According to its version, the instance of Flash Player installed on the remote Mac OS X host is 10.x equal to or earlier than 10.3.183.10 or 11.x equal to or earlier than 11.0.1.152.  It is therefore reportedly affected by several critical vulnerabilities :

  - Several unspecified memory corruption errors     exist that could lead to code execution.
    (CVE-2011-2445, CVE-2011-2451, CVE-2011-2452,     CVE-2011-2453, CVE-2011-2454, CVE-2011-2455,     CVE-2011-2459, CVE-2011-2460)

  - An unspecified heap corruption error exists that could     lead to code execution. (CVE-2011-2450)

  - An unspecified buffer overflow error exists that could     lead to code execution. (CVE-2011-2456)

  - An unspecified stack overflow error exists that could     lead to code execution. (CVE-2011-2457)

flash-player update to version 11.1.102.55 to fix the following critical security issues :

CVE-2011-2445 / CVE-2011-2450 / CVE-2011-2451 / CVE-2011-2452 / CVE-2011-2453 / CVE-2011-2454 / CVE-2011-2455 / CVE-2011-2456 / CVE-2011-2457 / CVE-2011-2458 / CVE-2011-2459 / CVE-2011-2460

flash-player update to version 11.1.102.55 to fix the following critical security issues :

CVE-2011-2445, CVE-2011-2450, CVE-2011-2451, CVE-2011-2452, CVE-2011-2453, CVE-2011-2454, CVE-2011-2455, CVE-2011-2456, CVE-2011-2457, CVE-2011-2458, CVE-2011-2459, CVE-2011-2460

The remote Solaris system is missing necessary patches to address security updates :

  - Adobe Flash Player before 10.3.183.11 and 11.x before     11.1.102.55 on Windows, Mac OS X, Linux, and Solaris and     before 11.1.102.59 on Android, and Adobe AIR before     3.1.0.4880, allows attackers to execute arbitrary code     or cause a denial of service (memory corruption) via     unspecified vectors, a different vulnerability than     CVE-2011-2451, CVE-2011-2452, CVE-2011-2453,     CVE-2011-2454, CVE-2011-2455, CVE-2011-2459, and     CVE-2011-2460. (CVE-2011-2445)

  - Adobe Flash Player before 10.3.183.11 and 11.x before     11.1.102.55 on Windows, Mac OS X, Linux, and Solaris and     before 11.1.102.59 on Android, and Adobe AIR before     3.1.0.4880, allows attackers to execute arbitrary code     or cause a denial of service (heap memory corruption)     via unspecified vectors. (CVE-2011-2450)

  - Adobe Flash Player before 10.3.183.11 and 11.x before     11.1.102.55 on Windows, Mac OS X, Linux, and Solaris and     before 11.1.102.59 on Android, and Adobe AIR before     3.1.0.4880, allows attackers to execute arbitrary code     or cause a denial of service (memory corruption) via     unspecified vectors, a different vulnerability than     CVE-2011-2445, CVE-2011-2452, CVE-2011-2453,     CVE-2011-2454, CVE-2011-2455, CVE-2011-2459, and     CVE-2011-2460. (CVE-2011-2451)

  - Adobe Flash Player before 10.3.183.11 and 11.x before     11.1.102.55 on Windows, Mac OS X, Linux, and Solaris and     before 11.1.102.59 on Android, and Adobe AIR before     3.1.0.4880, allows attackers to execute arbitrary code     or cause a denial of service (memory corruption) via     unspecified vectors, a different vulnerability than     CVE-2011-2445, CVE-2011-2451, CVE-2011-2453,     CVE-2011-2454, CVE-2011-2455, CVE-2011-2459, and     CVE-2011-2460. (CVE-2011-2452)

  - Adobe Flash Player before 10.3.183.11 and 11.x before     11.1.102.55 on Windows, Mac OS X, Linux, and Solaris and     before 11.1.102.59 on Android, and Adobe AIR before     3.1.0.4880, allows attackers to execute arbitrary code     or cause a denial of service (memory corruption) via     unspecified vectors, a different vulnerability than     CVE-2011-2445, CVE-2011-2451, CVE-2011-2452,     CVE-2011-2454, CVE-2011-2455, CVE-2011-2459, and     CVE-2011-2460. (CVE-2011-2453)

