Description
Adobe Flash Player 9.x up to 9.0.48.0, 8.x up to 8.0.35.0, and 7.x up to 7.0.70.0, when running on Linux, uses insecure permissions for memory, which might allow local users to gain privileges.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 5 | flash-plugin | 9.0.115.0-1.el5 | RHSA-2007:1126 |
| RHEL 4 | flash-plugin | 9.0.115.0-1.el4 | RHSA-2007:1126 |
| RHEL 3 | flash-plugin | 9.0.115.0-1.el3.with.oss | RHSA-2007:1126 |
Advisories 1
- RHSA-2007:1126 Red Hat Security Advisory: flash-plugin security update Red Hat Security Advisories (RHSA) · Jun 29, 2026
References
- SUSE-SA:2007:069 vendor-advisory
- 28157 third-party-advisory
- adobe-memory-privilege-escalation(39136) vdb-entry
- 30507 third-party-advisory
- oval:org.mitre.oval:def:10519 vdb-entry signature
- 28570 third-party-advisory
- ADV-2008-1724 vdb-entry
- TA07-355A third-party-advisory
- GLSA-200801-07 vendor-advisory
- 26929 vdb-entry
- 28161 third-party-advisory
- RHSA-2007:1126 vendor-advisory
- 26965 vdb-entry
- 238305 vendor-advisory
- ADV-2007-4258 vdb-entry
- 1019116 vdb-entry
- 28213 third-party-advisory
- http://www.adobe.com/support/security/bulletins/apsb07-20.html