According to its version, the instance of Flash Player installed on the remote Windows host is 10.x equal to or earlier than 10.3.183.10 or 11.x equal to or earlier than 11.0.1.152.  It is, therefore, reportedly affected by several critical vulnerabilities :

  - Several unspecified memory corruption errors     exist that could lead to code execution.     (CVE-2011-2445, CVE-2011-2451, CVE-2011-2452,     CVE-2011-2453, CVE-2011-2454, CVE-2011-2455,     CVE-2011-2459, CVE-2011-2460)

  - An unspecified heap corruption error exists that could     lead to code execution. (CVE-2011-2450)

  - An unspecified buffer overflow error exists that could     lead to code execution. (CVE-2011-2456)

  - An unspecified stack overflow error exists that could     lead to code execution. (CVE-2011-2457)

  - An unspecified error related to Internet Explorer can     allow cross-domain policy violations. (CVE-2011-2458)

flash-player update to version 11.1.102.55 to fix the following critical security issues :

CVE-2011-2445 / CVE-2011-2450 / CVE-2011-2451 / CVE-2011-2452 / CVE-2011-2453 / CVE-2011-2454 / CVE-2011-2455 / CVE-2011-2456 / CVE-2011-2457 / CVE-2011-2458 / CVE-2011-2459 / CVE-2011-2460

The remote Solaris system is missing necessary patches to address security updates :

  - Adobe Flash Player before 10.3.183.11 and 11.x before     11.1.102.55 on Windows, Mac OS X, Linux, and Solaris and     before 11.1.102.59 on Android, and Adobe AIR before     3.1.0.4880, allows attackers to execute arbitrary code     or cause a denial of service (memory corruption) via     unspecified vectors, a different vulnerability than     CVE-2011-2451, CVE-2011-2452, CVE-2011-2453,     CVE-2011-2454, CVE-2011-2455, CVE-2011-2459, and     CVE-2011-2460. (CVE-2011-2445)

  - Adobe Flash Player before 10.3.183.11 and 11.x before     11.1.102.55 on Windows, Mac OS X, Linux, and Solaris and     before 11.1.102.59 on Android, and Adobe AIR before     3.1.0.4880, allows attackers to execute arbitrary code     or cause a denial of service (heap memory corruption)     via unspecified vectors. (CVE-2011-2450)

  - Adobe Flash Player before 10.3.183.11 and 11.x before     11.1.102.55 on Windows, Mac OS X, Linux, and Solaris and     before 11.1.102.59 on Android, and Adobe AIR before     3.1.0.4880, allows attackers to execute arbitrary code     or cause a denial of service (memory corruption) via     unspecified vectors, a different vulnerability than     CVE-2011-2445, CVE-2011-2452, CVE-2011-2453,     CVE-2011-2454, CVE-2011-2455, CVE-2011-2459, and     CVE-2011-2460. (CVE-2011-2451)

  - Adobe Flash Player before 10.3.183.11 and 11.x before     11.1.102.55 on Windows, Mac OS X, Linux, and Solaris and     before 11.1.102.59 on Android, and Adobe AIR before     3.1.0.4880, allows attackers to execute arbitrary code     or cause a denial of service (memory corruption) via     unspecified vectors, a different vulnerability than     CVE-2011-2445, CVE-2011-2451, CVE-2011-2453,     CVE-2011-2454, CVE-2011-2455, CVE-2011-2459, and     CVE-2011-2460. (CVE-2011-2452)

  - Adobe Flash Player before 10.3.183.11 and 11.x before     11.1.102.55 on Windows, Mac OS X, Linux, and Solaris and     before 11.1.102.59 on Android, and Adobe AIR before     3.1.0.4880, allows attackers to execute arbitrary code     or cause a denial of service (memory corruption) via     unspecified vectors, a different vulnerability than     CVE-2011-2445, CVE-2011-2451, CVE-2011-2452,     CVE-2011-2454, CVE-2011-2455, CVE-2011-2459, and     CVE-2011-2460. (CVE-2011-2453)