  - Adobe Flash Player before 10.3.183.11 and 11.x before     11.1.102.55 on Windows, Mac OS X, Linux, and Solaris and     before 11.1.102.59 on Android, and Adobe AIR before     3.1.0.4880, allows attackers to execute arbitrary code     or cause a denial of service (memory corruption) via     unspecified vectors, a different vulnerability than     CVE-2011-2445, CVE-2011-2451, CVE-2011-2452,     CVE-2011-2453, CVE-2011-2455, CVE-2011-2459, and     CVE-2011-2460. (CVE-2011-2454)

  - Adobe Flash Player before 10.3.183.11 and 11.x before     11.1.102.55 on Windows, Mac OS X, Linux, and Solaris and     before 11.1.102.59 on Android, and Adobe AIR before     3.1.0.4880, allows attackers to execute arbitrary code     or cause a denial of service (memory corruption) via     unspecified vectors, a different vulnerability than     CVE-2011-2445, CVE-2011-2451, CVE-2011-2452,     CVE-2011-2453, CVE-2011-2454, CVE-2011-2459, and     CVE-2011-2460. (CVE-2011-2455)

  - Buffer overflow in Adobe Flash Player before 10.3.183.11     and 11.x before 11.1.102.55 on Windows, Mac OS X, Linux,     and Solaris and before 11.1.102.59 on Android, and Adobe     AIR before 3.1.0.4880, allows attackers to execute     arbitrary code via unspecified vectors. (CVE-2011-2456)

  - Stack-based buffer overflow in Adobe Flash Player before     10.3.183.11 and 11.x before 11.1.102.55 on Windows, Mac     OS X, Linux, and Solaris and before 11.1.102.59 on     Android, and Adobe AIR before 3.1.0.4880, allows     attackers to execute arbitrary code via unspecified     vectors. (CVE-2011-2457)

  - Adobe Flash Player before 10.3.183.11 and 11.x before     11.1.102.55 on Windows, Mac OS X, Linux, and Solaris and     before 11.1.102.59 on Android, and Adobe AIR before     3.1.0.4880, when Internet Explorer is used, allows     remote attackers to bypass the cross-domain policy via a     crafted web site. (CVE-2011-2458)

  - Adobe Flash Player before 10.3.183.11 and 11.x before     11.1.102.55 on Windows, Mac OS X, Linux, and Solaris and     before 11.1.102.59 on Android, and Adobe AIR before     3.1.0.4880, allows attackers to execute arbitrary code     or cause a denial of service (memory corruption) via     unspecified vectors, a different vulnerability than     CVE-2011-2445, CVE-2011-2451, CVE-2011-2452,     CVE-2011-2453, CVE-2011-2454, CVE-2011-2455, and     CVE-2011-2460. (CVE-2011-2459)

  - Adobe Flash Player before 10.3.183.11 and 11.x before     11.1.102.55 on Windows, Mac OS X, Linux, and Solaris and     before 11.1.102.59 on Android, and Adobe AIR before     3.1.0.4880, allows attackers to execute arbitrary code     or cause a denial of service (memory corruption) via     unspecified vectors, a different vulnerability than     CVE-2011-2445, CVE-2011-2451, CVE-2011-2452,     CVE-2011-2453, CVE-2011-2454, CVE-2011-2455, and     CVE-2011-2459. (CVE-2011-2460)

The version of Adobe Reader installed on the remote Mac OS X host is prior or equal to 10.1.1 or 9.4.6. It is, therefore, affected by a memory corruption issue related to the Universal 3D (U3D) file format.
A remote attacker can exploit this, by convincing a user to view a maliciously crafted PDF file, to cause an application crash or to execute arbitrary code.

Note that the Adobe Reader X user-specific option to use 'Protected Mode' prevents an exploit of this kind from being executed, but Nessus cannot test for this configuration option.

