diff options
| author | Jung-uk Kim <jkim@FreeBSD.org> | 2017-09-12 19:48:41 +0000 |
|---|---|---|
| committer | Jung-uk Kim <jkim@FreeBSD.org> | 2017-09-12 19:48:41 +0000 |
| commit | 935124ba0d2ae4817fc709a149efaabb8582e3d7 (patch) | |
| tree | 769df6cd889442fa735f4c5b6a3d691e533eb9b1 /security | |
| parent | 099335f70d5cd824af91dfe5dc4bbf6321973215 (diff) | |
Document latest Flash Player vulnerabilities.
Notes
Notes:
svn path=/head/; revision=449708
Diffstat (limited to 'security')
| -rw-r--r-- | security/vuxml/vuln.xml | 31 |
1 files changed, 31 insertions, 0 deletions
diff --git a/security/vuxml/vuln.xml b/security/vuxml/vuln.xml index 0fa10e791c65..1043f9829e3b 100644 --- a/security/vuxml/vuln.xml +++ b/security/vuxml/vuln.xml @@ -58,6 +58,37 @@ Notes: * Do not forget port variants (linux-f10-libxml2, libxml2, etc.) --> <vuxml xmlns="http://www.vuxml.org/apps/vuxml-1"> + <vuln vid="531aae08-97f0-11e7-aadd-6451062f0f7a"> + <topic>Flash Player -- multiple vulnerabilities</topic> + <affects> + <package> + <name>linux-flashplayer</name> + <range><lt>27.0.0.130</lt></range> + </package> + </affects> + <description> + <body xmlns="http://www.w3.org/1999/xhtml"> + <p>Adobe reports:</p> + <blockquote cite="https://helpx.adobe.com/security/products/flash-player/apsb17-28.html"> + <ul> + <li>These updates resolve memory corruption vulnerabilities that + could lead to remote code execution (CVE-2017-11281, + CVE-2017-11282).</li> + </ul> + </blockquote> + </body> + </description> + <references> + <cvename>CVE-2017-11281</cvename> + <cvename>CVE-2017-11282</cvename> + <url>https://helpx.adobe.com/security/products/flash-player/apsb17-28.html</url> + </references> + <dates> + <discovery>2017-09-12</discovery> + <entry>2017-09-12</entry> + </dates> + </vuln> + <vuln vid="f9f76a50-9642-11e7-ab09-080027b00c2e"> <topic>cyrus-imapd -- broken "other users" behaviour</topic> <affects> |