Vulnerability Bulletins |
Múltiples vulnerabilidades en Adobe Flash Player |
|
Vulnerability classification |
|
| Property | Value |
| Confidence level | Oficial |
| Impact | Obtener acceso |
| Dificulty | Experto |
| Required attacker level | Acceso remoto sin cuenta a un servicio estandar |
System information |
|
| Property | Value |
| Affected manufacturer | Comercial Software |
| Affected software |
Adobe Flash Player < 10.0.33.18 Adobe AIR < 1.5.2 |
Description |
|
|
Se han descubierto múltiples vulnerabilidades de desbordamientos de búfer o de pila en Adobe Flash Player y Adobe AIR. Un atacante remoto podría ejecutar código arbitrario o aumetar privilegios mediante ficheros SWF especialemente diseñados. |
|
Solution |
|
|
Actualización de software Adobe (APSA09-10) Adobe Flash Player 10.0.32.18 http://www.adobe.com/go/getflashplayer Adobe Flash Player 9 http://www.adobe.com/products/flashplayer/fp_distribution3.html Adobe AIR 1.5.2 http://get.adobe.com/air Red Hat (RHSA-2009:1188-1) RHEL Desktop Supplementary (v. 5 cliente) RHEL Supplementary (v. 5 servidor) RHEL Supplementary EUS (v. 5.3.z servidor) https://rhn.redhat.com/ Red Hat (RHSA-2009:1189-1) Red Hat Enterprise Linux Extras (v. 3) Red Hat Enterprise Linux Extras (v. 4) Red Hat Enterprise Linux Extras (v. 4.8.z) https://rhn.redhat.com/ Suse Linux Las actualizaciones pueden descargarse mediante YAST o del servidor FTP oficial de Suse Linux. Sun (266108) OpenSolaris / upon builds snv_110 o posterior http://sunsolve.sun.com/pub-cgi/show.pl?target=patchpage |
|
Standar resources |
|
| Property | Value |
| CVE |
CVE-2009-2395 CVE-2009-1863 CVE-2009-1864 CVE-2009-1865 CVE-2009-1866 CVE-2009-1867 CVE-2009-1868 CVE-2009-1869 CVE-2009-1870 |
| BID | |
Other resources |
|
|
Adobe Security Bulletin (APSB09-10) http://www.adobe.com/support/security/bulletins/apsb09-10.html Red Hat Security Advisory (RHSA-2009:1188-1) https://rhn.redhat.com/errata/RHSA-2009-1188.html Red Hat Security Advisory (RHSA-2009:1189-1) https://rhn.redhat.com/errata/RHSA-2009-1189.html SUSE Security Advisory (SUSE-SA:2009:041) http://www.novell.com/linux/security/advisories/2009_41_flash.html Sun Alert Notification (266108) http://sunsolve.sun.com/search/document.do?assetkey=1-66-266108-1 |
|
Version history |
||
| Version | Comments | Date |
| 1.0 | Aviso emitido | 2009-07-31 |
| 1.1 | Aviso emitido por Red Hat (RHSA-2009:1188-1), aviso emitido por Red Hat (RHSA-2009:1189-1) | 2009-08-03 |
| 1.2 | Aviso emitido por Suse (SUSE-SA:2009:041) | 2009-08-07 |
| 1.3 | Aviso emitido por Sun (266108) | 2009-08-27 |