------------------------------------------------------------------------
Pardus Linux Security Advisory 2010-120           security@pardus.org.tr
------------------------------------------------------------------------
      Date: 2010-09-03
  Severity: 4
      Type: Remote
------------------------------------------------------------------------

Summary
======
Multiple vulnerabilities have been fixed in flashplugin.


Description
==========
CVE-2010-2213:

Adobe Flash Player before 9.0.280 and 10.x before 10.1.82.76, and Adobe
AIR before 2.0.3, allows attackers to execute arbitrary code or cause a
denial  of service  (memory  corruption)  via  unspecified  vectors,  a
different   vulnerability than   CVE-2010-0209,   CVE-2010-2214,   and
CVE-2010-2216.



CVE-2010-2214:

Adobe Flash Player before 9.0.280 and 10.x before 10.1.82.76, and Adobe
AIR before 2.0.3, allows attackers to execute arbitrary code or cause a
denial  of service  (memory  corruption)  via  unspecified  vectors,  a
different   vulnerability than   CVE-2010-0209,   CVE-2010-2213,   and
CVE-2010-2216.



CVE-2010-2215:

Adobe Flash Player before 9.0.280 and 10.x before 10.1.82.76, and Adobe
AIR before 2.0.3, allows attackers to trick a user into (1) selecting a
link or (2) completing a dialog, related to a "click-jacking" issue.



CVE-2010-2216:

Adobe Flash Player before 9.0.280 and 10.x before 10.1.82.76, and Adobe
AIR before 2.0.3, allows attackers to execute arbitrary code or cause a
denial  of service  (memory  corruption)  via  unspecified  vectors,  a
different   vulnerability than   CVE-2010-0209,   CVE-2010-2213,   and
CVE-2010-2214.



Affected packages:

  Pardus 2009:
    flashplugin, all before 10.1.82.76-27-9


Resolution
=========
There are update(s) for flashplugin. You can update  them  via  Package
Manager or with a single command from console:

    pisi up flashplugin

References
=========
  * http://bugs.pardus.org.tr/show_bug.cgi?id042

------------------------------------------------------------------------