ID de Prueba:	1.3.6.1.4.1.25623.1.1.10.2014.0091
Categoría:	Mageia Linux Local Security Checks
Título:	Mageia: Security Advisory (MGASA-2014-0091)
Resumen:	The remote host is missing an update for the 'flash-player-plugin' package(s) announced via the MGASA-2014-0091 advisory.
Descripción:	Summary: The remote host is missing an update for the 'flash-player-plugin' package(s) announced via the MGASA-2014-0091 advisory. Vulnerability Insight: Adobe Flash Player 11.2.202.341 contains fixes to critical security vulnerabilities found in earlier versions that could cause a crash and potentially allow an attacker to remotely take control of the affected system. This update resolves a stack overflow vulnerability that could result in arbitrary code execution (CVE-2014-0498). This update resolves a memory leak vulnerability that could be used to defeat memory address layout randomization (CVE-2014-0499). This update resolves a double free vulnerability that could result in arbitrary code execution (CVE-2014-0502). Adobe is aware of reports that CVE-2014-0502 is being exploited in the wild. Affected Software/OS: 'flash-player-plugin' package(s) on Mageia 3, Mageia 4. Solution: Please install the updated package(s). CVSS Score: 10.0 CVSS Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2014-0498 http://security.gentoo.org/glsa/glsa-201405-04.xml RedHat Security Advisories: RHSA-2014:0196 http://rhn.redhat.com/errata/RHSA-2014-0196.html SuSE Security Announcement: SUSE-SU-2014:0290 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2014-02/msg00017.html SuSE Security Announcement: openSUSE-SU-2014:0277 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2014-02/msg00014.html SuSE Security Announcement: openSUSE-SU-2014:0278 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2014-02/msg00015.html Common Vulnerability Exposure (CVE) ID: CVE-2014-0499 Common Vulnerability Exposure (CVE) ID: CVE-2014-0502 http://www.alienvault.com/open-threat-exchange/blog/analysis-of-an-attack-exploiting-the-adobe-zero-day-cve-2014-0502/ https://volatility-labs.blogspot.com/2014/04/building-decoder-for-cve-2014-0502.html
Copyright	Copyright (C) 2022 Greenbone AG

Esta es sólo una de 145615 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.