 15.0.0.249, and Adobe AIR SDK & Compiler before 15.0.0.249 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2014-0559. CVE-2014-0556 SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1 SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1 SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1 critical To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151137-1/ https://www.suse.com/security/cve/CVE-2014-0556.html CVE-2014-0556 https://bugzilla.suse.com/895856 SUSE Bug 895856 Adobe Flash Player before 13.0.0.244 and 14.x and 15.x before 15.0.0.152 on Windows and OS X and before 11.2.202.406 on Linux, Adobe AIR before 15.0.0.249 on Windows and OS X and before 15.0.0.252 on Android, Adobe AIR SDK before 15.0.0.249, and Adobe AIR SDK & Compiler before 15.0.0.249 do not properly restrict discovery of memory addresses, which allows attackers to bypass the ASLR protection mechanism via unspecified vectors. CVE-2014-0557 SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1 SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1 SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1 critical To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151137-1/ https://www.suse.com/security/cve/CVE-2014-0557.html CVE-2014-0557 https://bugzilla.suse.com/895856 SUSE Bug 895856 Adobe Flash Player before 13.0.0.250 and 14.x and 15.x before 15.0.0.189 on Windows and OS X and before 11.2.202.411 on Linux, Adobe AIR before 15.0.0.293, Adobe AIR SDK before 15.0.0.302, and Adobe AIR SDK & Compiler before 15.0.0.302 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2014-0564. CVE-2014-0558 SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1 SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1 SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1 moderate 6.8 AV:N/AC:M/Au:N/C:P/I:P/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151137-1/ https://www.suse.com/security/cve/CVE-2014-0558.html CVE-2014-0558 https://bugzilla.suse.com/901334 SUSE Bug 901334 https://bugzilla.suse.com/905032 SUSE Bug 905032 Heap-based buffer overflow in Adobe Flash Player before 13.0.0.244 and 14.x and 15.x before 15.0.0.152 on Windows and OS X and before 11.2.202.406 on Linux, Adobe AIR before 15.0.0.249 on Windows and OS X and before 15.0.0.252 on Android, Adobe AIR SDK before 15.0.0.249, and Adobe AIR SDK & Compiler before 15.0.0.249 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2014-0556. CVE-2014-0559 SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1 SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1 SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1 critical To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151137-1/ https://www.suse.com/security/cve/CVE-2014-0559.html CVE-2014-0559 https://bugzilla.suse.com/895856 SUSE Bug 895856 Adobe Flash Player before 13.0.0.250 and 14.x and 15.x before 15.0.0.189 on Windows and OS X and before 11.2.202.411 on Linux, Adobe AIR before 15.0.0.293, Adobe AIR SDK before 15.0.0.302, and Adobe AIR SDK & Compiler before 15.0.0.302 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2014-0558. CVE-2014-0564 SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1 SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1 SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151137-1/ https://www.suse.com/security/cve/CVE-2014-0564.html CVE-2014-0564 https://bugzilla.suse.com/901334 SUSE Bug 901334 https://bugzilla.suse.com/905032 SUSE Bug 905032 Integer overflow in Adobe Flash Player before 13.0.0.250 and 14.x and 15.x before 15.0.0.189 on Windows and OS X and before 11.2.202.411 on Linux, Adobe AIR before 15.0.0.293, Adobe AIR SDK before 15.0.0.302, and Adobe AIR SDK & Compiler before 15.0.0.302 allows attackers to execute arbitrary code via unspecified vectors. CVE-2014-0569 SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1 SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1 SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151137-1/ https://www.suse.com/security/cve/CVE-2014-0569.html CVE-2014-0569 https://bugzilla.suse.com/901334 SUSE Bug 901334 https://bugzilla.suse.com/905032 SUSE Bug 905032 Use-after-free vulnerability in Adobe Flash Player before 13.0.0.252 and 14.x and 15.x before 15.0.0.223 on Windows and OS X and before 11.2.202.418 on Linux, Adobe AIR before 15.0.0.356, Adobe AIR SDK before 15.0.0.356, and Adobe AIR SDK & Compiler before 15.0.0.356 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2014-0588 and CVE-2014-8438. CVE-2014-0573 SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1 SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1 SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1 critical To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151137-1/ https://www.suse.com/security/cve/CVE-2014-0573.html CVE-2014-0573 https://bugzilla.suse.com/905032 SUSE Bug 905032 Double free vulnerability in Adobe Flash Player before 13.0.0.252 and 14.x and 15.x before 15.0.0.223 on Windows and OS X and before 11.2.202.418 on Linux, Adobe AIR before 15.0.0.356, Adobe AIR SDK before 15.0.0.356, and Adobe AIR SDK & Compiler before 15.0.0.356 allows attackers to execute arbitrary code via unspecified vectors. CVE-2014-0574 SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1 SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1 SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1 critical To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151137-1/ https://www.suse.com/security/cve/CVE-2014-0574.html CVE-2014-0574 https://bugzilla.suse.com/905032 SUSE Bug 905032 Adobe Flash Player before 13.0.0.252 and 14.x and 15.x before 15.0.0.223 on Windows and OS X and before 11.2.202.418 on Linux, Adobe AIR before 15.0.0.356, Adobe AIR SDK before 15.0.0.356, and Adobe AIR SDK & Compiler before 15.0.0.356 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2014-0581, CVE-2014-8440, and CVE-2014-8441. CVE-2014-0576 SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1 SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1 SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1 critical To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151137-1/ https://www.suse.com/security/cve/CVE-2014-0576.html CVE-2014-0576 https://bugzilla.suse.com/905032 SUSE Bug 905032 Adobe Flash Player before 13.0.0.252 and 14.x and 15.x before 15.0.0.223 on Windows and OS X and before 11.2.202.418 on Linux, Adobe AIR before 15.0.0.356, Adobe AIR SDK before 15.0.0.356, and Adobe AIR SDK & Compiler before 15.0.0.356 allow attackers to execute arbitrary code by leveraging an unspecified "type confusion," a different vulnerability than CVE-2014-0584, CVE-2014-0585, CVE-2014-0586, and CVE-2014-0590. CVE-2014-0577 SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1 SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1 SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1 critical To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151137-1/ https://www.suse.com/security/cve/CVE-2014-0577.html CVE-2014-0577 https://bugzilla.suse.com/905032 SUSE Bug 905032 Adobe Flash Player before 13.0.0.259 and 14.x through 16.x before 16.0.0.235 on Windows and OS X and before 11.2.202.425 on Linux allows remote attackers to bypass the Same Origin Policy via unspecified vectors. CVE-2014-0580 SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1 SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1 SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1 critical To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151137-1/ https://www.suse.com/security/cve/CVE-2014-0580.html CVE-2014-0580 https://bugzilla.suse.com/909219 SUSE Bug 909219 Adobe Flash Player before 13.0.0.252 and 14.x and 15.x before 15.0.0.223 on Windows and OS X and before 11.2.202.418 on Linux, Adobe AIR before 15.0.0.356, Adobe AIR SDK before 15.0.0.356, and Adobe AIR SDK & Compiler before 15.0.0.356 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2014-0576, CVE-2014-8440, and CVE-2014-8441. CVE-2014-0581 SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1 SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1 SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151137-1/ https://www.suse.com/security/cve/CVE-2014-0581.html CVE-2014-0581 https://bugzilla.suse.com/905032 SUSE Bug 905032 Heap-based buffer overflow in Adobe Flash Player before 13.0.0.252 and 14.x and 15.x before 15.0.0.223 on Windows and OS X and before 11.2.202.418 on Linux, Adobe AIR before 15.0.0.356, Adobe AIR SDK before 15.0.0.356, and Adobe AIR SDK & Compiler before 15.0.0.356 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2014-0589. CVE-2014-0582 SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1 SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1 SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151137-1/ https://www.suse.com/security/cve/CVE-2014-0582.html CVE-2014-0582 https://bugzilla.suse.com/905032 SUSE Bug 905032 Heap-based buffer overflow in Adobe Flash Player before 13.0.0.252 and 14.x and 15.x before 15.0.0.223 on Windows and OS X and before 11.2.202.418 on Linux, Adobe AIR before 15.0.0.356, Adobe AIR SDK before 15.0.0.356, and Adobe AIR SDK & Compiler before 15.0.0.356 allows attackers to complete a transition from Low Integrity to Medium Integrity via unspecified vectors. CVE-2014-0583 SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1 SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1 SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1 critical To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151137-1/ https://www.suse.com/security/cve/CVE-2014-0583.html CVE-2014-0583 https://bugzilla.suse.com/905032 SUSE Bug 905032 Adobe Flash Player before 13.0.0.252 and 14.x and 15.x before 15.0.0.223 on Windows and OS X and before 11.2.202.418 on Linux, Adobe AIR before 15.0.0.356, Adobe AIR SDK before 15.0.0.356, and Adobe AIR SDK & Compiler before 15.0.0.356 allow attackers to execute arbitrary code by leveraging