The remote Redhat Enterprise Linux 5 / 6 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2015:0052 advisory.

    The flash-plugin package contains a Mozilla Firefox compatible Adobe Flash     Player web browser plug-in.

    This update fixes multiple vulnerabilities in Adobe Flash Player. These     vulnerabilities are detailed in the Adobe Security Bulletin APSB15-01,     listed in the References section.

    Multiple flaws were found in the way flash-plugin displayed certain SWF     content. An attacker could use these flaws to create a specially crafted     SWF file that would cause flash-plugin to crash or, potentially, execute     arbitrary code when the victim loaded a page containing the malicious SWF     content. (CVE-2015-0303, CVE-2015-0306, CVE-2015-0304, CVE-2015-0309,     CVE-2015-0305, CVE-2015-0308)

    This update also fixes multiple information disclosure flaws in     flash-plugin. (CVE-2015-0301, CVE-2015-0302, CVE-2015-0307)

    All users of Adobe Flash Player should install this updated package, which     upgrades Flash Player to version 11.2.202.429.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Adobe Flash Player was updated to 11.2.202.429 (bsc#913057) :

  - APSB15-01, CVE-2015-0301, CVE-2015-0302, CVE-2015-0303,     CVE-2015-0304, CVE-2015-0305, CVE-2015-0306,     CVE-2015-0307, CVE-2015-0308, CVE-2015-0309.

  - Disable flash player on machines without SSE2     (bnc#856386).

More information can be found on http://helpx.adobe.com/security/products/flash-player/apsb15-01.html

Adobe Flash Player was updated to fix several vulnerabilities.

More information can be found at http://helpx.adobe.com/security/products/flash-player/apsb15-01.html .

According to its version, the installation of Adobe Flash Player installed on the remote Mac OS X host is equal or prior to 16.0.0.235.
It is, therefore, affected by the following vulnerabilities :

  - An unspecified improper file validation issue.
    (CVE-2015-0301)

  - An unspecified information disclosure vulnerability,     which can be exploited to capture keystrokes.
    (CVE-2015-0302)

  - Multiple memory corruption vulnerabilities allow an     attacker to execute arbitrary code. (CVE-2015-0303,     CVE-2015-0306)

  - Multiple heap-based buffer overflow vulnerabilities     that can be exploited to execute arbitrary code.
    (CVE-2015-0304, CVE-2015-0309)

  - An unspecified type confusion vulnerability that can     lead to code execution. (CVE-2015-0305)

  - An out-of-bounds read vulnerability that can be     exploited to leak memory addresses. (CVE-2015-0307)

  - A use-after-free vulnerability that results in arbitrary     code execution. (CVE-2015-0308)

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
80544	RHEL 5 / 6 : flash-plugin (RHSA-2015:0052)	Nessus	Red Hat Local Security Checks	2015/1/15	2025/3/21	high
80564	openSUSE Security Update : flash-player (openSUSE-SU-2015:0059-1)	Nessus	SuSE Local Security Checks	2015/1/16	2021/1/19	critical
80565	SuSE 11.3 Security Update : flash-player (SAT Patch Number 10164)	Nessus	SuSE Local Security Checks	2015/1/16	2021/1/6	critical
80487	Flash Player For Mac <= 16.0.0.235 Multiple Vulnerabilities (APSB15-01)	Nessus	MacOS X Local Security Checks	2015/1/13	2019/11/25	critical

检测

插件搜索

high

critical

critical

critical