Adobe APSA10-05

[Mark Foster]

Binary package hint: adobe-flashplugin

A vulnerability has been discovered in Adobe Flash Player, which can be exploited by malicious people to compromise a user's system.

The vulnerability is caused due to an unspecified error and can be exploited to execute arbitrary code.

CVE-2010-3654
from http://secunia.com/advisories/41917

Related links.
http://www.adobe.com/support/security/advisories/apsa10-05.html
http://contagiodump.blogspot.com/2010/10/potential-new-adobe-flash-player-zero.html

[Mark Foster (fostermarkd)]

Package "acroread" is also affected.

[Launchpad Janitor (janitor)]

This bug was fixed in the package flashplugin-nonfree - 10.1.102.64ubuntu1

---------------
flashplugin-nonfree (10.1.102.64ubuntu1) natty; urgency=low

  * SECURITY UPDATE: New upstream release 10.1.102.64 (LP: #667887)
    - debian/config, debian/postinst: Updated sha256sums and path
    - CVE-2010-3654
 -- Marc Deslauriers <email address hidden> Thu, 04 Nov 2010 14:38:17 -0400

[Launchpad Janitor (janitor)]

This bug was fixed in the package flashplugin-nonfree - 10.1.102.64ubuntu0.10.10.1

---------------
flashplugin-nonfree (10.1.102.64ubuntu0.10.10.1) maverick-security; urgency=low

  * SECURITY UPDATE: New upstream release 10.1.102.64 (LP: #667887)
    - debian/config, debian/postinst: Updated sha256sums and path
    - CVE-2010-3654
 -- Marc Deslauriers <email address hidden> Thu, 04 Nov 2010 14:47:29 -0400

[Launchpad Janitor (janitor)]

This bug was fixed in the package flashplugin-nonfree - 10.1.102.64ubuntu0.10.04.1

---------------
flashplugin-nonfree (10.1.102.64ubuntu0.10.04.1) lucid-security; urgency=low

  * SECURITY UPDATE: New upstream release 10.1.102.64 (LP: #667887)
    - debian/config, debian/postinst: Updated sha256sums and path
    - CVE-2010-3654
 -- Marc Deslauriers <email address hidden> Thu, 04 Nov 2010 14:51:10 -0400

[Launchpad Janitor (janitor)]

This bug was fixed in the package flashplugin-nonfree - 10.1.102.64ubuntu0.9.10.1

---------------
flashplugin-nonfree (10.1.102.64ubuntu0.9.10.1) karmic-security; urgency=low

  * SECURITY UPDATE: New upstream release 10.1.102.64 (LP: #667887)
    - debian/config, debian/postinst: Updated sha256sums and path
    - CVE-2010-3654
 -- Marc Deslauriers <email address hidden> Thu, 04 Nov 2010 14:52:46 -0400

[Launchpad Janitor (janitor)]

This bug was fixed in the package flashplugin-nonfree - 10.0.1.218+really9.0.289.0ubuntu1

---------------
flashplugin-nonfree (10.0.1.218+really9.0.289.0ubuntu1) hardy-security; urgency=low

  * SECURITY UPDATE: New upstream release 9.0.289.0 (LP: #667887)
    - debian/config, debian/postinst: Updated sha256sums and path
    - CVE-2010-3654
 -- Marc Deslauriers <email address hidden> Fri, 05 Nov 2010 14:13:37 -0400

[Brian Thomason (brian-thomason)]

I apologize for the delay with the acroread update; Adobe did not place it on their usual site for download (just their FTP) so I had to confirm with them that we could indeed release it. Also, I noticed that the plugin version was not updated, but they have assured me the problem is fixed.