Security update for flash-player SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2015:1211-1 Final 1 1 2015-07-08T19:43:00Z current 2015-07-08T19:43:00Z 2015-07-08T19:43:00Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for flash-player flash-player was updated to fix 35 security issues. These security issues were fixed: - CVE-2015-3135, CVE-2015-4432, CVE-2015-5118: Heap buffer overflow vulnerabilities that could lead to code execution (bsc#937339). - CVE-2015-3117, CVE-2015-3123, CVE-2015-3130, CVE-2015-3133, CVE-2015-3134, CVE-2015-4431: Memory corruption vulnerabilities that could lead to code execution (bsc#937339). - CVE-2015-3126, CVE-2015-4429: Null pointer dereference issues (bsc#937339). - CVE-2015-3114: A security bypass vulnerability that could lead to information disclosure (bsc#937339). - CVE-2015-3119, CVE-2015-3120, CVE-2015-3121, CVE-2015-3122, CVE-2015-4433: Type confusion vulnerabilities that could lead to code execution (bsc#937339). - CVE-2015-3118, CVE-2015-3124, CVE-2015-5117, CVE-2015-3127, CVE-2015-3128, CVE-2015-3129, CVE-2015-3131, CVE-2015-3132, CVE-2015-3136, CVE-2015-3137, CVE-2015-4428, CVE-2015-4430, CVE-2015-5119: Use-after-free vulnerabilities that could lead to code execution (bsc#937339). - CVE-2014-0578, CVE-2015-3115, CVE-2015-3116, CVE-2015-3125, CVE-2015-5116: Vulnerabilities that could be exploited to bypass the same-origin-policy and lead to information disclosure (bsc#937339). The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). SUSE-SLE-DESKTOP-12-2015-306,SUSE-SLE-WE-12-2015-306 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2015/suse-su-20151211-1/ Link for SUSE-SU-2015:1211-1 https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00017.html E-Mail link for SUSE-SU-2015:1211-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/937339 SUSE Bug 937339 https://www.suse.com/security/cve/CVE-2014-0578/ SUSE CVE CVE-2014-0578 page https://www.suse.com/security/cve/CVE-2015-3114/ SUSE CVE CVE-2015-3114 page https://www.suse.com/security/cve/CVE-2015-3115/ SUSE CVE CVE-2015-3115 page https://www.suse.com/security/cve/CVE-2015-3116/ SUSE CVE CVE-2015-3116 page https://www.suse.com/security/cve/CVE-2015-3117/ SUSE CVE CVE-2015-3117 page https://www.suse.com/security/cve/CVE-2015-3118/ SUSE CVE CVE-2015-3118 page https://www.suse.com/security/cve/CVE-2015-3119/ SUSE CVE CVE-2015-3119 page https://www.suse.com/security/cve/CVE-2015-3120/ SUSE CVE CVE-2015-3120 page https://www.suse.com/security/cve/CVE-2015-3121/ SUSE CVE CVE-2015-3121 page https://www.suse.com/security/cve/CVE-2015-3122/ SUSE CVE CVE-2015-3122 page https://www.suse.com/security/cve/CVE-2015-3123/ SUSE CVE CVE-2015-3123 page https://www.suse.com/security/cve/CVE-2015-3124/ SUSE CVE CVE-2015-3124 page https://www.suse.com/security/cve/CVE-2015-3125/ SUSE CVE CVE-2015-3125 page https://www.suse.com/security/cve/CVE-2015-3126/ SUSE CVE CVE-2015-3126 page https://www.suse.com/security/cve/CVE-2015-3127/ SUSE CVE CVE-2015-3127 page https://www.suse.com/security/cve/CVE-2015-3128/ SUSE CVE CVE-2015-3128 page https://www.suse.com/security/cve/CVE-2015-3129/ SUSE CVE CVE-2015-3129 page https://www.suse.com/security/cve/CVE-2015-3130/ SUSE CVE CVE-2015-3130 page https://www.suse.com/security/cve/CVE-2015-3131/ SUSE CVE CVE-2015-3131 page https://www.suse.com/security/cve/CVE-2015-3132/ SUSE CVE CVE-2015-3132 page https://www.suse.com/security/cve/CVE-2015-3133/ SUSE CVE CVE-2015-3133 page https://www.suse.com/security/cve/CVE-2015-3134/ SUSE CVE CVE-2015-3134 page https://www.suse.com/security/cve/CVE-2015-3135/ SUSE CVE CVE-2015-3135 page https://www.suse.com/security/cve/CVE-2015-3136/ SUSE CVE CVE-2015-3136 page https://www.suse.com/security/cve/CVE-2015-3137/ SUSE CVE CVE-2015-3137 page https://www.suse.com/security/cve/CVE-2015-4428/ SUSE CVE CVE-2015-4428 page https://www.suse.com/security/cve/CVE-2015-4429/ SUSE CVE CVE-2015-4429 page https://www.suse.com/security/cve/CVE-2015-4430/ SUSE CVE CVE-2015-4430 page https://www.suse.com/security/cve/CVE-2015-4431/ SUSE CVE CVE-2015-4431 page https://www.suse.com/security/cve/CVE-2015-4432/ SUSE CVE CVE-2015-4432 page https://www.suse.com/security/cve/CVE-2015-4433/ SUSE CVE CVE-2015-4433 page https://www.suse.com/security/cve/CVE-2015-5116/ SUSE CVE CVE-2015-5116 page https://www.suse.com/security/cve/CVE-2015-5117/ SUSE CVE CVE-2015-5117 page https://www.suse.com/security/cve/CVE-2015-5118/ SUSE CVE CVE-2015-5118 page https://www.suse.com/security/cve/CVE-2015-5119/ SUSE CVE CVE-2015-5119 page SUSE Linux Enterprise Desktop 12 SUSE Linux Enterprise Workstation Extension 12 flash-player-11.2.202.481-93.1 flash-player-gnome-11.2.202.481-93.1 flash-player-11.2.202.481-93.1 as a component of SUSE Linux Enterprise Desktop 12 flash-player-gnome-11.2.202.481-93.1 as a component of SUSE Linux Enterprise Desktop 12 flash-player-11.2.202.481-93.1 as a component of SUSE Linux Enterprise Workstation Extension 12 flash-player-gnome-11.2.202.481-93.1 as a component of SUSE Linux Enterprise Workstation Extension 12 Adobe Flash Player before 13.0.0.302 and 14.x through 18.x before 18.0.0.203 on Windows and OS X and before 11.2.202.481 on Linux, Adobe AIR before 18.0.0.180, Adobe AIR SDK before 18.0.0.180, and Adobe AIR SDK & Compiler before 18.0.0.180 allow remote attackers to bypass the Same Origin Policy via unspecified vectors, a different vulnerability than CVE-2015-3115, CVE-2015-3116, CVE-2015-3125, and CVE-2015-5116. CVE-2014-0578 SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.481-93.1 SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.481-93.1 SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.481-93.1 SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.481-93.1 critical To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151211-1/ https://www.suse.com/security/cve/CVE-2014-0578.html CVE-2014-0578 https://bugzilla.suse.com/937339 SUSE Bug 937339 Adobe Flash Player before 13.0.0.302 and 14.x through 18.x before 18.0.0.203 on Windows and OS X and before 11.2.202.481 on Linux, Adobe AIR before 18.0.0.180, Adobe AIR SDK before 18.0.0.180, and Adobe AIR SDK & Compiler before 18.0.0.180 allow attackers to bypass intended access restrictions and obtain sensitive information via unspecified vectors. CVE-2015-3114 SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.481-93.1 SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.481-93.1 SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.481-93.1 SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.481-93.1 critical To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151211-1/ https://www.suse.com/security/cve/CVE-2015-3114.html CVE-2015-3114 https://bugzilla.suse.com/937339 SUSE Bug 937339 Adobe Flash Player before 13.0.0.302 and 14.x through 18.x before 18.0.0.203 on Windows and OS X and before 11.2.202.481 on Linux, Adobe AIR before 18.0.0.180, Adobe AIR SDK before 18.0.0.180, and Adobe AIR SDK & Compiler before 18.0.0.180 allow remote attackers to bypass the Same Origin Policy via unspecified vectors, a different vulnerability than CVE-2014-0578, CVE-2015-3116, CVE-2015-3125, and CVE-2015-5116. CVE-2015-3115 SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.481-93.1 SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.481-93.1 SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.481-93.1 SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.481-93.1 critical To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151211-1/ https://www.suse.com/security/cve/CVE-2015-3115.html CVE-2015-3115 https://bugzilla.suse.com/937339 SUSE Bug 937339 Adobe Flash Player before 13.0.0.302 and 14.x through 18.x before 18.0.0.203 on Windows and OS X and before 11.2.202.481 on Linux, Adobe AIR before 18.0.0.180, Adobe AIR SDK before 18.0.0.180, and Adobe AIR SDK & Compiler before 18.0.0.180 allow remote attackers to bypass the Same Origin Policy via unspecified vectors, a different vulnerability than CVE-2014-0578, CVE-2015-3115, CVE-2015-3125, and CVE-2015-5116. CVE-2015-3116 SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.481-93.1 SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.481-93.1 SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.481-93.1 SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.481-93.1 critical To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151211-1/ https://www.suse.com/security/cve/CVE-2015-3116.html CVE-2015-3116 https://bugzilla.suse.com/937339 SUSE Bug 937339 Adobe Flash Player before 13.0.0.302 and 14.x through 18.x before 18.0.0.203 on Windows and OS X and before 11.2.202.481 on Linux, Adobe AIR before 18.0.0.180, Adobe AIR SDK before 18.0.0.180, and Adobe AIR SDK & Compiler before 18.0.0.180 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-3123, CVE-2015-3130, CVE-2015-3133, CVE-2015-3134, and CVE-2015-4431. CVE-2015-3117 SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.481-93.1 SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.481-93.1 SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.481-93.1 SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.481-93.1 critical To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151211-1/ https://www.suse.com/security/cve/CVE-2015-3117.html CVE-2015-3117 https://bugzilla.suse.com/937339 SUSE Bug 937339 Use-after-free vulnerability in Adobe Flash Player before 13.0.0.302 and 14.x through 18.x before 18.0.0.203 on Windows and OS X and before 11.2.202.481 on Linux, Adobe AIR before 18.0.0.180, Adobe AIR SDK before 18.0.0.180, and Adobe AIR SDK & Compiler before 18.0.0.180 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-3124, CVE-2015-3127, CVE-2015-3128, CVE-2015-3129, CVE-2015-3131, CVE-2015-3132, CVE-2015-3136, CVE-2015-3137, CVE-2015-4428, CVE-2015-4430, and CVE-2015-5117. CVE-2015-3118 SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.481-93.1 SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.481-93.1 SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.481-93.1 SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.481-93.1 critical To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151211-1/ https://www.suse.com/security/cve/CVE-2015-3118.html CVE-2015-3118 https://bugzilla.suse.com/937339 SUSE Bug 937339 Adobe Flash Player before 13.0.0.302 and 14.x through 18.x before 18.0.0.203 on Windows and OS X and before 11.2.202.481 on Linux, Adobe AIR before 18.0.0.180, Adobe AIR SDK before 18.0.0.180, and Adobe AIR SDK & Compiler before 18.0.0.180 allow attackers to execute arbitrary code by leveraging an unspecified "type confusion," a different vulnerability than CVE-2015-3120, CVE-2015-3121, CVE-2015-3122, and CVE-2015-4433. CVE-2015-3119 SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.481-93.1 SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.481-93.1 SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.481-93.1 SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.481-93.1 critical To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151211-1/ https://www.suse.com/security/cve/CVE-2015-3119.html CVE-2015-3119 https://bugzilla.suse.com/937339 SUSE Bug 937339 Adobe Flash Player before 13.0.0.302 and 14.x through 18.x before 18.0.0.203 on Windows and OS X and before 11.2.202.481 on Linux, Adobe AIR before 18.0.0.180, Adobe AIR SDK before 18.0.0.180, and Adobe AIR SDK & Compiler before 18.0.0.180 allow attackers to execute arbitrary code by leveraging an unspecified "type confusion," a different vulnerability than CVE-2015-3119, CVE-2015-3121, CVE-2015-3122, and CVE-2015-4433. CVE-2015-3120 SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.481-93.1 SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.481-93.1 SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.481-93.1 SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.481-93.1 critical To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151211-1/ https://www.suse.com/security/cve/CVE-2015-3120.html CVE-2015-3120 https://bugzilla.suse.com/937339 SUSE Bug 937339 Adobe Flash Player before 13.0.0.302 and 14.x through 18.x before 18.0.0.203 on Windows and OS X and before 11.2.202.481 on Linux, Adobe AIR before 18.0.0.180, Adobe AIR SDK before 18.0.0.180, and Adobe AIR SDK & Compiler before 18.0.0.180 allow attackers to execute arbitrary code by leveraging an unspecified "type confusion," a different vulnerability than CVE-2015-3119, CVE-2015-3120, CVE-2015-3122, and CVE-2015-4433. CVE-2015-3121 SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.481-93.1 SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.481-93.1 SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.481-93.1 SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.481-93.1 critical To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151211-1/ https://www.suse.com/security/cve/CVE-2015-3121.html CVE-2015-3121 https://bugzilla.suse.com/937339 SUSE Bug 937339 Adobe Flash Player before 13.0.0.302 and 14.x through 18.x before 18.0.0.203 on Windows and OS X and before 11.2.202.481 on Linux, Adobe AIR before 18.0.0.180, Adobe AIR SDK before 18.0.0.180, and Adobe AIR SDK & Compiler before 18.0.0.180 allow attackers to execute arbitrary code by leveraging an unspecified "type confusion," a different vulnerability than CVE-2015-3119, CVE-2015-3120, CVE-2015-3121, and CVE-2015-4433. CVE-2015-3122 SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.481-93.1 SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.481-93.1 SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.481-93.1 SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.481-93.1 critical To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151211-1/ https://www.suse.com/security/cve/CVE-2015-3122.html CVE-2015-3122 https://bugzilla.suse.com/937339 SUSE Bug 937339 Adobe Flash Player before 13.0.0.302 and 14.x through 18.x before 18.0.0.203 on Windows and OS X and before 11.2.202.481 on Linux, Adobe AIR before 18.0.0.180, Adobe AIR SDK before 18.0.0.180, and Adobe AIR SDK & Compiler before 18.0.0.180 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-3117, CVE-2015-3130, CVE-2015-3133, CVE-2015-3134, and CVE-2015-4431. CVE-2015-3123 SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.481-93.1 SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.481-93.1 SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.481-93.1 SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.481-93.1 critical To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151211-1/ https://www.suse.com/security/cve/CVE-2015-3123.html CVE-2015-3123 https://bugzilla.suse.com/937339 SUSE Bug 937339 Use-after-free vulnerability in Adobe Flash Player before 13.0.0.302 and 14.x through 18.x before 18.0.0.203 on Windows and OS X and before 11.2.202.481 on Linux, Adobe AIR before 18.0.0.180, Adobe AIR SDK before 18.0.0.180, and Adobe AIR SDK & Compiler before 18.0.0.180 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-3118, CVE-2015-3127, CVE-2015-3128, CVE-2015-3129, CVE-2015-3131, CVE-2015-3132, CVE-2015-3136, CVE-2015-3137, CVE-2015-4428, CVE-2015-4430, and CVE-2015-5117. CVE-2015-3124 SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.481-93.1 SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.481-93.1 SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.481-93.1 SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.481-93.1 critical To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151211-1/ https://www.suse.com/security/cve/CVE-2015-3124.html CVE-2015-3124 https://bugzilla.suse.com/937339 SUSE Bug 937339 Adobe Flash Player before 13.0.0.302 and 14.x through 18.x before 18.0.0.203 on Windows and OS X and before 11.2.202.481 on Linux, Adobe AIR before 18.0.0.180, Adobe AIR SDK before 18.0.0.180, and Adobe AIR SDK & Compiler before 18.0.0.180 allow remote attackers to bypass the Same Origin Policy via unspecified vectors, a different vulnerability than CVE-2014-0578, CVE-2015-3115, CVE-2015-3116, and CVE-2015-5116. CVE-2015-3125 SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.481-93.1 SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.481-93.1 SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.481-93.1 SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.481-93.1 critical To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151211-1/ https://www.suse.com/security/cve/CVE-2015-3125.html CVE-2015-3125 https://bugzilla.suse.com/937339 SUSE Bug 937339 Adobe Flash Player before 13.0.0.302 and 14.x through 18.x before 18.0.0.203 on Windows and OS X and before 11.2.202.481 on Linux, Adobe AIR before 18.0.0.180, Adobe AIR SDK before 18.0.0.180, and Adobe AIR SDK & Compiler before 18.0.0.180 allow attackers to cause a denial of service (NULL pointer dereference) or possibly have unspecified other impact via unknown vectors, a different vulnerability than CVE-2015-4429. CVE-2015-3126 SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.481-93.1 SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.481-93.1 SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.481-93.1 SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.481-93.1 critical To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151211-1/ https://www.suse.com/security/cve/CVE-2015-3126.html CVE-2015-3126 https://bugzilla.suse.com/937339 SUSE Bug 937339 Use-after-free vulnerability in Adobe Flash Player before 13.0.0.302 and 14.x through 18.x before 18.0.0.203 on Windows and OS X and before 11.2.202.481 on Linux, Adobe AIR before 18.0.0.180, Adobe AIR SDK before 18.0.0.180, and Adobe AIR SDK & Compiler before 18.0.0.180 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-3118, CVE-2015-3124, CVE-2015-3128, CVE-2015-3129, CVE-2015-3131, CVE-2015-3132, CVE-2015-3136, CVE-2015-3137, CVE-2015-4428, CVE-2015-4430, and CVE-2015-5117. CVE-2015-3127 SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.481-93.1 SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.481-93.1 SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.481-93.1 SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.481-93.1 critical To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151211-1/ https://www.suse.com/security/cve/CVE-2015-3127.html CVE-2015-3127 https://bugzilla.suse.com/937339 SUSE Bug 937339 Use-after-free vulnerability in Adobe Flash Player before 13.0.0.302 and 14.x through 18.x before 18.0.0.203 on Windows and OS X and before 11.2.202.481 on Linux, Adobe AIR before 18.0.0.180, Adobe AIR SDK before 18.0.0.180, and Adobe AIR SDK & Compiler before 18.0.0.180 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-3118, CVE-2015-3124, CVE-2015-3127, CVE-2015-3129, CVE-2015-3131, CVE-2015-3132, CVE-2015-3136, CVE-2015-3137, CVE-2015-4428, CVE-2015-4430, and CVE-2015-5117. CVE-2015-3128 SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.481-93.1 SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.481-93.1 SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.481-93.1 SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.481-93.1 critical To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151211-1/ https://www.suse.com/security/cve/CVE-2015-3128.html CVE-2015-3128 https://bugzilla.suse.com/937339 SUSE Bug 937339 Use-after-free vulnerability in Adobe Flash Player before 13.0.0.302 and 14.x through 18.x before 18.0.0.203 on Windows and OS X and before 11.2.202.481 on Linux, Adobe AIR before 18.0.0.180, Adobe AIR SDK before 18.0.0.180, and Adobe AIR SDK & Compiler before 18.0.0.180 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-3118, CVE-2015-3124, CVE-2015-3127, CVE-2015-3128, CVE-2015-3131, CVE-2015-3132, CVE-2015-3136, CVE-2015-3137, CVE-2015-4428, CVE-2015-4430, and CVE-2015-5117. CVE-2015-3129 SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.481-93.1 SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.481-93.1 SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.481-93.1 SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.481-93.1 critical To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151211-1/ https://www.suse.com/security/cve/CVE-2015-3129.html CVE-2015-3129 https://bugzilla.suse.com/937339 SUSE Bug 937339 Adobe Flash Player before 13.0.0.302 and 14.x through 18.x before 18.0.0.203 on Windows and OS X and before 11.2.202.481 on Linux, Adobe AIR before 18.0.0.180, Adobe AIR SDK before 18.0.0.180, and Adobe AIR SDK & Compiler before 18.0.0.180 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-3117, CVE-2015-3123, CVE-2015-3133, CVE-2015-3134, and CVE-2015-4431. CVE-2015-3130 SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.481-93.1 SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.481-93.1 SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.481-93.1 SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.481-93.1 critical To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151211-1/ https://www.suse.com/security/cve/CVE-2015-3130.html CVE-2015-3130 https://bugzilla.suse.com/937339 SUSE Bug 937339 Use-after-free vulnerability in Adobe Flash Player before 13.0.0.302 and 14.x through 18.x before 18.0.0.203 on Windows and OS X and before 11.2.202.481 on Linux, Adobe AIR before 18.0.0.180, Adobe AIR SDK before 18.0.0.180, and Adobe AIR SDK & Compiler before 18.0.0.180 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-3118, CVE-2015-3124, CVE-2015-3127, CVE-2015-3128, CVE-2015-3129, CVE-2015-3132, CVE-2015-3136, CVE-2015-3137, CVE-2015-4428, CVE-2015-4430, and CVE-2015-5117. CVE-2015-3131 SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.481-93.1 SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.481-93.1 SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.481-93.1 SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.481-93.1 critical To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151211-1/ https://www.suse.com/security/cve/CVE-2015-3131.html CVE-2015-3131 https://bugzilla.suse.com/937339 SUSE Bug 937339 Use-after-free vulnerability in Adobe Flash Player before 13.0.0.302 and 14.x through 18.x before 18.0.0.203 on Windows and OS X and before 11.2.202.481 on Linux, Adobe AIR before 18.0.0.180, Adobe AIR SDK before 18.0.0.180, and Adobe AIR SDK & Compiler before 18.0.0.180 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-3118, CVE-2015-3124, CVE-2015-3127, CVE-2015-3128, CVE-2015-3129, CVE-2015-3131, CVE-2015-3136, CVE-2015-3137, CVE-2015-4428, CVE-2015-4430, and CVE-2015-5117. CVE-2015-3132 SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.481-93.1 SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.481-93.1 SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.481-93.1 SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.481-93.1 critical To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151211-1/ https://www.suse.com/security/cve/CVE-2015-3132.html CVE-2015-3132 https://bugzilla.suse.com/937339 SUSE Bug 937339 Adobe Flash Player before 13.0.0.302 and 14.x through 18.x before 18.0.0.203 on Windows and OS X and before 11.2.202.481 on Linux, Adobe AIR before 18.0.0.180, Adobe AIR SDK before 18.0.0.180, and Adobe AIR SDK & Compiler before 18.0.0.180 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-3117, CVE-2015-3123, CVE-2015-3130, CVE-2015-3134, and CVE-2015-4431. CVE-2015-3133 SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.481-93.1 SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.481-93.1 SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.481-93.1 SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.481-93.1 critical To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151211-1/ https://www.suse.com/security/cve/CVE-2015-3133.html CVE-2015-3133 https://bugzilla.suse.com/937339 SUSE Bug 937339 Adobe Flash Player before 13.0.0.302 and 14.x through 18.x before 18.0.0.203 on Windows and OS X and before 11.2.202.481 on Linux, Adobe AIR before 18.0.0.180, Adobe AIR SDK before 18.0.0.180, and Adobe AIR SDK & Compiler before 18.0.0.180 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-3117, CVE-2015-3123, CVE-2015-3130, CVE-2015-3133, and CVE-2015-4431. CVE-2015-3134 SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.481-93.1 SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.481-93.1 SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.481-93.1 SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.481-93.1 critical To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151211-1/ https://www.suse.com/security/cve/CVE-2015-3134.html CVE-2015-3134 https://bugzilla.suse.com/937339 SUSE Bug 937339 Heap-based buffer overflow in Adobe Flash Player before 13.0.0.302 and 14.x through 18.x before 18.0.0.203 on Windows and OS X and before 11.2.202.481 on Linux, Adobe AIR before 18.0.0.180, Adobe AIR SDK before 18.0.0.180, and Adobe AIR SDK & Compiler before 18.0.0.180 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-4432 and CVE-2015-5118. CVE-2015-3135 SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.481-93.1 SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.481-93.1 SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.481-93.1 SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.481-93.1 critical To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151211-1/ https://www.suse.com/security/cve/CVE-2015-3135.html CVE-2015-3135 https://bugzilla.suse.com/937339 SUSE Bug 937339 Use-after-free vulnerability in Adobe Flash Player before 13.0.0.302 and 14.x through 18.x before 18.0.0.203 on Windows and OS X and before 11.2.202.481 on Linux, Adobe AIR before 18.0.0.180, Adobe AIR SDK before 18.0.0.180, and Adobe AIR SDK & Compiler before 18.0.0.180 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-3118, CVE-2015-3124, CVE-2015-3127, CVE-2015-3128, CVE-2015-3129, CVE-2015-3131, CVE-2015-3132, CVE-2015-3137, CVE-2015-4428, CVE-2015-4430, and CVE-2015-5117. CVE-2015-3136 SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.481-93.1 SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.481-93.1 SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.481-93.1 SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.481-93.1 critical To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151211-1/ https://www.suse.com/security/cve/CVE-2015-3136.html CVE-2015-3136 https://bugzilla.suse.com/937339 SUSE Bug 937339 Use-after-free vulnerability in Adobe Flash Player before 13.0.0.302 and 14.x through 18.x before 18.0.0.203 on Windows and OS X and before 11.2.202.481 on Linux, Adobe AIR before 18.0.0.180, Adobe AIR SDK before 18.0.0.180, and Adobe AIR SDK & Compiler before 18.0.0.180 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-3118, CVE-2015-3124, CVE-2015-3127, CVE-2015-3128, CVE-2015-3129, CVE-2015-3131, CVE-2015-3132, CVE-2015-3136, CVE-2015-4428, CVE-2015-4430, and CVE-2015-5117. CVE-2015-3137 SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.481-93.1 SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.481-93.1 SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.481-93.1 SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.481-93.1 