[arch-security] [ASA-201710-21] lib32-flashplugin: arbitrary code execution
rgacogne at archlinux.org
Mon Oct 16 16:08:55 UTC 2017
Arch Linux Security Advisory ASA-201710-21
Date : 2017-10-16
CVE-ID : CVE-2017-11292
Package : lib32-flashplugin
Type : arbitrary code execution
Remote : Yes
Link : https://security.archlinux.org/AVG-450
The package lib32-flashplugin before version 18.104.22.168-1 is vulnerable
to arbitrary code execution.
Upgrade to 22.214.171.124-1.
# pacman -Syu "lib32-flashplugin>=126.96.36.199-1"
The problem has been fixed upstream in version 188.8.131.52.
A type confusion vulnerability has been found in Adobe Flash Player <=
184.108.40.206, leading to arbitrary code execution.
A remote attacker can execute arbitrary code on the affected host.
Adobe is aware of a report that an exploit exists in the wild, and is
being used in limited, targeted attacks against users running Windows.
-------------- next part --------------
A non-text attachment was scrubbed...
Size: 833 bytes
Desc: OpenPGP digital signature
More information about the arch-security