This version upgrade of flash-player fixed multiple unspecified code execution vulnerabiliies.

According to its version, the instance of Flash Player installed on the remote Windows host is 11.x equal to or earlier than 11.5.502.110, or 10.x equal to or earlier than 10.3.183.43.  It is, therefore, potentially affected by multiple vulnerabilities :

  - An unspecified error exists that can allow a buffer     overflow and arbitrary code execution. (CVE-2012-5676)

  - An unspecified error exists that can allow an integer     overflow and arbitrary code execution. (CVE-2012-5677)

  - An unspecified error exists that can lead to memory     corruption and arbitrary code execution. (CVE-2012-5678)

The remote host is missing KB2785605.  It may, therefore, be affected by the following vulnerabilities related to the installed version of the Adobe Flash ActiveX control :

  - An unspecified error exists that could allow a buffer     overflow and arbitrary code execution. (CVE-2012-5676)

  - An unspecified error exists that could allow an integer     overflow and arbitrary code execution. (CVE-2012-5677)

  - An unspecified error exists that could lead to memory     corruption and arbitrary code execution. (CVE-2012-5678)

This version upgrade of flash-player fixes multiple unspecified code execution vulnerabilities.

The remote host is affected by the vulnerability described in GLSA-201309-06 (Adobe Flash Player: Multiple vulnerabilities)

    Multiple unspecified vulnerabilities have been discovered in Adobe Flash       Player. Please review the CVE identifiers referenced below for details.
  Impact :

    A remote attacker could entice a user to open specially crafted SWF       content, possibly resulting in execution of arbitrary code with the       privileges of the process or a Denial of Service condition. Furthermore,       a remote attacker may be able to bypass access restrictions.
  Workaround :

    There is no known workaround at this time.

ID	名稱	產品	系列	已發布	已更新	嚴重性
74840	openSUSE Security Update : flash-player (openSUSE-SU-2013:0368-1)	Nessus	SuSE Local Security Checks	2014/6/13	2021/1/19	critical
63242	Flash Player <= 10.3.183.43 / 11.5.502.110 Multiple Vulnerabilities (APSB12-27)	Nessus	Windows	2012/12/12	2022/4/11	critical
63231	MS KB2785605: Update for Vulnerabilities in Adobe Flash Player in Internet Explorer 10	Nessus	Windows	2012/12/11	2019/12/4	critical
63279	SuSE 10 Security Update : flash-player (ZYPP Patch Number 8395)	Nessus	SuSE Local Security Checks	2012/12/17	2021/1/19	critical
69889	GLSA-201309-06 : Adobe Flash Player: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	2013/9/14	2024/9/17	critical

偵測

搜尋 Plugin

critical

critical

critical

critical

critical