advisories/24643.adv

type: security
subject: Updated flash-player-plugin packages fix security vulnerability
CVE:
 - CVE-2019-7096
 - CVE-2019-7108
src:
  6:
   nonfree:
     - flash-player-plugin-32.0.0.171-1.mga6.nonfree
description: |
  An out-of-bounds read that leads to information disclosure. (CVE-2019-7108)

  A use after free that leads to arbitrary code execution. (CVE-2019-7096)
references:
 - https://bugs.mageia.org/show_bug.cgi?id=24643
 - https://helpx.adobe.com/security/products/flash-player/apsb19-19.html
ID: MGASA-2019-0149
1	type: security
2	subject: Updated flash-player-plugin packages fix security vulnerability
3	CVE:
4	- CVE-2019-7096
5	- CVE-2019-7108
6	src:
7	6:
8	nonfree:
9	- flash-player-plugin-32.0.0.171-1.mga6.nonfree
10	description: \|
11	An out-of-bounds read that leads to information disclosure. (CVE-2019-7108)
12
13	A use after free that leads to arbitrary code execution. (CVE-2019-7096)
14	references:
15	- https://bugs.mageia.org/show_bug.cgi?id=24643
16	- https://helpx.adobe.com/security/products/flash-player/apsb19-19.html
17	ID: MGASA-2019-0149