Test ID:	1.3.6.1.4.1.25623.1.0.71540
Category:	FreeBSD Local Security Checks
Title:	FreeBSD Ports: linux-f10-flashplugin
Summary:	The remote host is missing an update to the system; as announced in the referenced advisory.
Description:	Summary: The remote host is missing an update to the system as announced in the referenced advisory. Vulnerability Insight: The following package is affected: linux-f10-flashplugin CVE-2012-2034 Adobe Flash Player before 10.3.183.20 and 11.x before 11.3.300.257 on Windows and Mac OS X, before 10.3.183.20 and 11.x before 11.2.202.236 on Linux, before 11.1.111.10 on Android 2.x and 3.x, and before 11.1.115.9 on Android 4.x, and Adobe AIR before 3.3.0.3610, allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2012-2037. CVE-2012-2035 Stack-based buffer overflow in Adobe Flash Player before 10.3.183.20 and 11.x before 11.3.300.257 on Windows and Mac OS X, before 10.3.183.20 and 11.x before 11.2.202.236 on Linux, before 11.1.111.10 on Android 2.x and 3.x, and before 11.1.115.9 on Android 4.x, and Adobe AIR before 3.3.0.3610, allows attackers to execute arbitrary code via unspecified vectors. CVE-2012-2036 Integer overflow in Adobe Flash Player before 10.3.183.20 and 11.x before 11.3.300.257 on Windows and Mac OS X, before 10.3.183.20 and 11.x before 11.2.202.236 on Linux, before 11.1.111.10 on Android 2.x and 3.x, and before 11.1.115.9 on Android 4.x, and Adobe AIR before 3.3.0.3610, allows attackers to execute arbitrary code via unspecified vectors. CVE-2012-2037 Adobe Flash Player before 10.3.183.20 and 11.x before 11.3.300.257 on Windows and Mac OS X, before 10.3.183.20 and 11.x before 11.2.202.236 on Linux, before 11.1.111.10 on Android 2.x and 3.x, and before 11.1.115.9 on Android 4.x, and Adobe AIR before 3.3.0.3610, allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2012-2034. CVE-2012-2038 Adobe Flash Player before 10.3.183.20 and 11.x before 11.3.300.257 on Windows and Mac OS X, before 10.3.183.20 and 11.x before 11.2.202.236 on Linux, before 11.1.111.10 on Android 2.x and 3.x, and before 11.1.115.9 on Android 4.x, and Adobe AIR before 3.3.0.3610, allows attackers to bypass intended access restrictions and obtain sensitive information via unspecified vectors. CVE-2012-2039 Adobe Flash Player before 10.3.183.20 and 11.x before 11.3.300.257 on Windows and Mac OS X, before 10.3.183.20 and 11.x before 11.2.202.236 on Linux, before 11.1.111.10 on Android 2.x and 3.x, and before 11.1.115.9 on Android 4.x, and Adobe AIR before 3.3.0.3610, allows attackers to execute arbitrary code or cause a denial of service (NULL pointer dereference) via unspecified vectors. CVE-2012-2040 Untrusted search path vulnerability in the installer in Adobe Flash Player before 10.3.183.20 and 11.x before 11.3.300.257 on Windows and Mac OS X, before 10.3.183.20 and 11.x before 11.2.202.236 on Linux, before 11.1.111.10 on Android 2.x and 3.x, and before 11.1.115.9 on Android 4.x, and Adobe AIR before 3.3.0.3610, allows local users to gain privileges via a Trojan horse executable file in an unspecified directory. Solution: Update your system with the appropriate patches or software upgrades. CVSS Score: 9.3 CVSS Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2012-2034 RedHat Security Advisories: RHSA-2012:0722 http://rhn.redhat.com/errata/RHSA-2012-0722.html SuSE Security Announcement: SUSE-SU-2012:0724 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2012-06/msg00007.html SuSE Security Announcement: openSUSE-SU-2012:0723 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2012-06/msg00006.html Common Vulnerability Exposure (CVE) ID: CVE-2012-2035 Common Vulnerability Exposure (CVE) ID: CVE-2012-2036 Common Vulnerability Exposure (CVE) ID: CVE-2012-2037 Common Vulnerability Exposure (CVE) ID: CVE-2012-2038 Common Vulnerability Exposure (CVE) ID: CVE-2012-2039 Common Vulnerability Exposure (CVE) ID: CVE-2012-2040
Copyright	Copyright (C) 2012 E-Soft Inc.

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.