  - Adobe Flash Player before 10.3.183.11 and 11.x before     11.1.102.55 on Windows, Mac OS X, Linux, and Solaris and     before 11.1.102.59 on Android, and Adobe AIR before     3.1.0.4880, allows attackers to execute arbitrary code     or cause a denial of service (memory corruption) via     unspecified vectors, a different vulnerability than     CVE-2011-2445, CVE-2011-2451, CVE-2011-2452,     CVE-2011-2453, CVE-2011-2455, CVE-2011-2459, and     CVE-2011-2460. (CVE-2011-2454)

  - Adobe Flash Player before 10.3.183.11 and 11.x before     11.1.102.55 on Windows, Mac OS X, Linux, and Solaris and     before 11.1.102.59 on Android, and Adobe AIR before     3.1.0.4880, allows attackers to execute arbitrary code     or cause a denial of service (memory corruption) via     unspecified vectors, a different vulnerability than     CVE-2011-2445, CVE-2011-2451, CVE-2011-2452,     CVE-2011-2453, CVE-2011-2454, CVE-2011-2459, and     CVE-2011-2460. (CVE-2011-2455)

  - Buffer overflow in Adobe Flash Player before 10.3.183.11     and 11.x before 11.1.102.55 on Windows, Mac OS X, Linux,     and Solaris and before 11.1.102.59 on Android, and Adobe     AIR before 3.1.0.4880, allows attackers to execute     arbitrary code via unspecified vectors. (CVE-2011-2456)

  - Stack-based buffer overflow in Adobe Flash Player before     10.3.183.11 and 11.x before 11.1.102.55 on Windows, Mac     OS X, Linux, and Solaris and before 11.1.102.59 on     Android, and Adobe AIR before 3.1.0.4880, allows     attackers to execute arbitrary code via unspecified     vectors. (CVE-2011-2457)

  - Adobe Flash Player before 10.3.183.11 and 11.x before     11.1.102.55 on Windows, Mac OS X, Linux, and Solaris and     before 11.1.102.59 on Android, and Adobe AIR before     3.1.0.4880, when Internet Explorer is used, allows     remote attackers to bypass the cross-domain policy via a     crafted web site. (CVE-2011-2458)

  - Adobe Flash Player before 10.3.183.11 and 11.x before     11.1.102.55 on Windows, Mac OS X, Linux, and Solaris and     before 11.1.102.59 on Android, and Adobe AIR before     3.1.0.4880, allows attackers to execute arbitrary code     or cause a denial of service (memory corruption) via     unspecified vectors, a different vulnerability than     CVE-2011-2445, CVE-2011-2451, CVE-2011-2452,     CVE-2011-2453, CVE-2011-2454, CVE-2011-2455, and     CVE-2011-2460. (CVE-2011-2459)

  - Adobe Flash Player before 10.3.183.11 and 11.x before     11.1.102.55 on Windows, Mac OS X, Linux, and Solaris and     before 11.1.102.59 on Android, and Adobe AIR before     3.1.0.4880, allows attackers to execute arbitrary code     or cause a denial of service (memory corruption) via     unspecified vectors, a different vulnerability than     CVE-2011-2445, CVE-2011-2451, CVE-2011-2452,     CVE-2011-2453, CVE-2011-2454, CVE-2011-2455, and     CVE-2011-2459. (CVE-2011-2460)

ID	名稱	產品	系列	已發布	已更新	嚴重性
56874	Flash Player <= 10.3.183.10 / 11.0.1.152 Multiple Vulnerabilities (APSB11-28)	Nessus	Windows	2011/11/18	2022/4/11	high
57102	SuSE 11.1 Security Update : flash-player (SAT Patch Number 5413)	Nessus	SuSE Local Security Checks	2011/12/13	2021/1/19	critical
80611	Oracle Solaris Third-Party Patch Update : flash (multiple_vulnerabilities_in_adobe_flashplayer4)	Nessus	Solaris Local Security Checks	2015/1/19	2021/1/14	critical

偵測

搜尋 Plugin

high

critical

critical