Adobe Product Security Incident Response Team reports :

Critical vulnerabilities have been identified in Adobe Flash Player 11.0.1.152 and earlier versions for Windows, Macintosh, Linux and Solaris, and Adobe Flash Player 11.0.1.153 and earlier versions for Android.

In addition a patch was released for users of flash10.

The remote Redhat Enterprise Linux 6 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2011:1445 advisory.

    The flash-plugin package contains a Mozilla Firefox compatible Adobe Flash     Player web browser plug-in.

    This update fixes multiple vulnerabilities in Adobe Flash Player. These     vulnerabilities are detailed on the Adobe security page APSB11-28, listed     in the References section.

    Multiple security flaws were found in the way flash-plugin displayed     certain SWF content. An attacker could use these flaws to create a     specially-crafted SWF file that would cause flash-plugin to crash or,     potentially, execute arbitrary code when the victim loaded a page     containing the specially-crafted SWF content. (CVE-2011-2445,     CVE-2011-2450, CVE-2011-2451, CVE-2011-2452, CVE-2011-2453, CVE-2011-2454,     CVE-2011-2455, CVE-2011-2456, CVE-2011-2457, CVE-2011-2459, CVE-2011-2460)

    All users of Adobe Flash Player should install this updated package, which     upgrades Flash Player to version 10.3.183.11.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote host is affected by the vulnerability described in GLSA-201204-07 (Adobe Flash Player: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in Adobe Flash Player.
      Please review the CVE identifiers referenced below for details.
  Impact :

    A remote attacker could entice a user to open a specially crafted SWF       file, possibly resulting in execution of arbitrary code with the       privileges of the process or a Denial of Service condition. Furthermore,       a remote attacker may be able to bypass intended access restrictions,       bypass cross-domain policy, inject arbitrary web script, or obtain       sensitive information.
  Workaround :

    There is no known workaround at this time.

According to its version, the instance of Adobe AIR installed on the remote Windows host is 3.0 or earlier and is reportedly affected by several critical vulnerabilities :

  - Several unspecified memory corruption errors     exist that could lead to code execution.
    (CVE-2011-2445, CVE-2011-2451, CVE-2011-2452,     CVE-2011-2453, CVE-2011-2454, CVE-2011-2455,     CVE-2011-2459, CVE-2011-2460)

  - An unspecified heap corruption error exists that could     lead to code execution. (CVE-2011-2450)

  - An unspecified buffer overflow error exists that could     lead to code execution. (CVE-2011-2456)

  - An unspecified stack overflow error exists that could     lead to code execution. (CVE-2011-2457)

  - An unspecified error related to Internet Explorer can     allow cross-domain policy violations. (CVE-2011-2458)

By tricking a user on the affected system into opening a specially crafted document with Flash content, an attacker could leverage these vulnerabilities to execute arbitrary code remotely on the system subject to the user's privileges.

According to its version, the instance of Adobe AIR installed on the remote Mac OS X host is 3.0 or earlier.  It is therefore reportedly affected by several critical vulnerabilities :

  - Several unspecified memory corruption errors     exist that could lead to code execution.
    (CVE-2011-2445, CVE-2011-2451, CVE-2011-2452,     CVE-2011-2453, CVE-2011-2454, CVE-2011-2455,     CVE-2011-2459, CVE-2011-2460)

  - An unspecified heap corruption error exists that could     lead to code execution. (CVE-2011-2450)

  - An unspecified buffer overflow error exists that could     lead to code execution. (CVE-2011-2456)

  - An unspecified stack overflow error exists that could     lead to code execution. (CVE-2011-2457)

This update provides flash-player 11.1.102.55, which files the following critical security issues :

  - This update resolves a memory corruption vulnerability     that could lead to code execution (CVE-2011-2445).

  - This update resolves a heap corruption vulnerability     that could lead to code execution (CVE-2011-2450).

  - This update resolves a memory corruption vulnerability     that could lead to code execution (CVE-2011-2451).

  - This update resolves a memory corruption vulnerability     that could lead to code execution (CVE-2011-2452).