an unspecified "type confusion," a different vulnerability than CVE-2014-0577, CVE-2014-0585, CVE-2014-0586, and CVE-2014-0590. CVE-2014-0584 SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1 SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1 SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151137-1/ https://www.suse.com/security/cve/CVE-2014-0584.html CVE-2014-0584 https://bugzilla.suse.com/905032 SUSE Bug 905032 Adobe Flash Player before 13.0.0.252 and 14.x and 15.x before 15.0.0.223 on Windows and OS X and before 11.2.202.418 on Linux, Adobe AIR before 15.0.0.356, Adobe AIR SDK before 15.0.0.356, and Adobe AIR SDK & Compiler before 15.0.0.356 allow attackers to execute arbitrary code by leveraging an unspecified "type confusion," a different vulnerability than CVE-2014-0577, CVE-2014-0584, CVE-2014-0586, and CVE-2014-0590. CVE-2014-0585 SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1 SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1 SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151137-1/ https://www.suse.com/security/cve/CVE-2014-0585.html CVE-2014-0585 https://bugzilla.suse.com/905032 SUSE Bug 905032 Adobe Flash Player before 13.0.0.252 and 14.x and 15.x before 15.0.0.223 on Windows and OS X and before 11.2.202.418 on Linux, Adobe AIR before 15.0.0.356, Adobe AIR SDK before 15.0.0.356, and Adobe AIR SDK & Compiler before 15.0.0.356 allow attackers to execute arbitrary code by leveraging an unspecified "type confusion," a different vulnerability than CVE-2014-0577, CVE-2014-0584, CVE-2014-0585, and CVE-2014-0590. CVE-2014-0586 SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1 SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1 SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151137-1/ https://www.suse.com/security/cve/CVE-2014-0586.html CVE-2014-0586 https://bugzilla.suse.com/905032 SUSE Bug 905032 Adobe Flash Player before 13.0.0.259 and 14.x through 16.x before 16.0.0.235 on Windows and OS X and before 11.2.202.425 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2014-9164. CVE-2014-0587 SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1 SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1 SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1 critical To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151137-1/ https://www.suse.com/security/cve/CVE-2014-0587.html CVE-2014-0587 https://bugzilla.suse.com/909219 SUSE Bug 909219 Use-after-free vulnerability in Adobe Flash Player before 13.0.0.252 and 14.x and 15.x before 15.0.0.223 on Windows and OS X and before 11.2.202.418 on Linux, Adobe AIR before 15.0.0.356, Adobe AIR SDK before 15.0.0.356, and Adobe AIR SDK & Compiler before 15.0.0.356 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2014-0573 and CVE-2014-8438. CVE-2014-0588 SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1 SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1 SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151137-1/ https://www.suse.com/security/cve/CVE-2014-0588.html CVE-2014-0588 https://bugzilla.suse.com/905032 SUSE Bug 905032 Heap-based buffer overflow in Adobe Flash Player before 13.0.0.252 and 14.x and 15.x before 15.0.0.223 on Windows and OS X and before 11.2.202.418 on Linux, Adobe AIR before 15.0.0.356, Adobe AIR SDK before 15.0.0.356, and Adobe AIR SDK & Compiler before 15.0.0.356 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2014-0582. CVE-2014-0589 SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1 SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1 SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151137-1/ https://www.suse.com/security/cve/CVE-2014-0589.html CVE-2014-0589 https://bugzilla.suse.com/905032 SUSE Bug 905032 Adobe Flash Player before 13.0.0.252 and 14.x and 15.x before 15.0.0.223 on Windows and OS X and before 11.2.202.418 on Linux, Adobe AIR before 15.0.0.356, Adobe AIR SDK before 15.0.0.356, and Adobe AIR SDK & Compiler before 15.0.0.356 allow attackers to execute arbitrary code by leveraging an unspecified "type confusion," a different vulnerability than CVE-2014-0577, CVE-2014-0584, CVE-2014-0585, and CVE-2014-0586. CVE-2014-0590 SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1 SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1 SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151137-1/ https://www.suse.com/security/cve/CVE-2014-0590.html CVE-2014-0590 https://bugzilla.suse.com/905032 SUSE Bug 905032 Adobe Flash Player before 13.0.0.231 and 14.x before 14.0.0.145 on Windows and OS X and before 11.2.202.394 on Linux, Adobe AIR before 14.0.0.137 on Android, Adobe AIR SDK before 14.0.0.137, and Adobe AIR SDK & Compiler before 14.0.0.137 do not properly restrict the SWF file format, which allows remote attackers to conduct cross-site request forgery (CSRF) attacks against JSONP endpoints, and obtain sensitive information, via a crafted OBJECT element with SWF content satisfying the character-set requirements of a callback API. CVE-2014-4671 SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1 SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1 SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1 critical To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151137-1/ https://www.suse.com/security/cve/CVE-2014-4671.html CVE-2014-4671 https://bugzilla.suse.com/886454 SUSE Bug 886454 https://bugzilla.suse.com/891688 SUSE Bug 891688 Adobe Flash Player before 13.0.0.252 and 14.x and 15.x before 15.0.0.223 on Windows and OS X and before 11.2.202.418 on Linux, Adobe AIR before 15.0.0.356, Adobe AIR SDK before 15.0.0.356, and Adobe AIR SDK & Compiler before 15.0.0.356 allow remote attackers to discover session tokens via unspecified vectors. CVE-2014-8437 SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1 SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1 SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151137-1/ https://www.suse.com/security/cve/CVE-2014-8437.html CVE-2014-8437 https://bugzilla.suse.com/905032 SUSE Bug 905032 Use-after-free vulnerability in Adobe Flash Player before 13.0.0.252 and 14.x and 15.x before 15.0.0.223 on Windows and OS X and before 11.2.202.418 on Linux, Adobe AIR before 15.0.0.356, Adobe AIR SDK before 15.0.0.356, and Adobe AIR SDK & Compiler before 15.0.0.356 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2014-0573 and CVE-2014-0588. CVE-2014-8438 SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1 SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1 SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151137-1/ https://www.suse.com/security/cve/CVE-2014-8438.html CVE-2014-8438 https://bugzilla.suse.com/905032 SUSE Bug 905032 Adobe Flash Player before 13.0.0.258 and 14.x and 15.x before 15.0.0.239 on Windows and OS X and before 11.2.202.424 on Linux, Adobe AIR before 15.0.0.293, Adobe AIR SDK before 15.0.0.302, and Adobe AIR SDK & Compiler before 15.0.0.302 allow attackers to execute arbitrary code or cause a denial of service (invalid pointer dereference) via unspecified vectors. CVE-2014-8439 SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1 SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1 SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1 critical To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151137-1/ https://www.suse.com/security/cve/CVE-2014-8439.html CVE-2014-8439 https://bugzilla.suse.com/907257 SUSE Bug 907257 https://bugzilla.suse.com/909219 SUSE Bug 909219 Adobe Flash Player before 13.0.0.252 and 14.x and 15.x before 15.0.0.223 on Windows and OS X and before 11.2.202.418 on Linux, Adobe AIR before 15.0.0.356, Adobe AIR SDK before 15.0.0.356, and Adobe AIR SDK & Compiler before 15.0.0.356 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2014-0576, CVE-2014-0581, and CVE-2014-8441. CVE-2014-8440 SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1 SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1 SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151137-1/ https://www.suse.com/security/cve/CVE-2014-8440.html CVE-2014-8440 https://bugzilla.suse.com/905032 SUSE Bug 905032 Adobe Flash Player before 13.0.0.252 and 14.x and 15.x before 15.0.0.223 on Windows and OS X and before 11.2.202.418 on Linux, Adobe AIR before 15.0.0.356, Adobe AIR SDK before 15.0.0.356, and Adobe AIR SDK & Compiler before 15.0.0.356 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2014-0576, CVE-2014-0581, and CVE-2014-8440. CVE-2014-8441 SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1 SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1 SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151137-1/ https://www.suse.com/security/cve/CVE-2014-8441.html CVE-2014-8441 https://bugzilla.suse.com/905032 SUSE Bug 905032 Adobe Flash Player before 13.0.0.252 and 14.x and 15.x before 15.0.0.223 on Windows and OS X and before 11.2.202.418 on Linux, Adobe AIR before 15.0.0.356, Adobe AIR SDK before 15.0.0.356, and Adobe AIR SDK & Compiler before 15.0.0.356 allow attackers to complete a transition from Low Integrity to Medium Integrity by leveraging incorrect permissions. CVE-2014-8442 SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1 SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1 SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1 critical To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151137-1/ https://www.suse.com/security/cve/CVE-2014-8442.html CVE-2014-8442 https://bugzilla.suse.com/905032 SUSE Bug 905032 Use-after-free vulnerability in Adobe Flash Player before 13.0.0.259 and 14.x through 16.x before 16.0.0.235 on Windows and OS X and before 11.2.202.425 on Linux allows attackers to execute arbitrary code via unspecified vectors. CVE-2014-8443 SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1 SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1 SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1 critical To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151137-1/ https://www.suse.com/security/cve/CVE-2014-8443.html CVE-2014-8443 https://bugzilla.suse.com/909219 SUSE Bug 909219 Adobe Flash Player before 13.0.0.259 and 14.x through 16.x before 16.0.0.235 on Windows and OS X and before 11.2.202.425 on Linux allows attackers to obtain sensitive information via unspecified vectors. CVE-2014-9162 SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1 SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1 SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1 critical To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151137-1/ https://www.suse.com/security/cve/CVE-2014-9162.html CVE-2014-9162 https://bugzilla.suse.com/909219 SUSE Bug 909219 Stack-based buffer overflow in Adobe Flash Player before 13.0.0.259 and 14.x and 15.x before 15.0.0.246 on Windows and OS X and before 11.2.202.425 on Linux allows attackers to execute arbitrary code via unspecified vectors, as exploited in the wild in December 2014. CVE-2014-9163 SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1 SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1 SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1 critical To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151137-1/ https://www.suse.com/security/cve/CVE-2014-9163.html CVE-2014-9163 https://bugzilla.suse.com/909219 SUSE Bug 909219 Adobe Flash Player before 13.0.0.259 and 14.x through 16.x before 16.0.0.235 on Windows and OS X and before 11.2.202.425 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2014-0587. CVE-2014-9164 SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1 SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1 SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1 critical To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151137-1/ https://www.suse.com/security/cve/CVE-2014-9164.html CVE-2014-9164 https://bugzilla.suse.com/909219 SUSE Bug 909219 Adobe Flash Player before 13.0.0.260 and 14.x through 16.x before 16.0.0.257 on Windows and OS X and before 11.2.202.429 on Linux, Adobe AIR before 16.0.0.245 on Windows and OS X and before 16.0.0.272 on Android, Adobe AIR SDK before 16.0.0.272, and Adobe AIR SDK & Compiler before 16.0.0.272 do not properly validate files, which has unspecified impact and attack vectors. CVE-2015-0301 SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1 SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1 SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1 critical To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151137-1/ https://www.suse.com/security/cve/CVE-2015-0301.html CVE-2015-0301 https://bugzilla.suse.com/913057 SUSE Bug 913057 Adobe Flash Player before 13.0.0.260 and 14.x through 16.x before 16.0.0.257 on Windows and OS X and before 11.2.202.429 on Linux, Adobe AIR before 16.0.0.245 on Windows and OS X and before 16.0.0.272 on Android, Adobe AIR SDK before 16.0.0.272, and Adobe AIR SDK & Compiler before 16.0.0.272 allow attackers to obtain sensitive keystroke information via unspecified vectors. CVE-2015-0302 SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1 SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1 SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1 critical To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151137-1/ https://www.suse.com/security/cve/CVE-2015-0302.html CVE-2015-0302 https://bugzilla.suse.com/913057 SUSE Bug 913057 Adobe Flash Player before 13.0.0.260 and 14.x through 16.x before 16.0.0.257 on Windows and OS X and before 11.2.202.429 on Linux, Adobe AIR before 16.0.0.245 on Windows and OS X and before 16.0.0.272 on Android, Adobe AIR SDK before 16.0.0.272, and Adobe AIR SDK & Compiler before 16.0.0.272 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-0306. CVE-2015-0303 SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1 SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1 SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1 critical To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151137-1/ https://www.suse.com/security/cve/CVE-2015-0303.html CVE-2015-0303 https://bugzilla.suse.com/913057 SUSE Bug 913057 Heap-based buffer overflow in Adobe Flash Player before 13.0.0.260 and 14.x through 16.x before 16.0.0.257 on Windows and OS X and before 11.2.202.429 on Linux, Adobe AIR before 16.0.0.245 on Windows and OS X and before 16.0.0.272 on Android, Adobe AIR SDK before 16.0.0.272, and Adobe AIR SDK & Compiler before 16.0.0.272 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-0309. CVE-2015-0304 SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1 SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1 SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1 critical To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151137-1/ https://www.suse.com/security/cve/CVE-2015-0304.html CVE-2015-0304 https://bugzilla.suse.com/913057 SUSE Bug 913057 Adobe Flash Player before 13.0.0.260 and 14.x through 16.x before 16.0.0.257 on Windows and OS X and before 11.2.202.429 on Linux, Adobe AIR before 16.0.0.245 on Windows and OS X and before 16.0.0.272 on Android, Adobe AIR SDK before 16.0.0.272, and Adobe AIR SDK & Compiler before 16.0.0.272 allow attackers to execute arbitrary code by leveraging an unspecified "type confusion." CVE-2015-0305 SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1 SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1 SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1 critical To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151137-1/ https://www.suse.com/security/cve/CVE-2015-0305.html CVE-2015-0305 https://bugzilla.suse.com/913057 SUSE Bug 913057 Adobe Flash Player before 13.0.0.260 and 14.x through 16.x before 16.0.0.257 on Windows and OS X and before 11.2.202.429 on Linux, Adobe AIR before 16.0.0.245 on Windows and OS X and before 16.0.0.272 on Android, Adobe AIR SDK before 16.0.0.272, and Adobe AIR SDK & Compiler before 16.0.0.272 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-0303. CVE-2015-0306 SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1 SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1 SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1 critical To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151137-1/ https://www.suse.com/security/cve/CVE-2015-0306.html CVE-2015-0306 https://bugzilla.suse.com/913057 SUSE Bug 913057 Adobe Flash Player before 13.0.0.260 and 14.x through 16.x before 16.0.0.257 on Windows and OS X and before 11.2.202.429 on Linux, Adobe AIR before 16.0.0.245 on Windows and OS X and before 16.0.0.272 on Android, Adobe AIR SDK before 16.0.0.272, and Adobe AIR SDK & Compiler before 16.0.0.272 allow remote attackers to obtain sensitive information from process memory or cause a denial of service (out-of-bounds read) via unspecified vectors. CVE-2015-0307 SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1 SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1 SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1 critical To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151137-1/ https://www.suse.com/security/cve/CVE-2015-0307.html CVE-2015-0307 https://bugzilla.suse.com/913057 SUSE Bug 913057 Use-after-free vulnerability in Adobe Flash Player before 13.0.0.260 and 14.x through 16.x before 16.0.0.257 on Windows and OS X and before 11.2.202.429 on Linux, Adobe AIR before 16.0.0.245 on Windows and OS X and before 16.0.0.272 on Android, Adobe AIR SDK before 16.0.0.272, and Adobe AIR SDK & Compiler before 16.0.0.272 allows attackers to execute arbitrary code via unspecified vectors. CVE-2015-0308 SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1 SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1 SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1 critical To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151137-1/ https://www.suse.com/security/cve/CVE-2015-0308.html CVE-2015-0308 https://bugzilla.suse.com/913057 SUSE Bug 913057 Heap-based buffer overflow in Adobe Flash Player before 13.0.0.260 and 14.x through 16.x before 16.0.0.257 on Windows and OS X and before 11.2.202.429 on Linux, Adobe AIR before 16.0.0.245 on Windows and OS X and before 16.0.0.272 on Android, Adobe AIR SDK before 16.0.0.272, and Adobe AIR SDK & Compiler before 16.0.0.272 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-0304. CVE-2015-0309 SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1 SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1 SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1 critical To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151137-1/ https://www.suse.com/security/cve/CVE-2015-0309.html CVE-2015-0309 https://bugzilla.suse.com/913057 SUSE Bug 913057 Adobe Flash Player before 13.0.0.262 and 14.x through 16.x before 16.0.0.287 on Windows and OS X and before 11.2.202.438 on Linux does not properly restrict discovery of memory addresses, which allows attackers to bypass the ASLR protection mechanism on Windows, and have an unspecified impact on other platforms, via unknown vectors, as exploited in the wild in January 2015. CVE-2015-0310 SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1 SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1 SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1 critical To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151137-1/ https://www.suse.com/security/cve/CVE-2015-0310.html CVE-2015-0310 https://bugzilla.suse.com/914333 SUSE Bug 914333 Unspecified vulnerability in Adobe Flash Player through 13.0.0.262 and 14.x, 15.x, and 16.x through 16.0.0.287 on Windows and OS X and through 11.2.202.438 on Linux allows remote attackers to execute arbitrary code via unknown vectors, as exploited in the wild in January 2015. CVE-2015-0311 SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1 SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1 SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1 critical To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151137-1/ https://www.suse.com/security/cve/CVE-2015-0311.html CVE-2015-0311 https://bugzilla.suse.com/914463 SUSE Bug 914463 Use-after-free vulnerability in Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows and OS X and before 11.2.202.442 on Linux allows remote attackers to execute arbitrary code via unspecified vectors, as exploited in the wild in February 2015, a different vulnerability than CVE-2015-0315, CVE-2015-0320, and CVE-2015-0322. CVE-2015-0313 SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1 SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1 SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1 critical To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151137-1/ https://www.suse.com/security/cve/CVE-2015-0313.html CVE-2015-0313 https://bugzilla.suse.com/915918 SUSE Bug 915918 https://bugzilla.suse.com/916374 SUSE Bug 916374 https://bugzilla.suse.com/922033 SUSE Bug 922033 Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows and OS X and before 11.2.202.442 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-0316, CVE-2015-0318, CVE-2015-0321, CVE-2015-0329, and CVE-2015-0330. CVE-2015-0314 SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1 SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1 SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1 critical To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151137-1/ https://www.suse.com/security/cve/CVE-2015-0314.html CVE-2015-0314 https://bugzilla.suse.com/915918 SUSE Bug 915918 https://bugzilla.suse.com/922033 SUSE Bug 922033 Use-after-free vulnerability in Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows and OS X and before 11.2.202.442 on Linux allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-0313, CVE-2015-0320, and CVE-2015-0322. CVE-2015-0315 SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1 SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1 SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1 critical To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151137-1/ https://www.suse.com/security/cve/CVE-2015-0315.html CVE-2015-0315 https://bugzilla.suse.com/915918 SUSE Bug 915918 https://bugzilla.suse.com/922033 SUSE Bug 922033 Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows and OS X and before 11.2.202.442 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-0314, CVE-2015-0318, CVE-2015-0321, CVE-2015-0329, and CVE-2015-0330. CVE-2015-0316 SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1 SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1 SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1 critical To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151137-1/ https://www.suse.com/security/cve/CVE-2015-0316.html CVE-2015-0316 https://bugzilla.suse.com/915918 SUSE Bug 915918 https://bugzilla.suse.com/922033 SUSE Bug 922033 Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows and OS X and before 11.2.202.442 on Linux allows attackers to execute arbitrary code by leveraging an unspecified "type confusion," a different vulnerability than CVE-2015-0319. CVE-2015-0317 SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1 SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1 SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1 critical To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151137-1/ https://www.suse.com/security/cve/CVE-2015-0317.html CVE-2015-0317 https://bugzilla.suse.com/915918 SUSE Bug 915918 https://bugzilla.suse.com/922033 SUSE Bug 922033 Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows and OS X and before 11.2.202.442 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-0314, CVE-2015-0316, CVE-2015-0321, CVE-2015-0329, and CVE-2015-0330. CVE-2015-0318 SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1 SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1 SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1 critical To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151137-1/ https://www.suse.com/security/cve/CVE-2015-0318.html CVE-2015-0318 https://bugzilla.suse.com/915918 SUSE Bug 915918 https://bugzilla.suse.com/922033 SUSE Bug 922033 Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows and OS X and before 11.2.202.442 on Linux allows attackers to execute arbitrary code by leveraging an unspecified "type confusion," a different vulnerability than CVE-2015-0317. CVE-2015-0319 SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1 SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1 SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1 critical To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151137-1/ https://www.suse.com/security/cve/CVE-2015-0319.html CVE-2015-0319 https://bugzilla.suse.com/915918 SUSE Bug 915918 https://bugzilla.suse.com/922033 SUSE Bug 922033 Use-after-free vulnerability in Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows and OS X and before 11.2.202.442 on Linux allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-0313, CVE-2015-0315, and CVE-2015-0322. CVE-2015-0320 SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1 SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1 SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1 critical To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151137-1/ https://www.suse.com/security/cve/CVE-2015-0320.html CVE-2015-0320 https://bugzilla.suse.com/915918 SUSE Bug 915918 https://bugzilla.suse.com/922033 SUSE Bug 922033 Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows and OS X and before 11.2.202.442 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-0314, CVE-2015-0316, CVE-2015-0318, CVE-2015-0329, and CVE-2015-0330. CVE-2015-0321 SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1 SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1 SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1 critical To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151137-1/ https://www.suse.com/security/cve/CVE-2015-0321.html CVE-2015-0321 https://bugzilla.suse.com/915918 SUSE Bug 915918 https://bugzilla.suse.com/922033 SUSE Bug 922033 Use-after-free vulnerability in Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows and OS X and before 11.2.202.442 on Linux allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-0313, CVE-2015-0315, and CVE-2015-0320. CVE-2015-0322 SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1 SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1 SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1 critical To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151137-1/ https://www.suse.com/security/cve/CVE-2015-0322.html CVE-2015-0322 https://bugzilla.suse.com/915918 SUSE Bug 915918 https://bugzilla.suse.com/922033 SUSE Bug 922033 Heap-based buffer overflow in Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows and OS X and before 11.2.202.442 on Linux allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-0327. CVE-2015-0323 SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1 SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1 SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1 critical To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151137-1/ https://www.suse.com/security/cve/CVE-2015-0323.html CVE-2015-0323 https://bugzilla.suse.com/915918 SUSE Bug 915918 https://bugzilla.suse.com/922033 SUSE Bug 922033 Buffer overflow in Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows and OS X and before 11.2.202.442 on Linux allows attackers to execute arbitrary code via unspecified vectors. CVE-2015-0324 SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1 SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1 SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1 critical To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151137-1/ https://www.suse.com/security/cve/CVE-2015-0324.html CVE-2015-0324 https://bugzilla.suse.com/915918 SUSE Bug 915918 https://bugzilla.suse.com/922033 SUSE Bug 922033 Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows and OS X and before 11.2.202.442 on Linux allows attackers to cause a denial of service (NULL pointer dereference) or possibly have unspecified other impact via unknown vectors, a different vulnerability than CVE-2015-0326 and CVE-2015-0328. CVE-2015-0325 SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1 SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1 SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1 critical To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151137-1/ https://www.suse.com/security/cve/CVE-2015-0325.html CVE-2015-0325 https://bugzilla.suse.com/915918 SUSE Bug 915918 https://bugzilla.suse.com/922033 SUSE Bug 922033 Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows and OS X and before 11.2.202.442 on Linux allows attackers to cause a denial of service (NULL pointer dereference) or possibly have unspecified other impact via unknown vectors, a different vulnerability than CVE-2015-0325 and CVE-2015-0328. CVE-2015-0326 SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1 SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1 SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1 critical To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151137-1/ https://www.suse.com/security/cve/CVE-2015-0326.html CVE-2015-0326 https://bugzilla.suse.com/915918 SUSE Bug 915918 https://bugzilla.suse.com/922033 SUSE Bug 922033 Heap-based buffer overflow in Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows and OS X and before 11.2.202.442 on Linux allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-0323. CVE-2015-0327 SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1 SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1 SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1 critical To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151137-1/ https://www.suse.com/security/cve/CVE-2015-0327.html CVE-2015-0327 https://bugzilla.suse.com/915918 SUSE Bug 915918 https://bugzilla.suse.com/922033 