GCVE Workshop - 22 September 2026 (14:00-18:00), Luxembourg Before The Vulnopticon Conference - Registration

SUSE-SU-2016:2512-1

Vulnerability from csaf_suse - Published: 2016-10-12 11:30 - Updated: 2016-10-12 11:30
Summary
Security update for flash-playerqemu
Severity
Important
Notes
Title of the patch: Security update for flash-playerqemu
Description of the patch: flash-player was updated to version 11.2.202.637 to fix the following issues (bsc#1004019): CVE-2016-6992: A type confusion vulnerability that could lead to code execution. CVE-2016-6981, CVE-2016-6987: use-after-free vulnerabilities that could lead to code execution CVE-2016-4286: Security bypass vulnerability CVE-2016-4273, CVE-2016-6982, CVE-2016-6983, CVE-2016-6984, CVE-2016-6985, CVE-2016-6986, CVE-2016-6989, CVE-2016-6990: Memory corruption vulnerabilities that could lead to code execution Also the EULA was updated to version 23.0 (bsc#1003993).
Patchnames: SUSE-SLE-DESKTOP-12-SP1-2016-1468,SUSE-SLE-WE-12-SP1-2016-1468
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
CVE-2016-4273
8.8 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Affected products
Product Identifier Version Remediation
Unresolved product id: SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.637-143.1.x86_64 —
Vendor Fix
Unresolved product id: SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.637-143.1.x86_64 —
Vendor Fix
Unresolved product id: SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.637-143.1.x86_64 —
Vendor Fix
Unresolved product id: SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.637-143.1.x86_64 —
Vendor Fix
Threats
Impact important
CVE-2016-4286
8.8 (High)
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Affected products
Recommended 4 products, the same list as for CVE-2016-4273
Threats
Impact important
CVE-2016-6981
8.8 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Affected products
Recommended 4 products, the same list as for CVE-2016-4273
Threats
Impact important
CVE-2016-6982
8.8 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Affected products
Recommended 4 products, the same list as for CVE-2016-4273
Threats
Impact important
CVE-2016-6983
8.8 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Affected products
Recommended 4 products, the same list as for CVE-2016-4273
Threats
Impact important
CVE-2016-6984
8.8 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Affected products
Recommended 4 products, the same list as for CVE-2016-4273
Threats
Impact important
CVE-2016-6985
8.8 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Affected products
Recommended 4 products, the same list as for CVE-2016-4273
Threats
Impact important
CVE-2016-6986
8.8 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Affected products
Recommended 4 products, the same list as for CVE-2016-4273
Threats
Impact important
CVE-2016-6987
8.8 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Affected products
Recommended 4 products, the same list as for CVE-2016-4273
Threats
Impact important
CVE-2016-6989
8.8 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Affected products
Recommended 4 products, the same list as for CVE-2016-4273
Threats
Impact important
CVE-2016-6990
8.8 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Affected products
Recommended 4 products, the same list as for CVE-2016-4273
Threats
Impact important
CVE-2016-6992
8.8 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Affected products
Recommended 4 products, the same list as for CVE-2016-4273
Threats
Impact important
References
URL Category
https://www.suse.com/support/security/rating/ external
https://ftp.suse.com/pub/projects/security/csaf/s… self
https://www.suse.com/support/update/announcement/… self
https://lists.suse.com/pipermail/sle-security-upd… self
https://bugzilla.suse.com/1003993 self
https://bugzilla.suse.com/1004019 self
https://www.suse.com/security/cve/CVE-2016-4273/ self
https://www.suse.com/security/cve/CVE-2016-4286/ self
https://www.suse.com/security/cve/CVE-2016-6981/ self
https://www.suse.com/security/cve/CVE-2016-6982/ self
https://www.suse.com/security/cve/CVE-2016-6983/ self
https://www.suse.com/security/cve/CVE-2016-6984/ self
https://www.suse.com/security/cve/CVE-2016-6985/ self
https://www.suse.com/security/cve/CVE-2016-6986/ self
https://www.suse.com/security/cve/CVE-2016-6987/ self
https://www.suse.com/security/cve/CVE-2016-6989/ self
https://www.suse.com/security/cve/CVE-2016-6990/ self
https://www.suse.com/security/cve/CVE-2016-6992/ self
https://www.suse.com/security/cve/CVE-2016-4273 external
https://bugzilla.suse.com/1004019 external
https://www.suse.com/security/cve/CVE-2016-4286 external
https://bugzilla.suse.com/1004019 external
https://www.suse.com/security/cve/CVE-2016-6981 external
https://bugzilla.suse.com/1004019 external
https://www.suse.com/security/cve/CVE-2016-6982 external
https://bugzilla.suse.com/1004019 external
https://www.suse.com/security/cve/CVE-2016-6983 external
https://bugzilla.suse.com/1004019 external
https://www.suse.com/security/cve/CVE-2016-6984 external
https://bugzilla.suse.com/1004019 external
https://www.suse.com/security/cve/CVE-2016-6985 external
https://bugzilla.suse.com/1004019 external
https://www.suse.com/security/cve/CVE-2016-6986 external
https://bugzilla.suse.com/1004019 external
https://www.suse.com/security/cve/CVE-2016-6987 external
https://bugzilla.suse.com/1004019 external
https://www.suse.com/security/cve/CVE-2016-6989 external
https://bugzilla.suse.com/1004019 external
https://www.suse.com/security/cve/CVE-2016-6990 external
https://bugzilla.suse.com/1004019 external
https://www.suse.com/security/cve/CVE-2016-6992 external
https://bugzilla.suse.com/1004019 external
To clipboard 

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://www.suse.com/support/security/rating/",
      "text": "important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright 2024 SUSE LLC. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Security update for flash-playerqemu",
        "title": "Title of the patch"
      },
      {
        "category": "description",
        "text": "\nflash-player was updated to version 11.2.202.637 to fix the following issues (bsc#1004019):\n\nCVE-2016-6992: A type confusion vulnerability that could lead to code execution.\nCVE-2016-6981, CVE-2016-6987: use-after-free vulnerabilities that could lead to code execution \nCVE-2016-4286: Security bypass vulnerability \nCVE-2016-4273, CVE-2016-6982, CVE-2016-6983, CVE-2016-6984, CVE-2016-6985, CVE-2016-6986, CVE-2016-6989, CVE-2016-6990: Memory corruption vulnerabilities that could lead to code execution \n\nAlso the EULA was updated to version 23.0 (bsc#1003993).\n",
