ID de Prueba:	1.3.6.1.4.1.25623.1.0.71540
Categoría:	FreeBSD Local Security Checks
Título:	FreeBSD Ports: linux-f10-flashplugin
Resumen:	The remote host is missing an update to the system; as announced in the referenced advisory.
Descripción:	Summary: The remote host is missing an update to the system as announced in the referenced advisory. Vulnerability Insight: The following package is affected: linux-f10-flashplugin CVE-2012-2034 Adobe Flash Player before 10.3.183.20 and 11.x before 11.3.300.257 on Windows and Mac OS X, before 10.3.183.20 and 11.x before 11.2.202.236 on Linux, before 11.1.111.10 on Android 2.x and 3.x, and before 11.1.115.9 on Android 4.x, and Adobe AIR before 3.3.0.3610, allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2012-2037. CVE-2012-2035 Stack-based buffer overflow in Adobe Flash Player before 10.3.183.20 and 11.x before 11.3.300.257 on Windows and Mac OS X, before 10.3.183.20 and 11.x before 11.2.202.236 on Linux, before 11.1.111.10 on Android 2.x and 3.x, and before 11.1.115.9 on Android 4.x, and Adobe AIR before 3.3.0.3610, allows attackers to execute arbitrary code via unspecified vectors. CVE-2012-2036 Integer overflow in Adobe Flash Player before 10.3.183.20 and 11.x before 11.3.300.257 on Windows and Mac OS X, before 10.3.183.20 and 11.x before 11.2.202.236 on Linux, before 11.1.111.10 on Android 2.x and 3.x, and before 11.1.115.9 on Android 4.x, and Adobe AIR before 3.3.0.3610, allows attackers to execute arbitrary code via unspecified vectors. CVE-2012-2037 Adobe Flash Player before 10.3.183.20 and 11.x before 11.3.300.257 on Windows and Mac OS X, before 10.3.183.20 and 11.x before 11.2.202.236 on Linux, before 11.1.111.10 on Android 2.x and 3.x, and before 11.1.115.9 on Android 4.x, and Adobe AIR before 3.3.0.3610, allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2012-2034. CVE-2012-2038 Adobe Flash Player before 10.3.183.20 and 11.x before 11.3.300.257 on Windows and Mac OS X, before 10.3.183.20 and 11.x before 11.2.202.236 on Linux, before 11.1.111.10 on Android 2.x and 3.x, and before 11.1.115.9 on Android 4.x, and Adobe AIR before 3.3.0.3610, allows attackers to bypass intended access restrictions and obtain sensitive information via unspecified vectors. CVE-2012-2039 Adobe Flash Player before 10.3.183.20 and 11.x before 11.3.300.257 on Windows and Mac OS X, before 10.3.183.20 and 11.x before 11.2.202.236 on Linux, before 11.1.111.10 on Android 2.x and 3.x, and before 11.1.115.9 on Android 4.x, and Adobe AIR before 3.3.0.3610, allows attackers to execute arbitrary code or cause a denial of service (NULL pointer dereference) via unspecified vectors. CVE-2012-2040 Untrusted search path vulnerability in the installer in Adobe Flash Player before 10.3.183.20 and 11.x before 11.3.300.257 on Windows and Mac OS X, before 10.3.183.20 and 11.x before 11.2.202.236 on Linux, before 11.1.111.10 on Android 2.x and 3.x, and before 11.1.115.9 on Android 4.x, and Adobe AIR before 3.3.0.3610, allows local users to gain privileges via a Trojan horse executable file in an unspecified directory. Solution: Update your system with the appropriate patches or software upgrades. CVSS Score: 9.3 CVSS Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2012-2034 RedHat Security Advisories: RHSA-2012:0722 http://rhn.redhat.com/errata/RHSA-2012-0722.html SuSE Security Announcement: SUSE-SU-2012:0724 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2012-06/msg00007.html SuSE Security Announcement: openSUSE-SU-2012:0723 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2012-06/msg00006.html Common Vulnerability Exposure (CVE) ID: CVE-2012-2035 Common Vulnerability Exposure (CVE) ID: CVE-2012-2036 Common Vulnerability Exposure (CVE) ID: CVE-2012-2037 Common Vulnerability Exposure (CVE) ID: CVE-2012-2038 Common Vulnerability Exposure (CVE) ID: CVE-2012-2039 Common Vulnerability Exposure (CVE) ID: CVE-2012-2040
Copyright	Copyright (C) 2012 E-Soft Inc.

Esta es sólo una de 145615 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.