SUSE Bug 922033 Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows and OS X and before 11.2.202.442 on Linux allows attackers to cause a denial of service (NULL pointer dereference) or possibly have unspecified other impact via unknown vectors, a different vulnerability than CVE-2015-0325 and CVE-2015-0326. CVE-2015-0328 SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1 SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1 SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1 critical To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151137-1/ https://www.suse.com/security/cve/CVE-2015-0328.html CVE-2015-0328 https://bugzilla.suse.com/915918 SUSE Bug 915918 https://bugzilla.suse.com/922033 SUSE Bug 922033 Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows and OS X and before 11.2.202.442 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-0314, CVE-2015-0316, CVE-2015-0318, CVE-2015-0321, and CVE-2015-0330. CVE-2015-0329 SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1 SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1 SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1 critical To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151137-1/ https://www.suse.com/security/cve/CVE-2015-0329.html CVE-2015-0329 https://bugzilla.suse.com/915918 SUSE Bug 915918 https://bugzilla.suse.com/922033 SUSE Bug 922033 Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows and OS X and before 11.2.202.442 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-0314, CVE-2015-0316, CVE-2015-0318, CVE-2015-0321, and CVE-2015-0329. CVE-2015-0330 SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1 SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1 SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1 critical To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151137-1/ https://www.suse.com/security/cve/CVE-2015-0330.html CVE-2015-0330 https://bugzilla.suse.com/915918 SUSE Bug 915918 https://bugzilla.suse.com/922033 SUSE Bug 922033 Adobe Flash Player before 13.0.0.277 and 14.x through 17.x before 17.0.0.134 on Windows and OS X and before 11.2.202.451 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-0333, CVE-2015-0335, and CVE-2015-0339. CVE-2015-0332 SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1 SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1 SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1 critical To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151137-1/ https://www.suse.com/security/cve/CVE-2015-0332.html CVE-2015-0332 https://bugzilla.suse.com/922033 SUSE Bug 922033 https://bugzilla.suse.com/922296 SUSE Bug 922296 Adobe Flash Player before 13.0.0.277 and 14.x through 17.x before 17.0.0.134 on Windows and OS X and before 11.2.202.451 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-0332, CVE-2015-0335, and CVE-2015-0339. CVE-2015-0333 SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1 SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1 SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1 critical To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151137-1/ https://www.suse.com/security/cve/CVE-2015-0333.html CVE-2015-0333 https://bugzilla.suse.com/922033 SUSE Bug 922033 Adobe Flash Player before 13.0.0.277 and 14.x through 17.x before 17.0.0.134 on Windows and OS X and before 11.2.202.451 on Linux allows attackers to execute arbitrary code by leveraging an unspecified "type confusion," a different vulnerability than CVE-2015-0336. CVE-2015-0334 SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1 SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1 SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1 critical To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151137-1/ https://www.suse.com/security/cve/CVE-2015-0334.html CVE-2015-0334 https://bugzilla.suse.com/922033 SUSE Bug 922033 Adobe Flash Player before 13.0.0.277 and 14.x through 17.x before 17.0.0.134 on Windows and OS X and before 11.2.202.451 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-0332, CVE-2015-0333, and CVE-2015-0339. CVE-2015-0335 SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1 SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1 SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1 critical To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151137-1/ https://www.suse.com/security/cve/CVE-2015-0335.html CVE-2015-0335 https://bugzilla.suse.com/922033 SUSE Bug 922033 Adobe Flash Player before 13.0.0.277 and 14.x through 17.x before 17.0.0.134 on Windows and OS X and before 11.2.202.451 on Linux allows attackers to execute arbitrary code by leveraging an unspecified "type confusion," a different vulnerability than CVE-2015-0334. CVE-2015-0336 SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1 SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1 SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1 critical To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151137-1/ https://www.suse.com/security/cve/CVE-2015-0336.html CVE-2015-0336 https://bugzilla.suse.com/922033 SUSE Bug 922033 Adobe Flash Player before 13.0.0.277 and 14.x through 17.x before 17.0.0.134 on Windows and OS X and before 11.2.202.451 on Linux allows remote attackers to bypass the Same Origin Policy via unspecified vectors. CVE-2015-0337 SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1 SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1 SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1 critical To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151137-1/ https://www.suse.com/security/cve/CVE-2015-0337.html CVE-2015-0337 https://bugzilla.suse.com/922033 SUSE Bug 922033 Integer overflow in Adobe Flash Player before 13.0.0.277 and 14.x through 17.x before 17.0.0.134 on Windows and OS X and before 11.2.202.451 on Linux allows attackers to execute arbitrary code via unspecified vectors. CVE-2015-0338 SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1 SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1 SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1 critical To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151137-1/ https://www.suse.com/security/cve/CVE-2015-0338.html CVE-2015-0338 https://bugzilla.suse.com/922033 SUSE Bug 922033 Adobe Flash Player before 13.0.0.277 and 14.x through 17.x before 17.0.0.134 on Windows and OS X and before 11.2.202.451 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-0332, CVE-2015-0333, and CVE-2015-0335. CVE-2015-0339 SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1 SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1 SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1 critical To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151137-1/ https://www.suse.com/security/cve/CVE-2015-0339.html CVE-2015-0339 https://bugzilla.suse.com/922033 SUSE Bug 922033 Adobe Flash Player before 13.0.0.277 and 14.x through 17.x before 17.0.0.134 on Windows and OS X and before 11.2.202.451 on Linux allows remote attackers to bypass intended file-upload restrictions via unspecified vectors. CVE-2015-0340 SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1 SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1 SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1 critical To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151137-1/ https://www.suse.com/security/cve/CVE-2015-0340.html CVE-2015-0340 https://bugzilla.suse.com/922033 SUSE Bug 922033 Use-after-free vulnerability in Adobe Flash Player before 13.0.0.277 and 14.x through 17.x before 17.0.0.134 on Windows and OS X and before 11.2.202.451 on Linux allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-0342. CVE-2015-0341 SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1 SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1 SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1 critical To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151137-1/ https://www.suse.com/security/cve/CVE-2015-0341.html CVE-2015-0341 https://bugzilla.suse.com/922033 SUSE Bug 922033 Use-after-free vulnerability in Adobe Flash Player before 13.0.0.277 and 14.x through 17.x before 17.0.0.134 on Windows and OS X and before 11.2.202.451 on Linux allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-0341. CVE-2015-0342 SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1 SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1 SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1 critical To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151137-1/ https://www.suse.com/security/cve/CVE-2015-0342.html CVE-2015-0342 https://bugzilla.suse.com/922033 SUSE Bug 922033 Double free vulnerability in Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-0359. CVE-2015-0346 SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1 SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1 SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151137-1/ https://www.suse.com/security/cve/CVE-2015-0346.html CVE-2015-0346 https://bugzilla.suse.com/927089 SUSE Bug 927089 Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-0350, CVE-2015-0352, CVE-2015-0353, CVE-2015-0354, CVE-2015-0355, CVE-2015-0360, CVE-2015-3038, CVE-2015-3041, CVE-2015-3042, and CVE-2015-3043. CVE-2015-0347 SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1 SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1 SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151137-1/ https://www.suse.com/security/cve/CVE-2015-0347.html CVE-2015-0347 https://bugzilla.suse.com/927089 SUSE Bug 927089 Buffer overflow in Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code via unspecified vectors. CVE-2015-0348 SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1 SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1 SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151137-1/ https://www.suse.com/security/cve/CVE-2015-0348.html CVE-2015-0348 https://bugzilla.suse.com/927089 SUSE Bug 927089 