ASA-201710-20 log original external raw

[ASA-201710-20] flashplugin: arbitrary code execution
Arch Linux Security Advisory ASA-201710-20 ========================================== Severity: Critical Date : 2017-10-16 CVE-ID : CVE-2017-11292 Package : flashplugin Type : arbitrary code execution Remote : Yes Link : Summary ======= The package flashplugin before version is vulnerable to arbitrary code execution. Resolution ========== Upgrade to # pacman -Syu "flashplugin>=" The problem has been fixed upstream in version Workaround ========== None. Description =========== A type confusion vulnerability has been found in Adobe Flash Player <=, leading to arbitrary code execution. Impact ====== A remote attacker can execute arbitrary code on the affected host. Adobe is aware of a report that an exploit exists in the wild, and is being used in limited, targeted attacks against users running Windows. References ==========