| Description: | Summary:
The remote host is missing an update to the system
as announced in the referenced advisory.
Vulnerability Insight:
The following packages are affected:
linux-flashplugin
linux-f8-flashplugin
linux-f10-flashplugin
CVE-2010-0209
Adobe Flash Player before 9.0.280 and 10.x before 10.1.82.76, and
Adobe AIR before 2.0.3, allows attackers to execute arbitrary code or
cause a denial of service (memory corruption) via unspecified vectors,
a different vulnerability than CVE-2010-2213, CVE-2010-2214, and
CVE-2010-2216.
CVE-2010-2188
Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and
Adobe AIR before 2.0.2.12610, allows attackers to cause a denial of
service (memory corruption) or possibly execute arbitrary code by
calling the ActionScript native object 2200 connect method multiple
times with different arguments, a different vulnerability than
CVE-2010-2160, CVE-2010-2165, CVE-2010-2166, CVE-2010-2171,
CVE-2010-2175, CVE-2010-2176, CVE-2010-2177, CVE-2010-2178,
CVE-2010-2180, CVE-2010-2182, CVE-2010-2184, and CVE-2010-2187.
CVE-2010-2213
Adobe Flash Player before 9.0.280 and 10.x before 10.1.82.76, and
Adobe AIR before 2.0.3, allows attackers to execute arbitrary code or
cause a denial of service (memory corruption) via unspecified vectors,
a different vulnerability than CVE-2010-0209, CVE-2010-2214, and
CVE-2010-2216.
CVE-2010-2214
Adobe Flash Player before 9.0.280 and 10.x before 10.1.82.76, and
Adobe AIR before 2.0.3, allows attackers to execute arbitrary code or
cause a denial of service (memory corruption) via unspecified vectors,
a different vulnerability than CVE-2010-0209, CVE-2010-2213, and
CVE-2010-2216.
CVE-2010-2215
Adobe Flash Player before 9.0.280 and 10.x before 10.1.82.76, and
Adobe AIR before 2.0.3, allows attackers to trick a user into (1)
selecting a link or (2) completing a dialog, related to a
'click-jacking' issue.
CVE-2010-2216
Adobe Flash Player before 9.0.280 and 10.x before 10.1.82.76, and
Adobe AIR before 2.0.3, allows attackers to execute arbitrary code or
cause a denial of service (memory corruption) via unspecified vectors,
a different vulnerability than CVE-2010-0209, CVE-2010-2213, and
CVE-2010-2214.
Solution:
Update your system with the appropriate patches or
software upgrades.
CVSS Score:
9.3
CVSS Vector:
AV:N/AC:M/Au:N/C:C/I:C/A:C
|