Use-after-free vulnerability in Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-0351, CVE-2015-0358, and CVE-2015-3039. CVE-2015-0349 SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1 SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1 SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151137-1/ https://www.suse.com/security/cve/CVE-2015-0349.html CVE-2015-0349 https://bugzilla.suse.com/927089 SUSE Bug 927089 Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-0347, CVE-2015-0352, CVE-2015-0353, CVE-2015-0354, CVE-2015-0355, CVE-2015-0360, CVE-2015-3038, CVE-2015-3041, CVE-2015-3042, and CVE-2015-3043. CVE-2015-0350 SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1 SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1 SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151137-1/ https://www.suse.com/security/cve/CVE-2015-0350.html CVE-2015-0350 https://bugzilla.suse.com/927089 SUSE Bug 927089 Use-after-free vulnerability in Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-0349, CVE-2015-0358, and CVE-2015-3039. CVE-2015-0351 SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1 SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1 SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151137-1/ https://www.suse.com/security/cve/CVE-2015-0351.html CVE-2015-0351 https://bugzilla.suse.com/927089 SUSE Bug 927089 Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-0347, CVE-2015-0350, CVE-2015-0353, CVE-2015-0354, CVE-2015-0355, CVE-2015-0360, CVE-2015-3038, CVE-2015-3041, CVE-2015-3042, and CVE-2015-3043. CVE-2015-0352 SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1 SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1 SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151137-1/ https://www.suse.com/security/cve/CVE-2015-0352.html CVE-2015-0352 https://bugzilla.suse.com/927089 SUSE Bug 927089 Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-0347, CVE-2015-0350, CVE-2015-0352, CVE-2015-0354, CVE-2015-0355, CVE-2015-0360, CVE-2015-3038, CVE-2015-3041, CVE-2015-3042, and CVE-2015-3043. CVE-2015-0353 SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1 SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1 SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151137-1/ https://www.suse.com/security/cve/CVE-2015-0353.html CVE-2015-0353 https://bugzilla.suse.com/927089 SUSE Bug 927089 Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-0347, CVE-2015-0350, CVE-2015-0352, CVE-2015-0353, CVE-2015-0355, CVE-2015-0360, CVE-2015-3038, CVE-2015-3041, CVE-2015-3042, and CVE-2015-3043. CVE-2015-0354 SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1 SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1 SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151137-1/ https://www.suse.com/security/cve/CVE-2015-0354.html CVE-2015-0354 https://bugzilla.suse.com/927089 SUSE Bug 927089 Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-0347, CVE-2015-0350, CVE-2015-0352, CVE-2015-0353, CVE-2015-0354, CVE-2015-0360, CVE-2015-3038, CVE-2015-3041, CVE-2015-3042, and CVE-2015-3043. CVE-2015-0355 SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1 SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1 SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151137-1/ https://www.suse.com/security/cve/CVE-2015-0355.html CVE-2015-0355 https://bugzilla.suse.com/927089 SUSE Bug 927089 Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code by leveraging an unspecified "type confusion." CVE-2015-0356 SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1 SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1 SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151137-1/ https://www.suse.com/security/cve/CVE-2015-0356.html CVE-2015-0356 https://bugzilla.suse.com/927089 SUSE Bug 927089 Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux does not properly restrict discovery of memory addresses, which allows attackers to bypass the ASLR protection mechanism via unspecified vectors, a different vulnerability than CVE-2015-3040. CVE-2015-0357 SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1 SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1 SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151137-1/ https://www.suse.com/security/cve/CVE-2015-0357.html CVE-2015-0357 https://bugzilla.suse.com/927089 SUSE Bug 927089 Use-after-free vulnerability in Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-0349, CVE-2015-0351, and CVE-2015-3039. CVE-2015-0358 SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1 SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1 SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151137-1/ https://www.suse.com/security/cve/CVE-2015-0358.html CVE-2015-0358 https://bugzilla.suse.com/927089 SUSE Bug 927089 Double free vulnerability in Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-0346. CVE-2015-0359 SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1 SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1 SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151137-1/ https://www.suse.com/security/cve/CVE-2015-0359.html CVE-2015-0359 https://bugzilla.suse.com/927089 SUSE Bug 927089 Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-0347, CVE-2015-0350, CVE-2015-0352, CVE-2015-0353, CVE-2015-0354, CVE-2015-0355, CVE-2015-3038, CVE-2015-3041, CVE-2015-3042, and CVE-2015-3043. CVE-2015-0360 SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1 SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1 SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151137-1/ https://www.suse.com/security/cve/CVE-2015-0360.html CVE-2015-0360 https://bugzilla.suse.com/927089 SUSE Bug 927089 Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-0347, CVE-2015-0350, CVE-2015-0352, CVE-2015-0353, CVE-2015-0354, CVE-2015-0355, CVE-2015-0360, CVE-2015-3041, CVE-2015-3042, and CVE-2015-3043. CVE-2015-3038 SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1 SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1 SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151137-1/ https://www.suse.com/security/cve/CVE-2015-3038.html CVE-2015-3038 https://bugzilla.suse.com/927089 SUSE Bug 927089 Use-after-free vulnerability in Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-0349, CVE-2015-0351, and CVE-2015-0358. CVE-2015-3039 SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1 SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1 SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151137-1/ https://www.suse.com/security/cve/CVE-2015-3039.html CVE-2015-3039 https://bugzilla.suse.com/927089 SUSE Bug 927089 Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux does not properly restrict discovery of memory addresses, which allows attackers to bypass the ASLR protection mechanism via unspecified vectors, a different vulnerability than CVE-2015-0357. CVE-2015-3040 SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1 SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1 SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151137-1/ https://www.suse.com/security/cve/CVE-2015-3040.html CVE-2015-3040 https://bugzilla.suse.com/927089 SUSE Bug 927089 Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-0347, CVE-2015-0350, CVE-2015-0352, CVE-2015-0353, CVE-2015-0354, CVE-2015-0355, CVE-2015-0360, CVE-2015-3038, CVE-2015-3042, and CVE-2015-3043. CVE-2015-3041 SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1 SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1 SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151137-1/ https://www.suse.com/security/cve/CVE-2015-3041.html CVE-2015-3041 https://bugzilla.suse.com/927089 SUSE Bug 927089 Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-0347, CVE-2015-0350, CVE-2015-0352, CVE-2015-0353, CVE-2015-0354, CVE-2015-0355, CVE-2015-0360, CVE-2015-3038, CVE-2015-3041, and CVE-2015-3043. CVE-2015-3042 SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1 SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1 SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151137-1/ https://www.suse.com/security/cve/CVE-2015-3042.html CVE-2015-3042 https://bugzilla.suse.com/927089 SUSE Bug 927089 Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, as exploited in the wild in April 2015, a different vulnerability than CVE-2015-0347, CVE-2015-0350, CVE-2015-0352, CVE-2015-0353, CVE-2015-0354, CVE-2015-0355, CVE-2015-0360, CVE-2015-3038, CVE-2015-3041, and CVE-2015-3042. CVE-2015-3043 SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1 SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1 SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151137-1/ https://www.suse.com/security/cve/CVE-2015-3043.html CVE-2015-3043 https://bugzilla.suse.com/927089 SUSE Bug 927089 Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to bypass intended access restrictions and obtain sensitive information via unspecified vectors. CVE-2015-3044 SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1 SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1 SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1 moderate 4.4 AV:L/AC:M/Au:N/C:P/I:P/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151137-1/ https://www.suse.com/security/cve/CVE-2015-3044.html CVE-2015-3044 https://bugzilla.suse.com/927089 SUSE Bug 927089 https://bugzilla.suse.com/930677 SUSE Bug 930677 Adobe Flash Player before 13.0.0.289 and 14.x through 17.x before 17.0.0.188 on Windows and OS X and before 11.2.202.460 on Linux, Adobe AIR before 17.0.0.172, Adobe AIR SDK before 17.0.0.172, and Adobe AIR SDK & Compiler before 17.0.0.172 allow attackers to execute arbitrary code by leveraging an unspecified "type confusion," a different vulnerability than CVE-2015-3084 and CVE-2015-3086. CVE-2015-3077 SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1 SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1 SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1 critical