ID de Prueba:	1.3.6.1.4.1.25623.1.1.10.2014.0169
Categoría:	Mageia Linux Local Security Checks
Título:	Mageia: Security Advisory (MGASA-2014-0169)
Resumen:	The remote host is missing an update for the 'flash-player-plugin' package(s) announced via the MGASA-2014-0169 advisory.
Descripción:	Summary: The remote host is missing an update for the 'flash-player-plugin' package(s) announced via the MGASA-2014-0169 advisory. Vulnerability Insight: Adobe Flash Player 11.2.202.350 contains fixes to critical security vulnerabilities found in earlier versions that could cause a crash and potentially allow an attacker to remotely take control of the affected system. This update resolves a use-after-free vulnerability that could result in arbitrary code execution (CVE-2014-0506). This update resolves a buffer overflow vulnerability that could result in arbitrary code execution (CVE-2014-0507). This update resolves a security bypass vulnerability that could lead to information disclosure (CVE-2014-0508). This update resolves a cross-site-scripting vulnerability (CVE-2014-0509). Affected Software/OS: 'flash-player-plugin' package(s) on Mageia 3, Mageia 4. Solution: Please install the updated package(s). CVSS Score: 10.0 CVSS Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2014-0506 http://security.gentoo.org/glsa/glsa-201405-04.xml http://twitter.com/thezdi/statuses/443886338077495296 http://www.pwn2own.com/2014/03/pwn2own-results-for-wednesday-day-one/ RedHat Security Advisories: RHSA-2014:0380 http://rhn.redhat.com/errata/RHSA-2014-0380.html SuSE Security Announcement: SUSE-SU-2014:0535 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2014-04/msg00012.html SuSE Security Announcement: openSUSE-SU-2014:0520 (Google Search) http://lists.opensuse.org/opensuse-updates/2014-04/msg00036.html SuSE Security Announcement: openSUSE-SU-2014:0549 (Google Search) http://lists.opensuse.org/opensuse-updates/2014-04/msg00050.html Common Vulnerability Exposure (CVE) ID: CVE-2014-0507 BugTraq ID: 66701 http://www.securityfocus.com/bid/66701 http://www.securitytracker.com/id/1030035 Common Vulnerability Exposure (CVE) ID: CVE-2014-0508 Common Vulnerability Exposure (CVE) ID: CVE-2014-0509 BugTraq ID: 66703 http://www.securityfocus.com/bid/66703
Copyright	Copyright (C) 2022 Greenbone AG

Esta es sólo una de 145615 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.