Vulnerability   
Search   
    Search 219043 CVE descriptions
and 99761 test descriptions,
access 10,000+ cross references.
Tests   CVE   All  

Test ID:1.3.6.1.4.1.25623.1.0.902740
Category:General
Title:Adobe Flash Player Multiple Vulnerabilities September-2011 (Mac OS X)
Summary:This host is installed with Adobe Flash Player and is prone to; multiple vulnerabilities.
Description:Summary:
This host is installed with Adobe Flash Player and is prone to
multiple vulnerabilities.

Vulnerability Insight:
The flaws are due to

- Stack-based buffer overflow in the ActionScript Virtual Machine (AVM)
component, allows remote attackers to execute arbitrary code via
unspecified vectors.

- logic error issue, allows attackers to execute arbitrary code or cause a
denial of service (browser crash) via unspecified vectors.

- security control bypass, allows attackers to bypass intended access
restrictions and obtain sensitive information via unspecified vectors

- logic error vulnerability, allows remote attackers to execute arbitrary
code via crafted streaming media

- Cross-site scripting (XSS) vulnerability, allows remote attackers to
inject arbitrary web script or HTML via a crafted URL.

Vulnerability Impact:
Successful exploitation will let attackers to execute arbitrary code or cause
a denial of service.

Affected Software/OS:
Adobe Flash Player versions prior to 10.3.183.10 on Mac OS X.

Solution:
Upgrade to Adobe Flash Player version 10.3.183.10 or later.

CVSS Score:
9.3

CVSS Vector:
AV:N/AC:M/Au:N/C:C/I:C/A:C

Cross-Ref: BugTraq ID: 49714
BugTraq ID: 49715
BugTraq ID: 49716
BugTraq ID: 49718
BugTraq ID: 49717
BugTraq ID: 49710
Common Vulnerability Exposure (CVE) ID: CVE-2011-2426
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14070
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15366
http://www.redhat.com/support/errata/RHSA-2011-1333.html
http://secunia.com/advisories/48308
SuSE Security Announcement: SUSE-SU-2011:1063 (Google Search)
http://lists.opensuse.org/opensuse-security-announce/2011-09/msg00025.html
Common Vulnerability Exposure (CVE) ID: CVE-2011-2427
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14125
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15950
Common Vulnerability Exposure (CVE) ID: CVE-2011-2428
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A13945
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16181
Common Vulnerability Exposure (CVE) ID: CVE-2011-2429
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14096
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16268
Common Vulnerability Exposure (CVE) ID: CVE-2011-2430
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A13809
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16116
Common Vulnerability Exposure (CVE) ID: CVE-2011-2444
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14050
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15272
CopyrightCopyright (C) 2011 Greenbone Networks GmbH

This is only one of 99761 vulnerability tests in our test suite. Find out more about running a complete security audit.

To run a free test of this vulnerability against your system, register below.




© 1998-2024 E-Soft Inc. All rights reserved.