The remote host is missing KB3024663. It is, therefore, affected by the following vulnerabilities :

  - An unspecified improper file validation issue.
    (CVE-2015-0301)

  - An unspecified information disclosure vulnerability,     which could be exploited to capture keystrokes.
    (CVE-2015-0302)

  - Multiple memory corruption vulnerabilities that allow an     attacker to execute arbitrary code. (CVE-2015-0303,     CVE-2015-0306)

  - Multiple heap-based buffer overflow vulnerabilities     that could be exploited to execute arbitrary code.
    (CVE-2015-0304, CVE-2015-0309)

  - An unspecified type confusion vulnerability that could     lead to code execution. (CVE-2015-0305)

  - An out-of-bounds read vulnerability that could be     exploited to leak memory addresses. (CVE-2015-0307)

  - A use-after-free vulnerability that can result in     arbitrary code execution. (CVE-2015-0308)

Adobe Flash Player was updated to 11.2.202.440 (bsc#914463) :

  - APSA15-01, CVE-2015-0311

  - Update of flashplayer (executable binary) for i386 is     not available. This binary was disabled.

  - Security update to 11.2.202.438 (bsc#914333) :

  - APSB15-02, CVE-2015-0310

  - Security update to 11.2.202.429 (bsc#913057) :

  - APSB15-01, CVE-2015-0301, CVE-2015-0302, CVE-2015-0303,     CVE-2015-0304, CVE-2015-0305, CVE-2015-0306,     CVE-2015-0307, CVE-2015-0308, CVE-2015-0309.

  - Disable flash player on machines without SSE2     (bnc#856386).

  - Remove outdated README and keep only up-to-date     readme.txt.

The remote host is affected by the vulnerability described in GLSA-201502-02 (Adobe Flash Player: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in Adobe Flash Player.
      Please review the CVE identifiers referenced below for details.
  Impact :

    A remote attacker could possibly execute arbitrary code with the       privileges of the process, cause a Denial of Service condition, obtain       sensitive information or bypass security restrictions.
  Workaround :

    There is no known workaround at this time.

According to its version, the Adobe AIR installed on the remote Mac OS X host is equal or prior to 15.0.0.356. It is, therefore, affected by the following vulnerabilities :

  - An unspecified improper file validation issue.
    (CVE-2015-0301)

  - An unspecified information disclosure vulnerability,     which can be exploited to capture keystrokes.
    (CVE-2015-0302)

  - Multiple memory corruption vulnerabilities allow an     attacker to execute arbitrary code. (CVE-2015-0303,     CVE-2015-0306)

  - Multiple heap-based buffer overflow vulnerabilities     that can be exploited to execute arbitrary code.
    (CVE-2015-0304, CVE-2015-0309)

  - An unspecified type confusion vulnerability that can     lead to code execution. (CVE-2015-0305)

  - An out-of-bounds read vulnerability that can be     exploited to leak memory addresses. (CVE-2015-0307)

  - A use-after-free vulnerability that results in arbitrary     code execution. (CVE-2015-0308)

ID	名稱	產品	系列	已發布	已更新	嚴重性
80489	MS KB3024663: Update for Vulnerabilities in Adobe Flash Player in Internet Explorer	Nessus	Windows	2015/1/13	2019/11/25	critical
81098	openSUSE Security Update : flash-player (openSUSE-SU-2015:0174-1)	Nessus	SuSE Local Security Checks	2015/1/30	2022/5/25	critical
81225	GLSA-201502-02 : Adobe Flash Player: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	2015/2/9	2022/5/25	critical
80486	Adobe AIR for Mac <= 15.0.0.356 Multiple Vulnerabilities (APSB15-01)	Nessus	MacOS X Local Security Checks	2015/1/13	2019/11/25	critical

偵測

搜尋 Plugin

critical

critical

critical

critical