Test ID:	1.3.6.1.4.1.25623.1.0.57351
Category:	Red Hat Local Security Checks
Title:	RedHat Security Advisory RHSA-2006:0674
Summary:	NOSUMMARY
Description:	Description: The remote host is missing updates announced in advisory RHSA-2006:0674. The flash-plugin package contains a Firefox-compatible Adobe Flash Player browser plug-in. Security issues were discovered in the Adobe Flash Player. It may be possible to execute arbitrary code on a victim's machine if the victim opens a malicious Adobe Flash file. (CVE-2006-3311, CVE-2006-3587, CVE-2006-3588) Users of Adobe Flash Player should upgrade to this updated package, which contains version 7.0.68 and is not vulnerable to this issue. Red Hat would like to thank Adobe for notifying us of these issues. Solution: Please note that this update is available via Red Hat Network. To use Red Hat Network, launch the Red Hat Update Agent with the following command: up2date http://rhn.redhat.com/errata/RHSA-2006-0674.html http://www.adobe.com/support/security/bulletins/apsb06-11.html http://www.redhat.com/security/updates/classification/#critical Risk factor : High CVSS Score: 5.1
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2006-3311 http://lists.apple.com/archives/security-announce/2006/Sep/msg00002.html BugTraq ID: 19980 http://www.securityfocus.com/bid/19980 Bugtraq: 20060912 Computer Terrorism (UK) :: Incident Response Centre - Adobe/Macromedia Flash Player Vulnerability (Google Search) http://www.securityfocus.com/archive/1/445825/100/0/threaded Cert/CC Advisory: TA06-275A http://www.us-cert.gov/cas/techalerts/TA06-275A.html Cert/CC Advisory: TA06-318A http://www.us-cert.gov/cas/techalerts/TA06-318A.html CERT/CC vulnerability note: VU#451380 http://www.kb.cert.org/vuls/id/451380 http://security.gentoo.org/glsa/glsa-200610-02.xml http://www.computerterrorism.com/research/ct12-09-2006.htm Microsoft Security Bulletin: MS06-069 https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-069 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A394 http://www.redhat.com/support/errata/RHSA-2006-0674.html http://securitytracker.com/id?1016829 http://secunia.com/advisories/21865 http://secunia.com/advisories/21901 http://secunia.com/advisories/22054 http://secunia.com/advisories/22187 http://secunia.com/advisories/22268 http://secunia.com/advisories/22882 http://securityreason.com/securityalert/1546 SuSE Security Announcement: SUSE-SA:2006:053 (Google Search) http://www.novell.com/linux/security/advisories/2006_53_flashplayer.html http://www.vupen.com/english/advisories/2006/3573 http://www.vupen.com/english/advisories/2006/3577 http://www.vupen.com/english/advisories/2006/3852 http://www.vupen.com/english/advisories/2006/4507 XForce ISS Database: flashplayer-swf-string-bo(28886) https://exchange.xforce.ibmcloud.com/vulnerabilities/28886 Common Vulnerability Exposure (CVE) ID: CVE-2006-3587 BugTraq ID: 18894 http://www.securityfocus.com/bid/18894 CERT/CC vulnerability note: VU#474593 http://www.kb.cert.org/vuls/id/474593 http://www.fortinet.com/FortiGuardCenter/advisory/FG-2006-20.html https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1050 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A709 http://securitytracker.com/id?1016448 http://secunia.com/advisories/20971 http://www.vupen.com/english/advisories/2006/2702 XForce ISS Database: macromedia-swf-file-code-execution(27601) https://exchange.xforce.ibmcloud.com/vulnerabilities/27601 Common Vulnerability Exposure (CVE) ID: CVE-2006-3588 http://www.fortinet.com/FortiGuardCenter/advisory/FG-2006-21.html http://www.osvdb.org/28733 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A432 http://securitytracker.com/id?1016449 XForce ISS Database: macromedia-swf-dos(27602) https://exchange.xforce.ibmcloud.com/vulnerabilities/27602
Copyright	Copyright (c) 2006 E-Soft Inc. http://www.securityspace.com

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.