Adobe 報告：

這些更新可解決會導致當機及可能讓攻擊者控制受影響系統的弱點。

遠端主機受到 GLSA-201309-06 所述弱點影響 (Adobe Flash Player：多個弱點)

在 Adobe Flash Player 中發現多個不明弱點。如需詳細資訊，請檢閱以下提及的 CVE 識別碼。
 影響：

遠端攻擊者可引誘使用者開啟特製的 SWF 內容，並可能藉此以處理程序的權限來執行任意程式碼，或引發拒絕服務情況。此外，遠端攻擊者可能繞過存取限制。
 因應措施：

目前尚無已知的因應措施。

Versions of Flash Player 11.x equal to or prior to 11.5.502.110, or 10.x equal to or prior to 10.3.183.43 are affected by multiple vulnerabilities :

  - An unspecified error exists that can allow a buffer overflow and arbitrary code execution. (CVE-2012-5676)
  - An unspecified error exists that can allow an integer overflow and arbitrary code execution. (CVE-2012-5677)
  - An unspecified error exists that can lead to memory corruption and arbitrary code execution. (CVE-2012-5678)

Versions of Flash Player 11.x equal to or earlier than 11.5.502.110, or 10.x equal to or earlier than 10.3.183.43 are affected by multiple vulnerabilities:

  - An unspecified error exists that can allow a buffer overflow and arbitrary code execution. (CVE-2012-5676)

  - An unspecified error exists that can allow an integer overflow and arbitrary code execution. (CVE-2012-5677)

  - An unspecified error exists that can lead to memory corruption and arbitrary code execution. (CVE-2012-5678)

The remote host has Adobe Flash Player installed. 

Versions of Flash Player 11.x equal to or earlier than 11.5.502.110, or 10.x equal to or earlier than 10.3.183.43 are affected by multiple vulnerabilities:

  - An unspecified error exists that can allow a buffer overflow and arbitrary code execution. (CVE-2012-5676)

  - An unspecified error exists that can allow an integer overflow and arbitrary code execution. (CVE-2012-5677)

  - An unspecified error exists that can lead to memory corruption and arbitrary code execution. (CVE-2012-5678)

Versions of Google Chrome earlier than 23.0.1271.97 are potentially affected by the following vulnerabilities :

  - Use-after-free errors exist related to visibility events and the URL loader. (CVE-2012-5139, CVE-2012-5140)
  - An unspecified error exists related to instantiation of the 'Chromoting' client plugin. (CVE-2012-5141)
  - An unspecified error exists related to history navigation that can lead to application crashes. (CVE-2012-5142)
  - An integer overflow error exists related to the 'PPAPI' image buffers. (CVE-2012-5143)
  - A stack corruption error exists related to 'AAC' decoding. (CVE-2012-5144)
  - The bundled version of Adobe Flash Player contains flaws that can lead to arbitrary code execution. (CVE-2012-5676, CVE-2012-5677, CVE-2012-5678)

ID	名稱	產品	系列	已發布	已更新	嚴重性
63263	FreeBSD：linux-flashplugin -- 多個弱點 (1657a3e6-4585-11e2-a396-10bf48230856)	Nessus	FreeBSD Local Security Checks	2012/12/14	2021/1/6	critical
69889	GLSA-201309-06：Adobe Flash Player：多個弱點	Nessus	Gentoo Local Security Checks	2013/9/14	2024/9/17	critical
6646	Flash Player <= 10.3.183.43 / 11.5.502.110 Multiple Vulnerabilities (APSB12-27)	Nessus Network Monitor	Web Clients	2011/12/17	2019/3/6	high
6645	Flash Player <= 10.3.183.43 / 11.5.502.110 Multiple Vulnerabilities (APSB12-27)	Nessus Network Monitor	Web Clients	2011/12/17	2019/3/6	high
6647	Flash Player <= 10.3.183.43 / 11.5.502.110 Multiple Vulnerabilities (APSB12-27)	Nessus Network Monitor	Web Clients	2011/12/17	2019/3/6	high
800913	Google Chrome < 23.0.1271.97 Multiple Vulnerabilities	Log Correlation Engine	Web Clients	2012/12/13		high

偵測

搜尋 Plugin

critical

critical

high

high

high

high