To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151137-1/ https://www.suse.com/security/cve/CVE-2015-3077.html CVE-2015-3077 https://bugzilla.suse.com/930677 SUSE Bug 930677 Adobe Flash Player before 13.0.0.289 and 14.x through 17.x before 17.0.0.188 on Windows and OS X and before 11.2.202.460 on Linux, Adobe AIR before 17.0.0.172, Adobe AIR SDK before 17.0.0.172, and Adobe AIR SDK & Compiler before 17.0.0.172 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-3089, CVE-2015-3090, and CVE-2015-3093. CVE-2015-3078 SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1 SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1 SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1 critical To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151137-1/ https://www.suse.com/security/cve/CVE-2015-3078.html CVE-2015-3078 https://bugzilla.suse.com/930677 SUSE Bug 930677 Adobe Flash Player before 13.0.0.289 and 14.x through 17.x before 17.0.0.188 on Windows and OS X and before 11.2.202.460 on Linux, Adobe AIR before 17.0.0.172, Adobe AIR SDK before 17.0.0.172, and Adobe AIR SDK & Compiler before 17.0.0.172 allow attackers to bypass intended access restrictions and obtain sensitive information via unspecified vectors. CVE-2015-3079 SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1 SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1 SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151137-1/ https://www.suse.com/security/cve/CVE-2015-3079.html CVE-2015-3079 https://bugzilla.suse.com/930677 SUSE Bug 930677 Use-after-free vulnerability in Adobe Flash Player before 13.0.0.289 and 14.x through 17.x before 17.0.0.188 on Windows and OS X and before 11.2.202.460 on Linux, Adobe AIR before 17.0.0.172, Adobe AIR SDK before 17.0.0.172, and Adobe AIR SDK & Compiler before 17.0.0.172 allows attackers to execute arbitrary code via unspecified vectors. CVE-2015-3080 SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1 SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1 SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1 critical To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151137-1/ https://www.suse.com/security/cve/CVE-2015-3080.html CVE-2015-3080 https://bugzilla.suse.com/930677 SUSE Bug 930677 Race condition in Adobe Flash Player before 13.0.0.289 and 14.x through 17.x before 17.0.0.188 on Windows and OS X and before 11.2.202.460 on Linux, Adobe AIR before 17.0.0.172, Adobe AIR SDK before 17.0.0.172, and Adobe AIR SDK & Compiler before 17.0.0.172 allows attackers to bypass the Internet Explorer Protected Mode protection mechanism via unspecified vectors. CVE-2015-3081 SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1 SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1 SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151137-1/ https://www.suse.com/security/cve/CVE-2015-3081.html CVE-2015-3081 https://bugzilla.suse.com/930677 SUSE Bug 930677 Adobe Flash Player before 13.0.0.289 and 14.x through 17.x before 17.0.0.188 on Windows and OS X and before 11.2.202.460 on Linux, Adobe AIR before 17.0.0.172, Adobe AIR SDK before 17.0.0.172, and Adobe AIR SDK & Compiler before 17.0.0.172 allow remote attackers to bypass intended restrictions on filesystem write operations via unspecified vectors, a different vulnerability than CVE-2015-3083 and CVE-2015-3085. CVE-2015-3082 SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1 SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1 SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1 critical To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151137-1/ https://www.suse.com/security/cve/CVE-2015-3082.html CVE-2015-3082 https://bugzilla.suse.com/930677 SUSE Bug 930677 Adobe Flash Player before 13.0.0.289 and 14.x through 17.x before 17.0.0.188 on Windows and OS X and before 11.2.202.460 on Linux, Adobe AIR before 17.0.0.172, Adobe AIR SDK before 17.0.0.172, and Adobe AIR SDK & Compiler before 17.0.0.172 allow remote attackers to bypass intended restrictions on filesystem write operations via unspecified vectors, a different vulnerability than CVE-2015-3082 and CVE-2015-3085. CVE-2015-3083 SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1 SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1 SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1 critical To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151137-1/ https://www.suse.com/security/cve/CVE-2015-3083.html CVE-2015-3083 https://bugzilla.suse.com/930677 SUSE Bug 930677 Adobe Flash Player before 13.0.0.289 and 14.x through 17.x before 17.0.0.188 on Windows and OS X and before 11.2.202.460 on Linux, Adobe AIR before 17.0.0.172, Adobe AIR SDK before 17.0.0.172, and Adobe AIR SDK & Compiler before 17.0.0.172 allow attackers to execute arbitrary code by leveraging an unspecified "type confusion," a different vulnerability than CVE-2015-3077 and CVE-2015-3086. CVE-2015-3084 SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1 SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1 SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1 critical To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151137-1/ https://www.suse.com/security/cve/CVE-2015-3084.html CVE-2015-3084 https://bugzilla.suse.com/930677 SUSE Bug 930677 Adobe Flash Player before 13.0.0.289 and 14.x through 17.x before 17.0.0.188 on Windows and OS X and before 11.2.202.460 on Linux, Adobe AIR before 17.0.0.172, Adobe AIR SDK before 17.0.0.172, and Adobe AIR SDK & Compiler before 17.0.0.172 allow remote attackers to bypass intended restrictions on filesystem write operations via unspecified vectors, a different vulnerability than CVE-2015-3082 and CVE-2015-3083. CVE-2015-3085 SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1 SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1 SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1 critical To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151137-1/ https://www.suse.com/security/cve/CVE-2015-3085.html CVE-2015-3085 https://bugzilla.suse.com/930677 SUSE Bug 930677 Adobe Flash Player before 13.0.0.289 and 14.x through 17.x before 17.0.0.188 on Windows and OS X and before 11.2.202.460 on Linux, Adobe AIR before 17.0.0.172, Adobe AIR SDK before 17.0.0.172, and Adobe AIR SDK & Compiler before 17.0.0.172 allow attackers to execute arbitrary code by leveraging an unspecified "type confusion," a different vulnerability than CVE-2015-3077 and CVE-2015-3084. CVE-2015-3086 SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1 SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1 SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1 critical To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151137-1/ https://www.suse.com/security/cve/CVE-2015-3086.html CVE-2015-3086 https://bugzilla.suse.com/930677 SUSE Bug 930677 Integer overflow in Adobe Flash Player before 13.0.0.289 and 14.x through 17.x before 17.0.0.188 on Windows and OS X and before 11.2.202.460 on Linux, Adobe AIR before 17.0.0.172, Adobe AIR SDK before 17.0.0.172, and Adobe AIR SDK & Compiler before 17.0.0.172 allows attackers to execute arbitrary code via unspecified vectors. CVE-2015-3087 SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1 SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1 SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1 critical To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151137-1/ https://www.suse.com/security/cve/CVE-2015-3087.html CVE-2015-3087 https://bugzilla.suse.com/930677 SUSE Bug 930677 Heap-based buffer overflow in Adobe Flash Player before 13.0.0.289 and 14.x through 17.x before 17.0.0.188 on Windows and OS X and before 11.2.202.460 on Linux, Adobe AIR before 17.0.0.172, Adobe AIR SDK before 17.0.0.172, and Adobe AIR SDK & Compiler before 17.0.0.172 allows attackers to execute arbitrary code via unspecified vectors. CVE-2015-3088 SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1 SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1 SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1 critical To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151137-1/ https://www.suse.com/security/cve/CVE-2015-3088.html CVE-2015-3088 https://bugzilla.suse.com/930677 SUSE Bug 930677 Adobe Flash Player before 13.0.0.289 and 14.x through 17.x before 17.0.0.188 on Windows and OS X and before 11.2.202.460 on Linux, Adobe AIR before 17.0.0.172, Adobe AIR SDK before 17.0.0.172, and Adobe AIR SDK & Compiler before 17.0.0.172 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-3078, CVE-2015-3090, and CVE-2015-3093. CVE-2015-3089 SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1 SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1 SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1 critical To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151137-1/ https://www.suse.com/security/cve/CVE-2015-3089.html CVE-2015-3089 https://bugzilla.suse.com/930677 SUSE Bug 930677 Adobe Flash Player before 13.0.0.289 and 14.x through 17.x before 17.0.0.188 on Windows and OS X and before 11.2.202.460 on Linux, Adobe AIR before 17.0.0.172, Adobe AIR SDK before 17.0.0.172, and Adobe AIR SDK & Compiler before 17.0.0.172 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-3078, CVE-2015-3089, and CVE-2015-3093. CVE-2015-3090 SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1 SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1 SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1 critical To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151137-1/ https://www.suse.com/security/cve/CVE-2015-3090.html CVE-2015-3090 https://bugzilla.suse.com/930677 SUSE Bug 930677 Adobe Flash Player before 13.0.0.289 and 14.x through 17.x before 17.0.0.188 on Windows and OS X and before 11.2.202.460 on Linux, Adobe AIR before 17.0.0.172, Adobe AIR SDK before 17.0.0.172, and Adobe AIR SDK & Compiler before 17.0.0.172 do not properly restrict discovery of memory addresses, which allows attackers to