  - This update resolves a memory corruption vulnerability     that could lead to code execution (CVE-2011-2453).

  - This update resolves a memory corruption vulnerability     that could lead to code execution (CVE-2011-2454).

  - This update resolves a memory corruption vulnerability     that could lead to code execution (CVE-2011-2455).

  - This update resolves a buffer overflow vulnerability     that could lead to code execution (CVE-2011-2456).

  - This update resolves a stack overflow vulnerability that     could lead to code execution (CVE-2011-2457).

  - This update resolves a vulnerability that could lead to     a cross-domain policy bypass (Internet Explorer-only)     (CVE-2011-2458).

  - This update resolves a memory corruption vulnerability     that could lead to code execution (CVE-2011-2459).

  - This update resolves a memory corruption vulnerability     that could lead to code execution (CVE-2011-2460).

flash-player update to version 11.1.102.55 to fix the following critical

The version of HP Systems Insight Manager installed on the remote Windows host is affected by vulnerabilities in the following components :

  - TLS and SSL protocols
  - Apache Tomcat
  - Java
  - Flash Player
  - BlazeDS/GraniteDS
  - Adobe LiveCycle
  - Adobe Flex SDK
  - Systems Insight Manager

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
56875	Flash Player for Mac <= 10.3.183.10 / 11.0.1.152 Multiple Vulnerabilities (APSB11-28)	Nessus	MacOS X Local Security Checks	2011/11/18	2018/7/16	high
57102	SuSE 11.1 Security Update : flash-player (SAT Patch Number 5413)	Nessus	SuSE Local Security Checks	2011/12/13	2021/1/19	critical
75502	openSUSE Security Update : flash-player (openSUSE-SU-2011:1240-1)	Nessus	SuSE Local Security Checks	2014/6/13	2021/1/14	critical
80611	Oracle Solaris Third-Party Patch Update : flash (multiple_vulnerabilities_in_adobe_flashplayer4)	Nessus	Solaris Local Security Checks	2015/1/19	2021/1/14	critical
75840	openSUSE Security Update : flash-player (openSUSE-SU-2011:1240-2)	Nessus	SuSE Local Security Checks	2014/6/13	2021/1/14	critical
57044	Adobe Reader <= 10.1.1 / 9.4.6 U3D Memory Corruption (APSA11-04, APSB11-28, APSB11-30, APSB12-01) (Mac OS X)	Nessus	MacOS X Local Security Checks	2011/12/7	2022/6/8	critical
56803	FreeBSD : linux-flashplugin -- multiple vulnerabilities (0e8e1212-0ce5-11e1-849b-003067b2972c)	Nessus	FreeBSD Local Security Checks	2011/11/14	2021/1/6	critical
56811	RHEL 6 : flash-plugin (RHSA-2011:1445)	Nessus	Red Hat Local Security Checks	2011/11/14	2025/4/14	critical
59623	GLSA-201204-07 : Adobe Flash Player: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	2012/6/21	2022/6/8	critical
56959	Adobe AIR <= 3.0 Multiple Vulnerabilities (APSB11-28)	Nessus	Windows	2011/11/28	2022/4/11	critical
56962	Adobe AIR for Mac <= 3.0 Multiple Vulnerabilities (APSB11-28)	Nessus	MacOS X Local Security Checks	2011/11/28	2018/7/16	high
74525	openSUSE Security Update : flash-player (openSUSE-2011-4)	Nessus	SuSE Local Security Checks	2014/6/13	2021/1/14	critical
75839	openSUSE Security Update : flash-player (openSUSE-SU-2011:1240-1)	Nessus	SuSE Local Security Checks	2014/6/13	2021/1/14	critical
57195	SuSE 10 Security Update : flash-player (ZYPP Patch Number 7832)	Nessus	SuSE Local Security Checks	2011/12/13	2021/1/19	critical
59684	HP Systems Insight Manager < 7.0 Multiple Vulnerabilities	Nessus	Windows	2012/6/15	2022/3/8	critical

检测

插件搜索

high

critical

critical

critical

critical

critical

critical

critical

critical

critical

high

critical

critical

critical

critical