Upstream information
Description
Integer overflow in the ActionScript Virtual Machine 2 (AVM2) abcFile parser in Adobe Flash Player before 9.0.246.0 and 10.x before 10.0.32.18, and Adobe AIR before 1.5.2, allows attackers to cause a denial of service (application crash) or possibly execute arbitrary code via an AVM2 file with a large intrf_count value that triggers a dereference of an out-of-bounds pointer.NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)
Novell/SUSE information
No Novell Bugzilla entries cross referenced. SUSE Security Advisories:- SUSE-SA:2009:041, published Wed, 05 Aug 2009 09:00:00 +0000
List of released packages
| Product(s) | Fixed package version(s) | References |
|---|---|---|
| SUSE Linux Enterprise Desktop 10 SP2 for AMD64 and Intel EM64T SUSE Linux Enterprise Desktop 10 SP2 for x86 |
| sled10-sp2.x86-64 sled10-sp2.x86 ZYPP Patch Nr: 6386 |
| Novell Linux Desktop 9 for x86 Novell Linux Desktop 9 for x86_64 |
| sles9-nld.x86-64 sles9-nld.x86 YOU Patch Nr: 12464 |
| openSUSE 10.3 |
|