        "title": "Description of the patch"
      },
      {
        "category": "details",
        "text": "SUSE-SLE-DESKTOP-12-SP1-2016-1468,SUSE-SLE-WE-12-SP1-2016-1468",
        "title": "Patchnames"
      },
      {
        "category": "legal_disclaimer",
        "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
        "title": "Terms of use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://www.suse.com/support/security/contact/",
      "name": "SUSE Product Security Team",
      "namespace": "https://www.suse.com/"
    },
    "references": [
      {
        "category": "external",
        "summary": "SUSE ratings",
        "url": "https://www.suse.com/support/security/rating/"
      },
      {
        "category": "self",
        "summary": "URL of this CSAF notice",
        "url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2016_2512-1.json"
      },
      {
        "category": "self",
        "summary": "URL for SUSE-SU-2016:2512-1",
        "url": "https://www.suse.com/support/update/announcement/2016/suse-su-20162512-1/"
      },
      {
        "category": "self",
        "summary": "E-Mail link for SUSE-SU-2016:2512-1",
        "url": "https://lists.suse.com/pipermail/sle-security-updates/2016-October/002329.html"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1003993",
        "url": "https://bugzilla.suse.com/1003993"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1004019",
        "url": "https://bugzilla.suse.com/1004019"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2016-4273 page",
        "url": "https://www.suse.com/security/cve/CVE-2016-4273/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2016-4286 page",
        "url": "https://www.suse.com/security/cve/CVE-2016-4286/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2016-6981 page",
        "url": "https://www.suse.com/security/cve/CVE-2016-6981/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2016-6982 page",
        "url": "https://www.suse.com/security/cve/CVE-2016-6982/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2016-6983 page",
        "url": "https://www.suse.com/security/cve/CVE-2016-6983/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2016-6984 page",
        "url": "https://www.suse.com/security/cve/CVE-2016-6984/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2016-6985 page",
        "url": "https://www.suse.com/security/cve/CVE-2016-6985/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2016-6986 page",
        "url": "https://www.suse.com/security/cve/CVE-2016-6986/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2016-6987 page",
        "url": "https://www.suse.com/security/cve/CVE-2016-6987/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2016-6989 page",
        "url": "https://www.suse.com/security/cve/CVE-2016-6989/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2016-6990 page",
        "url": "https://www.suse.com/security/cve/CVE-2016-6990/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2016-6992 page",
        "url": "https://www.suse.com/security/cve/CVE-2016-6992/"
      }
    ],
    "title": "Security update for flash-playerqemu",
    "tracking": {
      "current_release_date": "2016-10-12T11:30:42Z",
      "generator": {
        "date": "2016-10-12T11:30:42Z",
        "engine": {
          "name": "cve-database.git:bin/generate-csaf.pl",
          "version": "1"
        }
      },
      "id": "SUSE-SU-2016:2512-1",
      "initial_release_date": "2016-10-12T11:30:42Z",
      "revision_history": [
        {
          "date": "2016-10-12T11:30:42Z",
          "number": "1",
          "summary": "Current version"
        }
      ],
      "status": "final",
      "version": "1"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "flash-player-11.2.202.637-143.1.x86_64",
                "product": {
                  "name": "flash-player-11.2.202.637-143.1.x86_64",
                  "product_id": "flash-player-11.2.202.637-143.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "flash-player-gnome-11.2.202.637-143.1.x86_64",
                "product": {
                  "name": "flash-player-gnome-11.2.202.637-143.1.x86_64",
                  "product_id": "flash-player-gnome-11.2.202.637-143.1.x86_64"
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Desktop 12 SP1",
                "product": {
                  "name": "SUSE Linux Enterprise Desktop 12 SP1",
                  "product_id": "SUSE Linux Enterprise Desktop 12 SP1",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sled:12:sp1"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Workstation Extension 12 SP1",
                "product": {
                  "name": "SUSE Linux Enterprise Workstation Extension 12 SP1",
                  "product_id": "SUSE Linux Enterprise Workstation Extension 12 SP1",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sle-we:12:sp1"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "SUSE Linux Enterprise"
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "flash-player-11.2.202.637-143.1.x86_64 as component of SUSE Linux Enterprise Desktop 12 SP1",
          "product_id": "SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.637-143.1.x86_64"
        },
        "product_reference": "flash-player-11.2.202.637-143.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Desktop 12 SP1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "flash-player-gnome-11.2.202.637-143.1.x86_64 as component of SUSE Linux Enterprise Desktop 12 SP1",
          "product_id": "SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.637-143.1.x86_64"
        },
        "product_reference": "flash-player-gnome-11.2.202.637-143.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Desktop 12 SP1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "flash-player-11.2.202.637-143.1.x86_64 as component of SUSE Linux Enterprise Workstation Extension 12 SP1",
          "product_id": "SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.637-143.1.x86_64"
        },
        "product_reference": "flash-player-11.2.202.637-143.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Workstation Extension 12 SP1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "flash-player-gnome-11.2.202.637-143.1.x86_64 as component of SUSE Linux Enterprise Workstation Extension 12 SP1",
