Test ID:	1.3.6.1.4.1.25623.1.0.68944
Category:	FreeBSD Local Security Checks
Title:	FreeBSD Ports: linux-flashplugin
Summary:	The remote host is missing an update to the system; as announced in the referenced advisory.
Description:	Summary: The remote host is missing an update to the system as announced in the referenced advisory. Vulnerability Insight: The following packages are affected: linux-flashplugin linux-f8-flashplugin linux-f10-flashplugin CVE-2011-0558 Integer overflow in Adobe Flash Player before 10.2.152.26 allows attackers to execute arbitrary code via a large array length value in the ActionScript method of the Function class. CVE-2011-0559 Adobe Flash Player before 10.2.152.26 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted parameters to an unspecified ActionScript method that cause a parameter to be used as an object pointer. CVE-2011-0560 Adobe Flash Player before 10.2.152.26 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors. CVE-2011-0561 Adobe Flash Player before 10.2.152.26 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors. CVE-2011-0571 Adobe Flash Player before 10.2.152.26 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors. CVE-2011-0572 Adobe Flash Player before 10.2.152.26 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors. CVE-2011-0573 Adobe Flash Player before 10.2.152.26 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors. CVE-2011-0574 Adobe Flash Player before 10.2.152.26 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors. CVE-2011-0575 Untrusted search path vulnerability in Adobe Flash Player before 10.2.152.26 allows local users to gain privileges via a Trojan horse DLL in the current working directory. CVE-2011-0577 Unspecified vulnerability in Adobe Flash Player before 10.2.152.26 allows remote attackers to execute arbitrary code via a crafted font. CVE-2011-0578 Adobe Flash Player before 10.2.152.26 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors related to a constructor for an unspecified ActionScript3 object and improper type checking. CVE-2011-0607 Adobe Flash Player before 10.2.152.26 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors. CVE-2011-0608 Adobe Flash Player before 10.2.152.26 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors. Solution: Update your system with the appropriate patches or software upgrades. CVSS Score: 9.3 CVSS Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2011-0558 BugTraq ID: 46194 http://www.securityfocus.com/bid/46194 http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=893 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14056 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16129 http://www.redhat.com/support/errata/RHSA-2011-0206.html http://www.redhat.com/support/errata/RHSA-2011-0259.html http://www.redhat.com/support/errata/RHSA-2011-0368.html http://www.securitytracker.com/id?1025055 http://secunia.com/advisories/43267 http://secunia.com/advisories/43292 http://secunia.com/advisories/43340 http://secunia.com/advisories/43351 http://secunia.com/advisories/43747 SuSE Security Announcement: SUSE-SA:2011:009 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2011-02/msg00003.html http://www.vupen.com/english/advisories/2011/0348 http://www.vupen.com/english/advisories/2011/0383 http://www.vupen.com/english/advisories/2011/0402 http://www.vupen.com/english/advisories/2011/0646 XForce ISS Database: flashplayer-actionscript-code-exec(65230) https://exchange.xforce.ibmcloud.com/vulnerabilities/65230 Common Vulnerability Exposure (CVE) ID: CVE-2011-0559 BugTraq ID: 46186 http://www.securityfocus.com/bid/46186 http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=894 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14009 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16231 Common Vulnerability Exposure (CVE) ID: CVE-2011-0560 BugTraq ID: 46188 http://www.securityfocus.com/bid/46188 CERT/CC vulnerability note: VU#812969 http://www.kb.cert.org/vuls/id/812969 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A13429 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16174 Common Vulnerability Exposure (CVE) ID: CVE-2011-0561 BugTraq ID: 46189 http://www.securityfocus.com/bid/46189 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14169 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15930 Common Vulnerability Exposure (CVE) ID: CVE-2011-0571 BugTraq ID: 46190 http://www.securityfocus.com/bid/46190 http://osvdb.org/70915 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14115 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16028 XForce ISS Database: adobe-flash-code-execution(65234) https://exchange.xforce.ibmcloud.com/vulnerabilities/65234 Common Vulnerability Exposure (CVE) ID: CVE-2011-0572 BugTraq ID: 46191 http://www.securityfocus.com/bid/46191 http://osvdb.org/70916 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14021 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15931 XForce ISS Database: adobe-player-code-exec(65235) https://exchange.xforce.ibmcloud.com/vulnerabilities/65235 Common Vulnerability Exposure (CVE) ID: CVE-2011-0573 BugTraq ID: 46192 http://www.securityfocus.com/bid/46192 http://osvdb.org/70917 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14172 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16262 XForce ISS Database: player-unspec-code-execution(65236) https://exchange.xforce.ibmcloud.com/vulnerabilities/65236 Common Vulnerability Exposure (CVE) ID: CVE-2011-0574 BugTraq ID: 46193 http://www.securityfocus.com/bid/46193 http://osvdb.org/70918 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A13988 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15637 XForce ISS Database: flash-player-code-exec(65237) https://exchange.xforce.ibmcloud.com/vulnerabilities/65237 Common Vulnerability Exposure (CVE) ID: CVE-2011-0575 BugTraq ID: 46197 http://www.securityfocus.com/bid/46197 Bugtraq: 20110211 ASPR #2011-02-11-2: Remote Binary Planting in Adobe Flash Player (Google Search) http://www.securityfocus.com/archive/1/516398/100/0/threaded http://osvdb.org/70919 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14095 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16127 XForce ISS Database: adobe-flash-dll-code-exec(65238) https://exchange.xforce.ibmcloud.com/vulnerabilities/65238 Common Vulnerability Exposure (CVE) ID: CVE-2011-0577 BugTraq ID: 46196 http://www.securityfocus.com/bid/46196 http://osvdb.org/70920 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14164 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15754 XForce ISS Database: adobe-fontprasing-code-execution(65239) https://exchange.xforce.ibmcloud.com/vulnerabilities/65239 Common Vulnerability Exposure (CVE) ID: CVE-2011-0578 BugTraq ID: 46195 http://www.securityfocus.com/bid/46195 http://www.zerodayinitiative.com/advisories/ZDI-11-081/ http://osvdb.org/70921 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A13205 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16018 XForce ISS Database: adobe-flashplayer-unspec-ce(65240) https://exchange.xforce.ibmcloud.com/vulnerabilities/65240 Common Vulnerability Exposure (CVE) ID: CVE-2011-0607 BugTraq ID: 46282 http://www.securityfocus.com/bid/46282 http://osvdb.org/70922 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14137 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16194 XForce ISS Database: adobe-player-ce(65241) https://exchange.xforce.ibmcloud.com/vulnerabilities/65241 Common Vulnerability Exposure (CVE) ID: CVE-2011-0608 BugTraq ID: 46283 http://www.securityfocus.com/bid/46283 http://osvdb.org/70923 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14066 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16026 XForce ISS Database: adobe-code-exec(65242) https://exchange.xforce.ibmcloud.com/vulnerabilities/65242
Copyright	Copyright (C) 2011 E-Soft Inc.

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.