Test Kennung:	1.3.6.1.4.1.25623.1.1.10.2014.0091
Kategorie:	Mageia Linux Local Security Checks
Titel:	Mageia: Security Advisory (MGASA-2014-0091)
Zusammenfassung:	The remote host is missing an update for the 'flash-player-plugin' package(s) announced via the MGASA-2014-0091 advisory.
Beschreibung:	Summary: The remote host is missing an update for the 'flash-player-plugin' package(s) announced via the MGASA-2014-0091 advisory. Vulnerability Insight: Adobe Flash Player 11.2.202.341 contains fixes to critical security vulnerabilities found in earlier versions that could cause a crash and potentially allow an attacker to remotely take control of the affected system. This update resolves a stack overflow vulnerability that could result in arbitrary code execution (CVE-2014-0498). This update resolves a memory leak vulnerability that could be used to defeat memory address layout randomization (CVE-2014-0499). This update resolves a double free vulnerability that could result in arbitrary code execution (CVE-2014-0502). Adobe is aware of reports that CVE-2014-0502 is being exploited in the wild. Affected Software/OS: 'flash-player-plugin' package(s) on Mageia 3, Mageia 4. Solution: Please install the updated package(s). CVSS Score: 10.0 CVSS Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2014-0498 http://security.gentoo.org/glsa/glsa-201405-04.xml RedHat Security Advisories: RHSA-2014:0196 http://rhn.redhat.com/errata/RHSA-2014-0196.html SuSE Security Announcement: SUSE-SU-2014:0290 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2014-02/msg00017.html SuSE Security Announcement: openSUSE-SU-2014:0277 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2014-02/msg00014.html SuSE Security Announcement: openSUSE-SU-2014:0278 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2014-02/msg00015.html Common Vulnerability Exposure (CVE) ID: CVE-2014-0499 Common Vulnerability Exposure (CVE) ID: CVE-2014-0502 http://www.alienvault.com/open-threat-exchange/blog/analysis-of-an-attack-exploiting-the-adobe-zero-day-cve-2014-0502/ https://volatility-labs.blogspot.com/2014/04/building-decoder-for-cve-2014-0502.html
Copyright	Copyright (C) 2022 Greenbone AG

Dies ist nur einer von 146377 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.