          "product_id": "SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.637-143.1.x86_64"
        },
        "product_reference": "flash-player-gnome-11.2.202.637-143.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Workstation Extension 12 SP1"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2016-4273",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2016-4273"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Adobe Flash Player before 18.0.0.382 and 19.x through 23.x before 23.0.0.185 on Windows and OS X and before 11.2.202.637 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-6982, CVE-2016-6983, CVE-2016-6984, CVE-2016-6985, CVE-2016-6986, CVE-2016-6989, and CVE-2016-6990.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.637-143.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.637-143.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.637-143.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.637-143.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2016-4273",
          "url": "https://www.suse.com/security/cve/CVE-2016-4273"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1004019 for CVE-2016-4273",
          "url": "https://bugzilla.suse.com/1004019"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.637-143.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.637-143.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.637-143.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.637-143.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.637-143.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.637-143.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.637-143.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.637-143.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2016-10-12T11:30:42Z",
          "details": "important"
        }
      ],
      "title": "CVE-2016-4273"
    },
    {
      "cve": "CVE-2016-4286",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2016-4286"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Adobe Flash Player before 18.0.0.382 and 19.x through 23.x before 23.0.0.185 on Windows and OS X and before 11.2.202.637 on Linux allows attackers to bypass intended access restrictions via unspecified vectors.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.637-143.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.637-143.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.637-143.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.637-143.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2016-4286",
          "url": "https://www.suse.com/security/cve/CVE-2016-4286"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1004019 for CVE-2016-4286",
          "url": "https://bugzilla.suse.com/1004019"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.637-143.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.637-143.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.637-143.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.637-143.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.0"
          },
          "products": [
            "SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.637-143.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.637-143.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.637-143.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.637-143.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2016-10-12T11:30:42Z",
          "details": "important"
        }
      ],
      "title": "CVE-2016-4286"
    },
    {
      "cve": "CVE-2016-6981",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2016-6981"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Use-after-free vulnerability in Adobe Flash Player before 18.0.0.382 and 19.x through 23.x before 23.0.0.185 on Windows and OS X and before 11.2.202.637 on Linux allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2016-6987.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.637-143.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.637-143.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.637-143.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.637-143.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2016-6981",
          "url": "https://www.suse.com/security/cve/CVE-2016-6981"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1004019 for CVE-2016-6981",
          "url": "https://bugzilla.suse.com/1004019"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.637-143.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.637-143.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.637-143.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.637-143.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.637-143.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.637-143.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.637-143.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.637-143.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2016-10-12T11:30:42Z",
          "details": "important"
        }
      ],
      "title": "CVE-2016-6981"
    },
    {
      "cve": "CVE-2016-6982",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2016-6982"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Adobe Flash Player before 18.0.0.382 and 19.x through 23.x before 23.0.0.185 on Windows and OS X and before 11.2.202.637 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-4273, CVE-2016-6983, CVE-2016-6984, CVE-2016-6985, CVE-2016-6986, CVE-2016-6989, and CVE-2016-6990.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.637-143.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.637-143.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.637-143.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.637-143.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2016-6982",
          "url": "https://www.suse.com/security/cve/CVE-2016-6982"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1004019 for CVE-2016-6982",
          "url": "https://bugzilla.suse.com/1004019"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.637-143.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.637-143.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.637-143.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.637-143.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.637-143.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.637-143.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.637-143.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.637-143.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2016-10-12T11:30:42Z",