critical To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151211-1/ https://www.suse.com/security/cve/CVE-2015-3137.html CVE-2015-3137 https://bugzilla.suse.com/937339 SUSE Bug 937339 Use-after-free vulnerability in Adobe Flash Player before 13.0.0.302 and 14.x through 18.x before 18.0.0.203 on Windows and OS X and before 11.2.202.481 on Linux, Adobe AIR before 18.0.0.180, Adobe AIR SDK before 18.0.0.180, and Adobe AIR SDK & Compiler before 18.0.0.180 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-3118, CVE-2015-3124, CVE-2015-3127, CVE-2015-3128, CVE-2015-3129, CVE-2015-3131, CVE-2015-3132, CVE-2015-3136, CVE-2015-3137, CVE-2015-4430, and CVE-2015-5117. CVE-2015-4428 SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.481-93.1 SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.481-93.1 SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.481-93.1 SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.481-93.1 critical To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151211-1/ https://www.suse.com/security/cve/CVE-2015-4428.html CVE-2015-4428 https://bugzilla.suse.com/937339 SUSE Bug 937339 Adobe Flash Player before 13.0.0.302 and 14.x through 18.x before 18.0.0.203 on Windows and OS X and before 11.2.202.481 on Linux, Adobe AIR before 18.0.0.180, Adobe AIR SDK before 18.0.0.180, and Adobe AIR SDK & Compiler before 18.0.0.180 allow attackers to cause a denial of service (NULL pointer dereference) or possibly have unspecified other impact via unknown vectors, a different vulnerability than CVE-2015-3126. CVE-2015-4429 SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.481-93.1 SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.481-93.1 SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.481-93.1 SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.481-93.1 critical To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151211-1/ https://www.suse.com/security/cve/CVE-2015-4429.html CVE-2015-4429 https://bugzilla.suse.com/937339 SUSE Bug 937339 Use-after-free vulnerability in Adobe Flash Player before 13.0.0.302 and 14.x through 18.x before 18.0.0.203 on Windows and OS X and before 11.2.202.481 on Linux, Adobe AIR before 18.0.0.180, Adobe AIR SDK before 18.0.0.180, and Adobe AIR SDK & Compiler before 18.0.0.180 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-3118, CVE-2015-3124, CVE-2015-3127, CVE-2015-3128, CVE-2015-3129, CVE-2015-3131, CVE-2015-3132, CVE-2015-3136, CVE-2015-3137, CVE-2015-4428, and CVE-2015-5117. CVE-2015-4430 SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.481-93.1 SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.481-93.1 SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.481-93.1 SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.481-93.1 critical To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151211-1/ https://www.suse.com/security/cve/CVE-2015-4430.html CVE-2015-4430 https://bugzilla.suse.com/937339 SUSE Bug 937339 Adobe Flash Player before 13.0.0.302 and 14.x through 18.x before 18.0.0.203 on Windows and OS X and before 11.2.202.481 on Linux, Adobe AIR before 18.0.0.180, Adobe AIR SDK before 18.0.0.180, and Adobe AIR SDK & Compiler before 18.0.0.180 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-3117, CVE-2015-3123, CVE-2015-3130, CVE-2015-3133, and CVE-2015-3134. CVE-2015-4431 SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.481-93.1 SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.481-93.1 SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.481-93.1 SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.481-93.1 critical To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151211-1/ https://www.suse.com/security/cve/CVE-2015-4431.html CVE-2015-4431 https://bugzilla.suse.com/937339 SUSE Bug 937339 Heap-based buffer overflow in Adobe Flash Player before 13.0.0.302 and 14.x through 18.x before 18.0.0.203 on Windows and OS X and before 11.2.202.481 on Linux, Adobe AIR before 18.0.0.180, Adobe AIR SDK before 18.0.0.180, and Adobe AIR SDK & Compiler before 18.0.0.180 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-3135 and CVE-2015-5118. CVE-2015-4432 SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.481-93.1 SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.481-93.1 SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.481-93.1 SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.481-93.1 critical To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151211-1/ https://www.suse.com/security/cve/CVE-2015-4432.html CVE-2015-4432 https://bugzilla.suse.com/937339 SUSE Bug 937339 Adobe Flash Player before 13.0.0.302 and 14.x through 18.x before 18.0.0.203 on Windows and OS X and before 11.2.202.481 on Linux, Adobe AIR before 18.0.0.180, Adobe AIR SDK before 18.0.0.180, and Adobe AIR SDK & Compiler before 18.0.0.180 allow attackers to execute arbitrary code by leveraging an unspecified "type confusion," a different vulnerability than CVE-2015-3119, CVE-2015-3120, CVE-2015-3121, and CVE-2015-3122. CVE-2015-4433 SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.481-93.1 SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.481-93.1 SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.481-93.1 SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.481-93.1 critical To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151211-1/ https://www.suse.com/security/cve/CVE-2015-4433.html CVE-2015-4433 https://bugzilla.suse.com/937339 SUSE Bug 937339 Adobe Flash Player before 13.0.0.302 and 14.x through 18.x before 18.0.0.203 on Windows and OS X and before 11.2.202.481 on Linux, Adobe AIR before 18.0.0.180, Adobe AIR SDK before 18.0.0.180, and Adobe AIR SDK & Compiler before 18.0.0.180 allow remote attackers to bypass the Same Origin Policy via unspecified vectors, a different vulnerability than CVE-2014-0578, CVE-2015-3115, CVE-2015-3116, and CVE-2015-3125. CVE-2015-5116 SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.481-93.1 SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.481-93.1 SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.481-93.1 SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.481-93.1 critical To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151211-1/ https://www.suse.com/security/cve/CVE-2015-5116.html CVE-2015-5116 https://bugzilla.suse.com/937339 SUSE Bug 937339 Use-after-free vulnerability in Adobe Flash Player before 13.0.0.302 and 14.x through 18.x before 18.0.0.203 on Windows and OS X and before 11.2.202.481 on Linux, Adobe AIR before 18.0.0.180, Adobe AIR SDK before 18.0.0.180, and Adobe AIR SDK & Compiler before 18.0.0.180 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-3118, CVE-2015-3124, CVE-2015-3127, CVE-2015-3128, CVE-2015-3129, CVE-2015-3131, CVE-2015-3132, CVE-2015-3136, CVE-2015-3137, CVE-2015-4428, and CVE-2015-4430. CVE-2015-5117 SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.481-93.1 SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.481-93.1 SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.481-93.1 SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.481-93.1 critical To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151211-1/ https://www.suse.com/security/cve/CVE-2015-5117.html CVE-2015-5117 https://bugzilla.suse.com/937339 SUSE Bug 937339 Heap-based buffer overflow in Adobe Flash Player before 13.0.0.302 and 14.x through 18.x before 18.0.0.203 on Windows and OS X and before 11.2.202.481 on Linux, Adobe AIR before 18.0.0.180, Adobe AIR SDK before 18.0.0.180, and Adobe AIR SDK & Compiler before 18.0.0.180 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-3135 and CVE-2015-4432. CVE-2015-5118 SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.481-93.1 SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.481-93.1 SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.481-93.1 SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.481-93.1 critical To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151211-1/ https://www.suse.com/security/cve/CVE-2015-5118.html CVE-2015-5118 https://bugzilla.suse.com/937339 SUSE Bug 937339 Use-after-free vulnerability in the ByteArray class in the ActionScript 3 (AS3) implementation in Adobe Flash Player 13.x through 13.0.0.296 and 14.x through 18.0.0.194 on Windows and OS X and 11.x through 11.2.202.468 on Linux allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted Flash content that overrides a valueOf function, as exploited in the wild in July 2015. CVE-2015-5119 SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.481-93.1 SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.481-93.1 SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.481-93.1 SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.481-93.1 critical To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151211-1/ https://www.suse.com/security/cve/CVE-2015-5119.html CVE-2015-5119 https://bugzilla.suse.com/937339 SUSE Bug 937339 https://bugzilla.suse.com/937752 SUSE Bug 937752