Upstream information
Description
Integer overflow in Adobe Flash Player 9.0.115.0 and earlier, and 8.0.39.0 and earlier, allows remote attackers to execute arbitrary code via a crafted SWF file with a negative Scene Count value, which passes a signed comparison, is used as an offset of a NULL pointer, and triggers a buffer overflow.NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)
Novell/SUSE information
Novell Bugzilla entry: 376639 SUSE Security Advisories:- SUSE-SA:2008:022, published Fri, 11 Apr 2008 10:00:00 +0000
List of released packages
| Product(s) | Fixed package version(s) | References |
|---|---|---|
| SUSE LINUX 10.1 |
| |
| openSUSE 10.2 openSUSE 10.3 |
| |
| SUSE Linux Enterprise Desktop 10 SP1 for AMD64 and Intel EM64T SUSE Linux Enterprise Desktop 10 SP1 for x86 |
| Builds ZYPP Patch Nr: 5159 |
| Novell Linux Desktop 9 for x86 Novell Linux Desktop 9 for x86_64 |
| Builds YOU Patch Nr: 12136 |