          "details": "important"
        }
      ],
      "title": "CVE-2016-6982"
    },
    {
      "cve": "CVE-2016-6983",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2016-6983"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Adobe Flash Player before 18.0.0.382 and 19.x through 23.x before 23.0.0.185 on Windows and OS X and before 11.2.202.637 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-4273, CVE-2016-6982, CVE-2016-6984, CVE-2016-6985, CVE-2016-6986, CVE-2016-6989, and CVE-2016-6990.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.637-143.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.637-143.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.637-143.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.637-143.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2016-6983",
          "url": "https://www.suse.com/security/cve/CVE-2016-6983"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1004019 for CVE-2016-6983",
          "url": "https://bugzilla.suse.com/1004019"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.637-143.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.637-143.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.637-143.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.637-143.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.637-143.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.637-143.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.637-143.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.637-143.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2016-10-12T11:30:42Z",
          "details": "important"
        }
      ],
      "title": "CVE-2016-6983"
    },
    {
      "cve": "CVE-2016-6984",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2016-6984"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Adobe Flash Player before 18.0.0.382 and 19.x through 23.x before 23.0.0.185 on Windows and OS X and before 11.2.202.637 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-4273, CVE-2016-6982, CVE-2016-6983, CVE-2016-6985, CVE-2016-6986, CVE-2016-6989, and CVE-2016-6990.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.637-143.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.637-143.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.637-143.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.637-143.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2016-6984",
          "url": "https://www.suse.com/security/cve/CVE-2016-6984"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1004019 for CVE-2016-6984",
          "url": "https://bugzilla.suse.com/1004019"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.637-143.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.637-143.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.637-143.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.637-143.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.637-143.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.637-143.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.637-143.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.637-143.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2016-10-12T11:30:42Z",
          "details": "important"
        }
      ],
      "title": "CVE-2016-6984"
    },
    {
      "cve": "CVE-2016-6985",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2016-6985"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Adobe Flash Player before 18.0.0.382 and 19.x through 23.x before 23.0.0.185 on Windows and OS X and before 11.2.202.637 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-4273, CVE-2016-6982, CVE-2016-6983, CVE-2016-6984, CVE-2016-6986, CVE-2016-6989, and CVE-2016-6990.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.637-143.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.637-143.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.637-143.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.637-143.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2016-6985",
          "url": "https://www.suse.com/security/cve/CVE-2016-6985"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1004019 for CVE-2016-6985",
          "url": "https://bugzilla.suse.com/1004019"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.637-143.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.637-143.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.637-143.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.637-143.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.637-143.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.637-143.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.637-143.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.637-143.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2016-10-12T11:30:42Z",
          "details": "important"
        }
      ],
      "title": "CVE-2016-6985"
    },
    {
      "cve": "CVE-2016-6986",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2016-6986"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Adobe Flash Player before 18.0.0.382 and 19.x through 23.x before 23.0.0.185 on Windows and OS X and before 11.2.202.637 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-4273, CVE-2016-6982, CVE-2016-6983, CVE-2016-6984, CVE-2016-6985, CVE-2016-6989, and CVE-2016-6990.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.637-143.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.637-143.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.637-143.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.637-143.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2016-6986",
          "url": "https://www.suse.com/security/cve/CVE-2016-6986"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1004019 for CVE-2016-6986",
          "url": "https://bugzilla.suse.com/1004019"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.637-143.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.637-143.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.637-143.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.637-143.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.637-143.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.637-143.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.637-143.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.637-143.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2016-10-12T11:30:42Z",
          "details": "important"
