The version of Adobe Flash Player installed on the remote Windows host is prior or equal to version 20.0.0.306. It is, therefore, affected by multiple vulnerabilities :

  - Multiple integer overflow conditions exist that allow an     attacker to execute arbitrary code. (CVE-2016-0963,     CVE-2016-0993, CVE-2016-1010)

  - Multiple use-after-free errors exist that allow an     attacker to execute arbitrary code. (CVE-2016-0987,     CVE-2016-0988, CVE-2016-0990, CVE-2016-0991,     CVE-2016-0994, CVE-2016-0995, CVE-2016-0996,     CVE-2016-0997, CVE-2016-0998, CVE-2016-0999,     CVE-2016-1000)

  - A heap overflow condition exists that allows an attacker     to execute arbitrary code. (CVE-2016-1001)

  - Multiple memory corruption issues exist that allow an     attacker to execute arbitrary code. (CVE-2016-0960,     CVE-2016-0961, CVE-2016-0962, CVE-2016-0986,     CVE-2016-0989, CVE-2016-0992, CVE-2016-1002,     CVE-2016-1005)

The remote Windows host is missing KB3144756. It is, therefore, affected by multiple vulnerabilities :

  - Multiple integer overflow conditions exist that allow an     attacker to execute arbitrary code. (CVE-2016-0963,     CVE-2016-0993, CVE-2016-1010)

  - Multiple use-after-free errors exist that allow an     attacker to execute arbitrary code. (CVE-2016-0987,     CVE-2016-0988, CVE-2016-0990, CVE-2016-0991,     CVE-2016-0994, CVE-2016-0995, CVE-2016-0996,     CVE-2016-0997, CVE-2016-0998, CVE-2016-0999,     CVE-2016-1000)

  - A heap overflow condition exists that allows an attacker     to execute arbitrary code. (CVE-2016-1001)

  - Multiple memory corruption issues exist that allow an     attacker to execute arbitrary code. (CVE-2016-0960,     CVE-2016-0961, CVE-2016-0962, CVE-2016-0986,     CVE-2016-0989, CVE-2016-0992, CVE-2016-1002,     CVE-2016-1005)

The version of Adobe AIR installed on the remote Mac OS X host is prior or equal to version 20.0.0.260. It is, therefore, affected by multiple vulnerabilities :

  - Multiple integer overflow conditions exist that allow an     attacker to execute arbitrary code. (CVE-2016-0963,     CVE-2016-0993, CVE-2016-1010)

  - Multiple use-after-free errors exist that allow an     attacker to execute arbitrary code. (CVE-2016-0987,     CVE-2016-0988, CVE-2016-0990, CVE-2016-0991,     CVE-2016-0994, CVE-2016-0995, CVE-2016-0996,     CVE-2016-0997, CVE-2016-0998, CVE-2016-0999,     CVE-2016-1000)

  - A heap overflow condition exists that allows an attacker     to execute arbitrary code. (CVE-2016-1001)

  - Multiple memory corruption issues exist that allow an     attacker to execute arbitrary code. (CVE-2016-0960,     CVE-2016-0961, CVE-2016-0962, CVE-2016-0986,     CVE-2016-0989, CVE-2016-0992, CVE-2016-1002,     CVE-2016-1005)

The remote host is affected by the vulnerability described in GLSA-201603-07 (Adobe Flash Player: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in Adobe Flash Player.
      Please review the CVE identifiers referenced below for details.
  Impact :

    A remote attacker could possibly execute arbitrary code with the       privileges of the process, cause a Denial of Service condition, obtain       sensitive information, or bypass security restrictions.
  Workaround :

    There is no known workaround at this time.

ID	名稱	產品	系列	已發布	已更新	嚴重性
89834	Adobe Flash Player <= 20.0.0.306 Multiple Vulnerabilities (APSB16-08)	Nessus	Windows	2016/3/11	2023/4/25	high
89835	MS16-036: Security Update for Adobe Flash Player (3144756)	Nessus	Windows : Microsoft Bulletins	2016/3/11	2023/4/25	high
89869	Adobe AIR for Mac <= 20.0.0.260 Multiple Vulnerabilities (APSB16-08)	Nessus	MacOS X Local Security Checks	2016/3/11	2023/4/25	high
89900	GLSA-201603-07 : Adobe Flash Player: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	2016/3/14	2022/5/25	critical

偵測

搜尋 Plugin

high

high

high

critical