Test Kennung:	1.3.6.1.4.1.25623.1.1.10.2014.0169
Kategorie:	Mageia Linux Local Security Checks
Titel:	Mageia: Security Advisory (MGASA-2014-0169)
Zusammenfassung:	The remote host is missing an update for the 'flash-player-plugin' package(s) announced via the MGASA-2014-0169 advisory.
Beschreibung:	Summary: The remote host is missing an update for the 'flash-player-plugin' package(s) announced via the MGASA-2014-0169 advisory. Vulnerability Insight: Adobe Flash Player 11.2.202.350 contains fixes to critical security vulnerabilities found in earlier versions that could cause a crash and potentially allow an attacker to remotely take control of the affected system. This update resolves a use-after-free vulnerability that could result in arbitrary code execution (CVE-2014-0506). This update resolves a buffer overflow vulnerability that could result in arbitrary code execution (CVE-2014-0507). This update resolves a security bypass vulnerability that could lead to information disclosure (CVE-2014-0508). This update resolves a cross-site-scripting vulnerability (CVE-2014-0509). Affected Software/OS: 'flash-player-plugin' package(s) on Mageia 3, Mageia 4. Solution: Please install the updated package(s). CVSS Score: 10.0 CVSS Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2014-0506 http://security.gentoo.org/glsa/glsa-201405-04.xml http://twitter.com/thezdi/statuses/443886338077495296 http://www.pwn2own.com/2014/03/pwn2own-results-for-wednesday-day-one/ RedHat Security Advisories: RHSA-2014:0380 http://rhn.redhat.com/errata/RHSA-2014-0380.html SuSE Security Announcement: SUSE-SU-2014:0535 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2014-04/msg00012.html SuSE Security Announcement: openSUSE-SU-2014:0520 (Google Search) http://lists.opensuse.org/opensuse-updates/2014-04/msg00036.html SuSE Security Announcement: openSUSE-SU-2014:0549 (Google Search) http://lists.opensuse.org/opensuse-updates/2014-04/msg00050.html Common Vulnerability Exposure (CVE) ID: CVE-2014-0507 BugTraq ID: 66701 http://www.securityfocus.com/bid/66701 http://www.securitytracker.com/id/1030035 Common Vulnerability Exposure (CVE) ID: CVE-2014-0508 Common Vulnerability Exposure (CVE) ID: CVE-2014-0509 BugTraq ID: 66703 http://www.securityfocus.com/bid/66703
Copyright	Copyright (C) 2022 Greenbone AG

Dies ist nur einer von 145615 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.