bypass the ASLR protection mechanism via unspecified vectors, a different vulnerability than CVE-2015-3092. CVE-2015-3091 SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1 SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1 SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1 critical To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151137-1/ https://www.suse.com/security/cve/CVE-2015-3091.html CVE-2015-3091 https://bugzilla.suse.com/930677 SUSE Bug 930677 Adobe Flash Player before 13.0.0.289 and 14.x through 17.x before 17.0.0.188 on Windows and OS X and before 11.2.202.460 on Linux, Adobe AIR before 17.0.0.172, Adobe AIR SDK before 17.0.0.172, and Adobe AIR SDK & Compiler before 17.0.0.172 do not properly restrict discovery of memory addresses, which allows attackers to bypass the ASLR protection mechanism via unspecified vectors, a different vulnerability than CVE-2015-3091. CVE-2015-3092 SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1 SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1 SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1 critical To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151137-1/ https://www.suse.com/security/cve/CVE-2015-3092.html CVE-2015-3092 https://bugzilla.suse.com/930677 SUSE Bug 930677 Adobe Flash Player before 13.0.0.289 and 14.x through 17.x before 17.0.0.188 on Windows and OS X and before 11.2.202.460 on Linux, Adobe AIR before 17.0.0.172, Adobe AIR SDK before 17.0.0.172, and Adobe AIR SDK & Compiler before 17.0.0.172 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-3078, CVE-2015-3089, and CVE-2015-3090. CVE-2015-3093 SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1 SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1 SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1 critical To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151137-1/ https://www.suse.com/security/cve/CVE-2015-3093.html CVE-2015-3093 https://bugzilla.suse.com/930677 SUSE Bug 930677 Adobe Flash Player before 13.0.0.292 and 14.x through 18.x before 18.0.0.160 on Windows and OS X and before 11.2.202.466 on Linux, Adobe AIR before 18.0.0.144 on Windows and before 18.0.0.143 on OS X and Android, Adobe AIR SDK before 18.0.0.144 on Windows and before 18.0.0.143 on OS X, and Adobe AIR SDK & Compiler before 18.0.0.144 on Windows and before 18.0.0.143 on OS X allow remote attackers to bypass a CVE-2014-5333 protection mechanism via unspecified vectors. CVE-2015-3096 SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1 SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1 SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151137-1/ https://www.suse.com/security/cve/CVE-2015-3096.html CVE-2015-3096 https://bugzilla.suse.com/934088 SUSE Bug 934088 Adobe Flash Player before 13.0.0.292 and 14.x through 18.x before 18.0.0.160 on Windows and OS X and before 11.2.202.466 on Linux, Adobe AIR before 18.0.0.144 on Windows and before 18.0.0.143 on OS X and Android, Adobe AIR SDK before 18.0.0.144 on Windows and before 18.0.0.143 on OS X, and Adobe AIR SDK & Compiler before 18.0.0.144 on Windows and before 18.0.0.143 on OS X allow remote attackers to bypass the Same Origin Policy via unspecified vectors, a different vulnerability than CVE-2015-3099 and CVE-2015-3102. CVE-2015-3098 SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1 SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1 SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151137-1/ https://www.suse.com/security/cve/CVE-2015-3098.html CVE-2015-3098 https://bugzilla.suse.com/934088 SUSE Bug 934088 Adobe Flash Player before 13.0.0.292 and 14.x through 18.x before 18.0.0.160 on Windows and OS X and before 11.2.202.466 on Linux, Adobe AIR before 18.0.0.144 on Windows and before 18.0.0.143 on OS X and Android, Adobe AIR SDK before 18.0.0.144 on Windows and before 18.0.0.143 on OS X, and Adobe AIR SDK & Compiler before 18.0.0.144 on Windows and before 18.0.0.143 on OS X allow remote attackers to bypass the Same Origin Policy via unspecified vectors, a different vulnerability than CVE-2015-3098 and CVE-2015-3102. CVE-2015-3099 SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1 SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1 SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151137-1/ https://www.suse.com/security/cve/CVE-2015-3099.html CVE-2015-3099 https://bugzilla.suse.com/934088 SUSE Bug 934088 Stack-based buffer overflow in Adobe Flash Player before 13.0.0.292 and 14.x through 18.x before 18.0.0.160 on Windows and OS X and before 11.2.202.466 on Linux, Adobe AIR before 18.0.0.144 on Windows and before 18.0.0.143 on OS X and Android, Adobe AIR SDK before 18.0.0.144 on Windows and before 18.0.0.143 on OS X, and Adobe AIR SDK & Compiler before 18.0.0.144 on Windows and before 18.0.0.143 on OS X allows attackers to execute arbitrary code via unspecified vectors. CVE-2015-3100 SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1 SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1 SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151137-1/ https://www.suse.com/security/cve/CVE-2015-3100.html CVE-2015-3100 https://bugzilla.suse.com/934088 SUSE Bug 934088 Adobe Flash Player before 13.0.0.292 and 14.x through 18.x before 18.0.0.160 on Windows and OS X and before 11.2.202.466 on Linux, Adobe AIR before 18.0.0.144 on Windows and before 18.0.0.143 on OS X and Android, Adobe AIR SDK before 18.0.0.144 on Windows and before 18.0.0.143 on OS X, and Adobe AIR SDK & Compiler before 18.0.0.144 on Windows and before 18.0.0.143 on OS X allow remote attackers to bypass the Same Origin Policy via unspecified vectors, a different vulnerability than CVE-2015-3098 and CVE-2015-3099. CVE-2015-3102 SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1 SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1 SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151137-1/ https://www.suse.com/security/cve/CVE-2015-3102.html CVE-2015-3102 https://bugzilla.suse.com/934088 SUSE Bug 934088 Use-after-free vulnerability in Adobe Flash Player before 13.0.0.292 and 14.x through 18.x before 18.0.0.160 on Windows and OS X and before 11.2.202.466 on Linux, Adobe AIR before 18.0.0.144 on Windows and before 18.0.0.143 on OS X and Android, Adobe AIR SDK before 18.0.0.144 on Windows and before 18.0.0.143 on OS X, and Adobe AIR SDK & Compiler before 18.0.0.144 on Windows and before 18.0.0.143 on OS X allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-3106 and CVE-2015-3107. CVE-2015-3103 SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1 SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1 SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151137-1/ https://www.suse.com/security/cve/CVE-2015-3103.html CVE-2015-3103 https://bugzilla.suse.com/934088 SUSE Bug 934088 Use-after-free vulnerability in Adobe Flash Player before 13.0.0.292 and 14.x through 18.x before 18.0.0.160 on Windows and OS X and before 11.2.202.466 on Linux, Adobe AIR before 18.0.0.144 on Windows and before 18.0.0.143 on OS X and Android, Adobe AIR SDK before 18.0.0.144 on Windows and before 18.0.0.143 on OS X, and Adobe AIR SDK & Compiler before 18.0.0.144 on Windows and before 18.0.0.143 on OS X allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-3103 and CVE-2015-3107. CVE-2015-3106 SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1 SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1 SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151137-1/ https://www.suse.com/security/cve/CVE-2015-3106.html CVE-2015-3106 https://bugzilla.suse.com/934088 SUSE Bug 934088 Use-after-free vulnerability in Adobe Flash Player before 13.0.0.292 and 14.x through 18.x before 18.0.0.160 on Windows and OS X and before 11.2.202.466 on Linux, Adobe AIR before 18.0.0.144 on Windows and before 18.0.0.143 on OS X and Android, Adobe AIR SDK before 18.0.0.144 on Windows and before 18.0.0.143 on OS X, and Adobe AIR SDK & Compiler before 18.0.0.144 on Windows and before 18.0.0.143 on OS X allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-3103 and CVE-2015-3106. CVE-2015-3107 SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1 SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1 SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151137-1/ https://www.suse.com/security/cve/CVE-2015-3107.html CVE-2015-3107 https://bugzilla.suse.com/934088 SUSE Bug 934088 https://bugzilla.suse.com/941239 SUSE Bug 941239 Adobe Flash Player before 13.0.0.292 and 14.x through 18.x before 18.0.0.160 on Windows and OS X and before 11.2.202.466 on Linux, Adobe AIR before 18.0.0.144 on Windows and before 18.0.0.143 on OS X and Android, Adobe AIR SDK before 18.0.0.144 on Windows and before 18.0.0.143 on OS X, and Adobe AIR SDK & Compiler before 18.0.0.144 on Windows and before 18.0.0.143 on OS X do not properly restrict discovery of memory addresses, which allows attackers to bypass the ASLR protection mechanism via unspecified vectors. CVE-2015-3108 SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1 SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1 SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151137-1/ https://www.suse.com/security/cve/CVE-2015-3108.html CVE-2015-3108 https://bugzilla.suse.com/934088 SUSE Bug 934088 Heap-based buffer overflow in Adobe Flash Player before 13.0.0.296 and 14.x through 18.x before 18.0.0.194 on Windows and OS X and before 11.2.202.468 on Linux allows remote attackers to execute arbitrary code via unspecified vectors, as exploited in the wild in June 2015. CVE-2015-3113 SUSE Linux Enterprise Desktop 11 SP3:flash-player-11.2.202.418-0.3.1 SUSE Linux Enterprise Desktop 11 SP3:flash-player-gnome-11.2.202.418-0.3.1 SUSE Linux Enterprise Desktop 11 SP3:flash-player-kde4-11.2.202.418-0.3.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151137-1/ https://www.suse.com/security/cve/CVE-2015-3113.html CVE-2015-3113 https://bugzilla.suse.com/935701 SUSE Bug 935701