        }
      ],
      "title": "CVE-2016-6986"
    },
    {
      "cve": "CVE-2016-6987",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2016-6987"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Use-after-free vulnerability in Adobe Flash Player before 18.0.0.382 and 19.x through 23.x before 23.0.0.185 on Windows and OS X and before 11.2.202.637 on Linux allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2016-6981.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.637-143.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.637-143.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.637-143.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.637-143.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2016-6987",
          "url": "https://www.suse.com/security/cve/CVE-2016-6987"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1004019 for CVE-2016-6987",
          "url": "https://bugzilla.suse.com/1004019"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.637-143.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.637-143.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.637-143.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.637-143.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.637-143.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.637-143.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.637-143.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.637-143.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2016-10-12T11:30:42Z",
          "details": "important"
        }
      ],
      "title": "CVE-2016-6987"
    },
    {
      "cve": "CVE-2016-6989",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2016-6989"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Adobe Flash Player before 18.0.0.382 and 19.x through 23.x before 23.0.0.185 on Windows and OS X and before 11.2.202.637 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-4273, CVE-2016-6982, CVE-2016-6983, CVE-2016-6984, CVE-2016-6985, CVE-2016-6986, and CVE-2016-6990.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.637-143.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.637-143.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.637-143.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.637-143.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2016-6989",
          "url": "https://www.suse.com/security/cve/CVE-2016-6989"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1004019 for CVE-2016-6989",
          "url": "https://bugzilla.suse.com/1004019"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.637-143.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.637-143.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.637-143.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.637-143.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.637-143.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.637-143.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.637-143.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.637-143.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2016-10-12T11:30:42Z",
          "details": "important"
        }
      ],
      "title": "CVE-2016-6989"
    },
    {
      "cve": "CVE-2016-6990",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2016-6990"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Adobe Flash Player before 18.0.0.382 and 19.x through 23.x before 23.0.0.185 on Windows and OS X and before 11.2.202.637 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-4273, CVE-2016-6982, CVE-2016-6983, CVE-2016-6984, CVE-2016-6985, CVE-2016-6986, and CVE-2016-6989.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.637-143.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.637-143.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.637-143.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.637-143.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2016-6990",
          "url": "https://www.suse.com/security/cve/CVE-2016-6990"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1004019 for CVE-2016-6990",
          "url": "https://bugzilla.suse.com/1004019"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.637-143.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.637-143.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.637-143.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.637-143.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.637-143.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.637-143.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.637-143.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.637-143.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2016-10-12T11:30:42Z",
          "details": "important"
        }
      ],
      "title": "CVE-2016-6990"
    },
    {
      "cve": "CVE-2016-6992",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2016-6992"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Adobe Flash Player before 18.0.0.382 and 19.x through 23.x before 23.0.0.185 on Windows and OS X and before 11.2.202.637 on Linux allows attackers to execute arbitrary code by leveraging an unspecified \"type confusion.\"",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.637-143.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.637-143.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.637-143.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.637-143.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2016-6992",
          "url": "https://www.suse.com/security/cve/CVE-2016-6992"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1004019 for CVE-2016-6992",
          "url": "https://bugzilla.suse.com/1004019"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.637-143.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.637-143.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.637-143.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.637-143.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.637-143.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.637-143.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.637-143.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.637-143.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2016-10-12T11:30:42Z",
          "details": "important"
        }
      ],
      "title": "CVE-2016-6992"
    }
  ]
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.


Detection rules are retrieved from Rulezet.


Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.